Port 22

~ 23 Dec 2021 ~

Fisher Price's Bluetooth reboot of pre-school play phone has adult privacy flaw

Alibaba Cloud slapped by Chinese ministry for mishandling Log4j

IoT SAFE An Innovative Way to Secure IoT

CISA, FBI and NSA Publish Joint Advisory and Scanner for Log4j Vulnerabilities

~ 22 Dec 2021 ~

4-Year-Old Bug in Azure App Service Exposed Hundreds of Source Code Repositories

Researchers Disclose Unpatched Vulnerabilities in Microsoft Teams Software

Microsoft Customer Source Code Exposed via Azure App Service Bug

Nearly 50% of People Will Abandon Sites Prohibiting Password Reuse

CISA's New Log4j Scanner Aims to Find Vulnerable Apps

Log4j Reveals Cybersecurity's Dirty Little Secret

Stolen Bitcoins Returned

Why We Need to Consolidate Digital Identity Management Before Zero Trust

Future of Identity-Based Security: All-in-One Platforms or Do-It-Yourself Solutions?

This holiday season, give your children the gift of cybersecurity awareness

Choosing Christmas gifts for kids: Squid Game and Huggy Wuggy are trending

China suspends deal with Alibaba for not sharing Log4j 0-day first with the government

Of course a Bluetooth-using home COVID test was cracked to fake results

~ 21 Dec 2021 ~

New Exploit Lets Malware Attackers Bypass Patch for Critical Microsoft MSHTML Flaw

Active Directory Bugs Could Let hackers Take Over Windows Domain Controllers

UK Security Agency Shares 225M Passwords With 'Have I Been Pwned'

Meta Files Federal Lawsuit Against Phishing Operators

How to tackle hybrid cloud security and DevSecOps

93% of Tested Networks Vulnerable to Breach, Pen Testers Find

How Modern Log Management Strengthens Enterprises Security Posture

Preemptive Strategies to Stop Log4j and Its Variants

Submission to the Toronto Police Services Boards Use of New Artificial Intelligence Technologies Policy

The Future of Ransomware

Belgian defence ministry admits attackers accessed its computer network by exploiting Log4j vulnerability

How is Zero Trust Evolving to be More Continuous in Verifying Trust?

Fresenius Kabi Agilia Connect Infusion System

mySCADA myPRO

Horner Automation Cscape EnvisionRV

WECON LeviStudioU

Emerson DeltaV

UK National Crime Agency finds 225 million previously unexposed passwords

Tropic Trooper Cyber Espionage Hackers Targeting Transportation Sector

Top 7 common Cybersecurity Myths Busted

Secret Backdoors Found in German-made Auerswald VoIP System

~ 20 Dec 2021 ~

Meta Sues Hackers Behind Facebook, WhatsApp and Instagram Phishing Attacks

Russian National Extradited for Illegal Hacking & Trading

New Log4j Attack Vector Discovered

US bags Russian accused of stealing millions after stealing per-release financial filings

Brillio Acquires Cedrus Digital to Strengthen Their Digital Transformation Service Capabilities

NetSPI Adds IoT Penetration Testing to its Suite of Offensive Security Services

SAIC Launches Rugged Apps to Provide Secure Commercial Apps to Government Users

BlackBerry Launches New Managed Extended Detection and Response (XDR) Service

SecurityScorecard Research Reveals Cyber Vulnerabilities Pose a Threat to U.S. Maritime Security

Trend Micro Crowns Champions of 2021 Capture the Flag Competition

Reblaze Appoints New CEO

Four Out of Five Organizations Are Increasing Cybersecurity Budgets for 2022

Police National Computer not pwned by Clop ransomware crims, insists Home Office

Answering Log4Shell-related questions

More on NSO Group and Cytrox: Two Cyberweapons Arms Manufacturers

Zero Trust Shouldnt Mean Zero Trust in Employees

Lights Out: Cyberattacks Shut Down Building Automation Systems

Dont forget to unplug your devices before you leave for the holidays!

How and why do we attack our own Anti-Spam?

How to keep on top of cloud security best practices

New Mobile Network Vulnerabilities Affect All Cellular Generations Since 2G

VMware 2FA flaw can divulge that vital second credential to malicious actors

How to see if cybersecurity of your organization is in check for the New Year

Experts Discover Backdoor Deployed on the U.S. Federal Agency's Network

~ 19 Dec 2021 ~

Over 500,000 Android Users Downloaded a New Joker Malware App from Play Store

Bad things come in threes: Apache reveals <i>another</i> Log4J bug

~ 18 Dec 2021 ~

Buckle Up for More Log4j Madness

US distrust of Huawei linked in part to malicious software update in 2012

New Local Attack Vector Expands the Attack Surface of Log4j Vulnerability

Apache Issues 3rd Patch to Fix New High-Severity Log4j Vulnerability

~ 17 Dec 2021 ~

Friday Squid Blogging: UK Recognizes Squid as Sentient Beings

CISA issues emergency directive to fix Log4j vulnerability

How Risky Is the Log4J Vulnerability?

Meta Acts Against 7 Entities Found Spying on 50,000 Users

Executive Partnerships Are Critical for Cybersecurity Success

Week in security with Tony Anscombe

Timely Questions for Log4j Response Now And for the Future

PseudoManuscrypt Malware Targeted Government & ICS Systems in 2021

Time to Reset the Idea of Zero Trust

CISA Issues Emergency Directive on Log4j

RAF shoots down 'terrorist drone' over US-owned special ops base in Syria

Is Data Security Worthless if the Data Life Cycle Lacks Clarity?

Facebook Bans 7 'Cyber Mercenary' Companies for Spying on 50,000 Users

Over Log4j? VMware has another critical flaw for you to patch

New PseudoManuscrypt Malware Infected Over 35,000 Computers in 2021

How to Prevent Customer Support Help Desk Fraud Using VPN and Other Tools

Facebook locks out 1,500 fake accounts used by cyber-spy firms to snoop on people, alerts 50k potential targets

Mobile App Developers Keep Fraudulent Traffic at Bay with Anti-Fraud API

~ 16 Dec 2021 ~

New Phorpiex Botnet Variant Steals Half a Million Dollars in Cryptocurrency

Why Log4j Mitigation Is Fraught With Challenges

Siemens SINUMERIK Edge

Meta Ousts 7 Surveillance-for-Hire Operations From Its Platforms

Phorpiex Botnet Variant Spread Across 96 Countries

The Next Wave of Log4J Attacks Will Be Brutal

PEGASUS PREDATOR: Cytrox

Pegasus vs. Predator: Dissidents Doubly-Infected iPhone Reveals Cytrox Mercenary Spyware

Why ransomware attacks happen out of hours or during the holidays

Log4Shell: The Big Picture

NY Man Pleads Guilty in $20 Million SIM Swap Theft

East Londoners nicked under Computer Misuse Act after NHS vaccine passport app sprouted clump of fake entries

More Log4j News

Dear Congress: It's Complicated. Please Consider This When Crafting New Cybersecurity Legislation