Port 22

~ 3 Dec 2021 ~

Netgear router flaws exploitable with authentication ... like the default creds on Netgear's website

Week in security with Tony Anscombe

Scammers exploit Omicron fears in new COVID19 phishing campaign

USB Devices the Common Denominator in All Attacks on Air-Gapped Systems

An Insider's Account of Disclosing Vulnerabilities

Testing Faraday Cages

Researchers Detail How Pakistani Hackers Targeting Indian and Afghan Governments

New Malvertising Campaigns Spreading Backdoors, Malicious Chrome Extensions

Why Everyone Needs to Take the Latest CISA Directive Seriously

New Payment Data Sealing Malware Hides in Nginx Process on Linux Servers

~ 2 Dec 2021 ~

A Software Bug Let Hackers Drain $31M From a Crypto Service

Ransomware, Carding, and Initial Access Brokers: Group-IB Presents Report on Trending Crimes

Darktrace Reports 30% More Ransomware Attacks Targeting Organizations During the Holiday Period

BadgerDAO DeFi defunded as hackers apparently nab millions in crypto tokens

Remote Browser Isolation Stars in Content Protection Role

CISA Warns of Actively Exploited Critical Zoho ManageEngine ServiceDesk Vulnerability

Top 5 Reasons to Get 'SASE' With Security

Planned Parenthood LA Breach Compromises 400,000 Patients' Data

Develop 'Foursight' Keep Your Post-COVID Transformation on Track

Structured threat hunting: One way Microsoft Threat Experts prioritizes customer defense

Facebook Will Force More At-Risk Accounts to Use Two-Factor

Key Characteristics of Malicious Domains: Report

Behind the unprecedented effort to protect customers against the NOBELIUM nation-state attack

When Will a Cloud Infrastructure Heavyweight Launch a SASE?

Ubiquiti Developer Charged With Extortion, Causing 2020 Breach

Breaking the Black Mirror and Other Lessons From Day of Shecurity

Smart Contract Bug Results in $31 Million Loss

Schneider Electric SESU

Johnson Controls Entrapass

Launching ESET Research Podcast: A peek behind the scenes of ESET discoveries

Distributed Data Systems WebHMI

Hitachi Energy RTU500 series BCI

Hitachi Energy Relion 670/650/SAM600-IO

Hitachi Energy APM Edge

Hitachi Energy PCM600 Update Manager

Hitachi Energy RTU500 series

New UK product security law won't be undercut by rogue traders upping and vanishing, government boasts

European Cybercrime Centre confident it's kicked credit card crims again

Meta Expands Facebook Protect Program to Activists, Journalists, Government Officials

Three key ransomware actors changed jobs on October 18 the same day REvil went dark

Let there be light: Ensuring visibility across the entire API lifecycle

Researches Detail 17 Malicious Frameworks Used to Attack Air-Gapped Networks

~ 1 Dec 2021 ~

Researchers Warn Iranian Users of Widespread SMS Phishing Campaigns

Military Vets Share Lessons That Helped Them Build Infosec Startups

APT Groups Adopt New Phishing Method. Will Cybercriminals Follow?

Russian Man Sentenced to 60 Months in Prison for Running 'Bulletproof' Hosting for Cybercrime

Neustar Security Services Spins Out as Own Company

VMware Carbon Black MDR Helps Analysts Respond to Attacks

New Ransomware Variant Could Become Next Big Threat

Russian Man Gets 60 Months Jail for Providing Bulletproof Hosting to Cyber Criminals

Critical Bug in Mozillas NSS Crypto Library Potentially Affects Several Other Software

Rewriting your disaster recovery plan might just save your companyand could transform it

CyCognito Raises $100 Million Series C Funding

ReliaQuest Valued At More Than $1 Billion Following Growth Round Led by KKR

CISA Names 23 Members to New Cybersecurity Advisory Committee

How Will Cyber Threats Impact the Beijing Winter Olympics?

CyCognito Secures $100M to Accelerate Next Evolution of Attack Surface Management

The Cyber Threats Facing Retailers This Holiday Shopping Season

Singapore and UK ink digital trade agreements at Future Tech Forum in London

Pension cold-calling financial services biz cops largest ever fine from UK data watchdog

Researchers Have a Method to Spot Reddits State-Backed Trolls

The Matrix Is the Best Hacker Movie

Jumping the air gap: 15 years of nationstate effort

UK watchdog's punishment for Blackbaud, Easyjet, other big privacy lawbreakers was slap on the wrist in private

New EwDoor Botnet Targeting Unpatched AT&T Network Edge Devices

UK intel chief says MI6 must outsource innovation and James Bond's in-house 'Q' is nonsense

Hackers Increasingly Using RTF Template Injection Technique in Phishing Attacks

Hacker Jailed for Stealing Millions of Dollars in Cryptocurrencies by SIM Hijacking

~ 30 Nov 2021 ~

Legal Cases and Privacy Rulings Aim to Curtail Facial Biometrics

HP Issues Firmware Updates for Printer Product Vulnerabilities

Whats the Difference Between SASE and SD-WAN?

Malicious Google Play Apps Stole User Banking Info

Twitter Bans Users From Posting Private Media Without a Person's Consent

Attacker Sentenced in Multimillion-Dollar SIM Hijacking Scheme

It's the flu season FluBot, that is: Surge of info-stealing Android malware detected

Government-Industry Cooperation May Be the Most Potent Ransomware Antidote

Visiting a booby-trapped webpage could give attackers code execution privileges on HP network printers

Ransomware vs. Cities: A Cyber War

Finding Your Niche in Cybersecurity

Leaked footage shows British F-35B falling off HMS Queen Elizabeth and pilot's death-defying ejection

Lloyd's of London suggests insurers should not cover 'retaliatory cyber operations' between nation states

Xylem Aanderaa GeoView

Mitsubishi Electric MELSEC and MELIPC Series

Delta Electronics CNCSoft

Johnson Controls CEM Systems AC2000

Hitachi Energy Retail Operations and CSB Software

APT annual review 2021

Winter is coming with a blizzard of live and virtual SANS Institute events

Intel is Maintaining Legacy Technology for Security Research

New Hub for Lean IT Security Teams

Critical Wormable Security Flaw Found in Several HP Printer Models

Panasonic admits intruders were inside its servers for months

Panasonic Suffers Data Breach After Hackers Hack Into Its Network

Unpatched Unauthorized File Read Vulnerability Affects Microsoft Windows OS

WIRTE Hacker Group Targets Government, Law, Financial Entities in Middle East

~ 29 Nov 2021 ~

Armis Now Valued at $3.4B

Stellar Cyber Raises $38M Series B to Address Need to Provide 360-Degree Visibility Across Entire Attack Surface

9 out of 10 Healthcare Organizations Provide Telehealth Services, Yet Almost Half Face Patients' Mistrust Toward Privacy

IKEA Email Systems Targeted in Cyberattack

Google Analyzes Methods Behind GCP Workload Attacks