Port 22

~ 26 Sep 2022 ~

An expert guide to securing APIs

Google to Make Account Login Mandatory for New Fitbit Users in 2023

What happens with a hacked Instagram account and how to recover it

NullMixer: oodles of Trojans in a single dropper

Ukraine Arrests Cybercrime Group for Selling Data of 30 Million People

India seeks verified IDs to register email accounts

The Worlds Best Cyber Security Training Just Got Even Better

NEW DFIR COURSE IN DEVELOPMENT | FOR548: eDiscovery: Tactics for Conquering the Data Minefield

~ 25 Sep 2022 ~

VPN Providers Flee India as a New Data Law Takes Hold

Noberus ransomware gets info-stealing upgrades, targets Veeam backup software

~ 24 Sep 2022 ~

Child Predators Mine Twitch to Prey on Kids

London Police Arrested 17-Year-Old Hacker Suspected of Uber and GTA 6 Breaches

Hackers Actively Exploiting New Sophos Firewall RCE Vulnerability

~ 23 Sep 2022 ~

Friday Squid Blogging: Another Giant Squid Washes Up on New Zealand Beach

App Developers Increasingly Targeted via Slack, DevOps Tools

Malicious Apps With Millions of Downloads Found in Apple App Store, Google Play

Open up, it's the IRS. We're here about the crypto tax you dodged

What to consider before disposing of personal data Week in security with Tony Anscombe

Accused Russian RSOCKS Botmaster Arrested, Requests Extradition to U.S.

CISA: Zoho ManageEngine RCE Bug Is Under Active Exploit

Significant customer data exposed in attack on Australian telco

Slack and Teams Lax App Security Raises Alarms

Iran blocks Whatsapp, Instagram as citizens protest death of Mahsa Amini

Iran's Internet Shutdown Sparks Fear of a Deadly Cover-Up

Cyberattackers Compromise Microsoft Exchange Servers via Malicious OAuth Apps

How Europe Is Using Regulations to Harden Medical Devices Against Attack

Hackers Using Fake CircleCI Notifications to Hack GitHub Accounts

Neglecting Open Source Developers Puts the Internet at Risk

Researchers Uncover New Metador APT Targeting Telcos, ISPs, and Universities

Microsoft Looks to Enable Practical Zero-Trust Security With Windows 11

Mitigating Risk and Communicating Value in Multicloud Environments

Leaking Screen Information on Zoom Calls through Reflections in Eyeglasses

CISA Warns of Hackers Exploiting Recent Zoho ManageEngine Vulnerability

Firing Your Entire Cybersecurity Team? Are You Sure?

Void Balaur Hackers-for-Hire Targeting Russian Businesses and Politics Entities

5 tips to help children navigate the internet safely

Keeping secrets safe off prem

Mass email campaign with a pinch of targeted spam

Fake Indian Banking Rewards Apps Targeting Android Users with Info-stealing Malware

Privacy watchdog steps up fight against Europol's hoarding of personal data

Hackers Using Malicious OAuth Apps to Take Over Email Servers

Researchers Uncover Mysterious 'Metador' Cyber-Espionage Group

~ 22 Sep 2022 ~

Developer Leaks LockBit 3.0 Ransomware-Builder Code

CircleCI, GitHub Users Targeted in Phishing Campaign

Check out this Android spyware, says Microsoft, the home of a gazillion Windows flaws

Time to Quell the Alarm Bells Around Post-Quantum Crypto-Cracking

Feds Sound Alarm on Rising OT/ICS Threats From APT Groups

Malicious npm Package Poses as Tailwind Tool

Researchers Uncover Years-Long Mobile Spyware Campaign Targeting Uyghurs

The Ungodly Surveillance of Anti-Porn Shameware Apps

Malicious OAuth applications used to compromise email servers and spread spam

Cambodian authorities crack down on cyber slavery amid international pressure

Malicious NPM Package Caught Mimicking Material Tailwind CSS Package

A New Linux Tool Aims to Guard Against Supply Chain Attacks

Allurity Acquires Spanish Multinational Aiuken Cybersecurity

Twitter's Whistleblower Allegations Are a Cautionary Tale for All Businesses

StackHawk Launches Deeper API Security Test Coverage to Improve the Security of APIs

Fake sites fool Zoom users into downloading deadly code

Palo Alto Networks 5G-Native Security Now Available on Microsoft Azure Private Multi-Access Edge Compute

IT Security Takeaways from the Wiseasy Hack

Prompt Injection/Extraction Attacks against AI Systems

Researchers Disclose Critical Vulnerability in Oracle Cloud Infrastructure

Measuresoft ScadaPro Server

Hey WeLiveSecurity, how does biometric authentication work?

15-Year-Old Unpatched Python Vulnerability Potentially Affects Over 350,000 Projects