Port 22

~ 1 Oct 2021 ~

October is Cybersecurity Awareness Month! Why being cybersmart matters

October is Cybersecurity Awareness Month! Why being cybersmart matters

2FA? More like 2F-in-the-way: It seems no one wants me to pay for their services after all

2FA? More like 2F-in-the-way: It seems no one wants me to pay for their services after all

Enterprises Planning SecOps Technology Deployments

Apple Pay Can be Abused to Make Contactless Payments From Locked iPhones

Chinese Hackers Used a New Rootkit to Spy on Targeted Windows 10 Users

Introduction to ICS Security Part 3

Beware of Fake Amnesty International Antivirus for Pegasus that Hacks PCs with Malware

~ 30 Sep 2021 ~

Revealed: How to steal money from victims' contactless Apple Pay wallets

More Than 90% of Q2 Malware Was Hidden in Encrypted Traffic

Akamai Acquires Guardicore in $600M Deal

Update Google Chrome ASAP to Patch 2 New Actively Exploited Zero-Day Flaws

10 Recent Examples of How Insider Threats Can Cause Big Breaches and Damage

The Senate Is Mad as Hell at FacebookAgain

Ransomware crim: Yeah, what I do is bad. No, I don't care. Yes, infosec bods are all mouth and no trousers

FireEye Products & McAfee Enterprise Merge to Create $2B Entity

You're Going to Be the Victim of a Ransomware Attack

Hardening Your VPN

Hackers could force locked iPhones to make contactless payments

Hackers could force locked iPhones to make contactless payments

The New Security Basics: 10 Most Common Defensive Actions

3 key resources to accelerate your passwordless journey

Which? survey finds people would actually pay the online giants not to take their data

How Google Geofence Warrants Helped Catch Capitol Rioters

UK MoD data strategy calls for social media surveillance on behalf of 'local authorities'

GhostEmperor: From ProxyLogon to kernel mode

Boston Scientific Zoom Latitude

ESET Threat Report T2 2021

ESET Threat Report T2 2021

Attacks against Remote Desktop Protocol endpoints have exploded this year, warns ESET's latest Threat Report

New Azure AD Bug Lets Hackers Brute-Force Passwords Without Getting Caught

Incentivizing Developers is the Key to Better Security Practices

SecZetta Announces $20.5M Series B Funding

Anonymous: We've leaked disk images stolen from far-right-friendly web host Epik

ImmuniWeb Launches Free Cloud Security Test to Detect Unprotected Storage

Cybersecurity Podcast Roundup

New Tomiris Backdoor Found Linked to Hackers Behind SolarWinds Cyberattack

Cybersecurity Firm Group-IB's CEO Arrested Over Treason Charges in Russia

~ 29 Sep 2021 ~

Don't look a GriftHorse in the mouth: Trojan trampled 10 million Android devices

Shades of SolarWinds Attack Malware Found in New 'Tomiris' Backdoor

Startup Beyond Identity Now Offers Passwordless Multifactor Authentication for Consumers

Startup Beyond Identity Now Offers Passwordless Multifactor Authentication for Consumers

50% of Servers Have Weak Security Long After Patches Are Released

Salt Security Finds Widespread Elastic Stack API Security Vulnerability that Exposes Customer and System Data

Dell Technologies Addresses Modern Support and Security

1Password and Fastmail Partner to Boost Online Privacy

Unpatched flaw 'weaponises' Apple AirTags to turn them into the phisherman's friend

Akamai beefs up cybersecurity portfolio with ransomware-tastic Guardicore acquisition

Cyberspace, Cybergames, and Cyberspies

Defend against zero-day exploits with Microsoft Defender Application Guard

Russian Officials Arrest Group-IB CEO, Accuse Him of Treason

Why Should I Care About HTTP Request Smuggling?

DAST to the Future: Shifting the Modern AppSec Paradigm

CISA and NSA release guidance for securing VPNs

CISA and NSA release guidance for securing VPNs

DarkHalo after SolarWinds: the Tomiris connection

Kaspersky links new Tomiris malware to Nobelium group

3 Security Initiatives AWS's New CEO Should Prioritize

Sneaky Android Trojan Siphons Millions Using Premium SMS

Why James Bond Doesnt Use an iPhone

Hundreds of Scam Apps Hit Over 10 Million Android Devices

The Rise of One-Time Password Interception Bots

Facebook Releases New Tool That Finds Security and Privacy Bugs in Android Apps

Give put-upon infosec bods professional recognition to keep them working for you, says chartered institute

REvil customers complain ransomware gang uses backdoors to filch ransoms

Beware! This Android Trojan Stole Millions of Dollars from Over 10 Million Users

[eBook] Your First 90 Days as CISO 9 Steps to Success

Hackers Targeting Brazil's PIX Payment System to Drain Users' Bank Accounts

New FinSpy Malware Variant Infects Windows Systems With UEFI Bootkit

~ 28 Sep 2021 ~

75K Email Inboxes Hit in New Credential Phishing Campaign

Outsourced Software Pose Greater Risks to Enterprise Application Security

How nation-state attackers like NOBELIUM are changing cybersecurity

NSA, CISA Issue Guidelines for Selecting and Securing VPNs

Most Large Enterprises Fail to Protect Their Domain Names

Comments on the Federal Governments Proposed Approach to Address Harmful Content Online

ASUS patches ROG Armoury Crate app after researcher spots all-too-common flaw

US Extradites CardPlanet Operator Back to Russia

A simpler, more integrated approach to data governance

Latest FinFisher spyware upgrades 'particularly worrying,' says Kaspersky

Apple Airtag Bug Enables Good Samaritan Attack

Notorious Spyware Tool Found Hiding Beneath Four Layers of Obfuscation

Check What Information Your Browser Leaks

FinSpy: unseen findings

Modern Security Breaches Demand Diligent Planning and Executive Support

Pandemic Privacy Explained

Pandemic Privacy: A Preliminary Analysis of Collection Technologies, Data Collection Laws, and Legislative Reform during COVID-19

UK umbrella payroll firm GiantPay confirms it was hit by 'sophisticated' cyber-attack

Dune Foresawand InfluencedHalf a Century of Global Conflict

Microsoft warns: Active Directory FoggyWeb malware being actively used by Nobelium gang

Atlassian Confluence RCE Flaw Abused in Multiple Cyberattack Campaigns

Q2 2022 should see networking sales boom when payouts to replace Huawei and ZTE kit start to flow

Emails, chat logs, more leaked online from far-right militia linked to US Capitol riot

Master Lock Introduces New Bluetooth ProSeries Padlocks

Ethereum dev admits helping North Korea mine crypto-bucks, faces 20 years jail

Blockhead admits to helping North Korea mine crypto-bucks, faces 20 years jail

Washington's New Cyber Focus Raises the Bar for IT Pros Across Supply Chains

India, Japan flex cyber-defence muscles as China kicks the Quad

New BloodyStealer Trojan Steals Gamers' Epic Games and Steam Accounts

~ 27 Sep 2021 ~

Story of the creds-leaking Exchange Autodiscover flaw the one Microsoft wouldn't fix even after 5 years