Port 22

~ 30 May 2022 ~

Microsoft Releases Workarounds for Office Vulnerability Under Active Exploitation

Zero-day vuln in Microsoft Office: 'Follina' will work even when macros are disabled

6 Steps to Ensure Cyber Resilience

That critical vulnerability might <em>not</em> be the first you should patch

Good Luck Not Accidentally Hiring a North Korean Scammer

Good Luck Not Accidentally Hiring a North Korean Scammer

Keeping it real: Dont fall for lies about the war

Indian authorities issue conflicting advice about biometric ID card security

Is 3rd Party App Access the New Executable File?

EnemyBot Linux Botnet Now Exploits Web Server, Android and CMS Vulnerabilities

Watch Out! Researchers Spot New Microsoft Office Zero-Day Exploit in the Wild

~ 29 May 2022 ~

Global tech industry objects to Indias new infosec reporting regime

Ransomware attack sends US county back to 1977

New 'GoodWill' Ransomware Forces Victims to Donate Money and Clothes to the Poor

FBI Warns About Hackers Selling VPN Credentials for U.S. College Networks

~ 28 May 2022 ~

Critical OAS Bugs Open Industrial Systems to Takeover

DuckDuckGo Isnt as Private as You Think

DuckDuckGo Isnt as Private as You Think

New York Man Sentenced to 4 Years in Transnational Cybercrime Scheme

Microsoft Finds Critical Bugs in Pre-Installed Apps on Millions of Android Devices

~ 27 May 2022 ~

Stolen university credentials up for sale by Russian crooks, FBI warns

Friday Squid Blogging: Squid Bites Diver

Exposed Kubernetes Clusters, Kubelet Ports Can Be Abused in Cyberattacks

Space Force Expands Cyber Defense Operations

Cloud security unicorn cuts 20% of staff after raising $1.3b

Talos names eight deadly sins in widely used industrial software

Scammer Behind $568M International Cybercrime Syndicate Gets 4 Years

New Chaos Malware Variant Ditches Wiper for Encryption

Android apps with millions of downloads exposed to high-severity vulnerabilities

ChromeLoader Malware Hijacks Browsers With ISO Files

Physical Security Teams' Impact Is Far-Reaching

Scams targeting NFT investors Week in security with Tony Anscombe

GitHub saved plaintext passwords of npm users in log files, post mortem reveals

What Do Those Pesky 'Cookie Preferences' Pop-Ups Really Mean?

What Do Those Pesky 'Cookie Preferences' Pop-Ups Really Mean?

This Windows malware uses PowerShell to inject malicious extension into Chrome

Taking the Danger Out of IT/OT Convergence

Cybersecurity: A global problem that requires a global answer

Experts Detail New RCE Vulnerability Affecting Google Chrome Dev Channel

Nearly 100,000 NPM Users' Credentials Stolen in GitHub OAuth Breach

IT threat evolution in Q1 2022. Mobile statistics

IT threat evolution Q1 2022

IT threat evolution in Q1 2022. Non-mobile statistics

Let's play everyone's favorite game: REvil? Or Not REvil?

The Myths of Ransomware Attacks and How To Mitigate Risk

Attackers Can Use Electromagnetic Signals to Control Touchscreens Remotely

China offering ten nations help to run their cyber-defenses and networks

How to reprogram Apple AirTags, play custom sounds

Zyxel Issues Patches for 4 New Flaws Affecting AP, API Controller and Firewall Devices

~ 26 May 2022 ~

Ransomware encrypts files, demands three good deeds to restore data

Broadcom Snaps Up VMware in $61B Deal

Microsoft Unveils Dev Box, a Workstation-as-a-Service

Cheers ransomware hits VMware ESXi systems

Lacework Announces Layoffs, Restructuring

Third-Party Scripts on Websites Present a 'Broad & Open' Attack Vector

Twitter Fined $150M for Security Data Misuse

Google Urged to Stop Tracking Location Data Ahead of Roe Reversal

Google Urged to Stop Tracking Location Data Ahead of Roe Reversal

The FDA's New Cybersecurity Guidance for Medical Devices Reminds Us That Safety & Security Go Hand in Hand

VMware, Airline Targeted as Ransomware Chaos Reigns

Big Cyber Hits on GM, Chicago Public Schools, & Zola Showcase the Password Problem

Campaigners warn of legal challenge against Privacy Shield enhancements

Act Now: Leveraging PCI Compliance to Improve Security

Quanta Servers Caught With Pantsdown BMC Vulnerability

ESET Research Podcast: UEFI in crosshairs of ESPecter bootkit