Port 22

~ 29 Oct 2021 ~

New 'Shrootless' Bug Could Let Attackers Install Rootkit on macOS Systems

Russian TrickBot Gang Hacker Extradited to U.S. Charged with Cybercrime

~ 28 Oct 2021 ~

Google Releases Urgent Chrome Update to Patch 2 Actively Exploited 0-Day Bugs

6 Ways to Rewrite the Impossible Job Description

SEO Poisoning Used to Distribute Ransomware

Top Hardware Weaknesses List Debuts

ICS Security Firm Dragos Reaches $1.7B Valuation in Latest Funding Round

Ordr Unveils Cybersecurity Innovations and Ransom-Aware Rapid Assessment Service to Expand Its Leadership In Connected Device Security

NSA-CISA Series on Securing 5G Cloud Infrastructures

Yet again, Cream Finance skimmed by crooks: $130m in crypto assets stolen

Tech Companies Create Security Baseline for Enterprise Software

US to Create Diplomatic Bureau to Lead Cybersecurity Policy

Zales.com Leaked Customer Data, Just Like Sister Firms Jared, Kay Jewelers Did in 2018

Stop Zero-Day Ransomware Cold With AI

REvil gang member identified living luxury lifestyle in Russia, says German media

3 Security Lessons Learned From the Kaseya Ransomware Attack

Microsoft finds new macOS vulnerability, Shrootless, that could bypass System Integrity Protection

How we took part in MLSEC and (almost) won

You've Just Been Ransomed ... Now What?

Good Grief! Ransomware gang has only gone and pwned the NRA or so it claims

More Russian SVR Supply-Chain Attacks

Sensormatic Electronics victor

5 tips for parents for a cybersecure Halloween

5 tips for parents for a cybersecure Halloween

If your hair isn't already gray, 2022's security threats will get it there, warn infosec duo

Israeli Researcher Cracked Over 3500 Wi-Fi Networks in Tel Aviv City

A Guide to Shift Away from Legacy Authentication Protocols in Microsoft 365

New Wslink Malware Loader Runs as a Server and Executes Modules in Memory

Malicious NPM Libraries Caught Installing Password Stealer and Ransomware

~ 27 Oct 2021 ~

HelpSystems Acquires Digital Guardian, Extends DLP Capabilities

Defenders Worry Orgs Are More Vulnerable Than Last Year

QR Codes Help Attackers Sneak Emails Past Security Controls

NPM packages disguised as Roblox API code caught carrying ransomware

The Pixel 6 Chips Best Upgrade Isnt Speed. Its Security

Read Between the Lines: Finding Flaws in EPUB Reading Systems

Blind People Have Won the Right to Break Ebook DRMfor Now

Kaspersky Buys Brain4Net to Build SASE & XDR Tools

6 Eye-Opening Statistics About Software Supply Chain Security

Cybercriminals Ramp Up Attacks on Web APIs

New insights on cybersecurity in the age of hybrid work

Dark HunTOR: 150 arrested, $31 million seized in major dark web bust

Dark HunTOR: 150 arrested, $31 million seized in major dark web bust

How the FBI Gets Location Information

Identity-Focused Security Controls Prevail

Annual Cyber Risk Survey Finds Businesses Are Sharpening Their Focus on Cybersecurity but Also Reveals Much Room for Improvement in Building Cyber-Resilience

Cyber Readiness Institute Names Karen S. Evans as New Managing Director

Cynerio Launches IoT Attack Detection and Response Module for Healthcare IoT Devices

Onfido Acquires EYN to Provide Acoustic-Based Liveness Detection

Avast Business Introduces Network Discovery for SMBs

ThycoticCentrify Integrates Secret Server With Privileged Access Management Platform

Extracting type information from Go binaries

Warehouse belonging to Chinese payment terminal manufacturer raided by FBI

Wslink: Unique and undocumented malicious loader that runs as a server

Wslink: Unique and undocumented malicious loader that runs as a server

Hackers Using Squirrelwaffle Loader to Deploy Qakbot and Cobalt Strike

Protonmail celebrates Swiss court victory exempting it from telco data retention laws

[eBook] The Guide to Centralized Log Management for Lean IT Security Teams

Singaporean minister touts internet 'kill switch' that finds kids reading net nasties and cuts 'em off ASAP

Cyber Attack in Iran Reportedly Cripples Gas Stations Across the Country

China Telecom booted out of USA as Feds worry it could disrupt or spy on local networks

Latest Report Uncovers Supply Chain Attacks by North Korean Hackers

~ 26 Oct 2021 ~

Free Tool Helps Security Teams Measure Their API Attack Surface

North Korea's Lazarus Group Turns to Supply Chain Attacks

Ready to Play? Squid Game Becomes an Attractive Lure to Spread Cyberthreats

This AI predicts how old children are. Can it keep them safe?

IBM Announces Advances and New Collaborations in AI-Powered Automation, 5G Connectivity and Security at Mobile World Congress Los Angeles

CISA Announces Appointment of Washington Secretary of State Kim Wyman as Senior Election Security Lead

Dark Web Drug Busts Lead to 150 Arrests

Gas Stations in Iran Downed by Cyberattack

These couldn't wait for Patch Tuesday: Adobe issues bonus fixes for 92 security holes in 14 products

Cybersecurity Talent Gap Narrows as Workforce Grows

DoJ & Europol Arrest 150 in Disruption of DarkNet Drug Operation

FBI Raids Chinese Point-of-Sale Giant PAX Technology

Are Baby Boomers More Vulnerable Online Than Younger Generations? You Might Be Surprised

Protect your business from password sprays with Microsoft DART recommendations

Pulling Back the Curtain on Bug Bounties

Wardrivers Can Still Easily Crack 70% of Wi-Fi Passwords

Matrix for the masses platform Element One goes live: $5 a month with WhatsApp, Signal, Telegram bridges

DDoSers take weekend off only to resume campaign against Voipfone on Monday

APT trends report Q3 2021

Fuji Electric Tellus Lite V-Simulator and V-Server Lite

Putting cybersecurity first: Why securebydesign must be the norm

Putting cybersecurity first: Why securebydesign must be the norm

GCHQ director outlines plan to 'go after' links between ransomware crims and state actors

Over 10 Million Android Users Targeted With Premium SMS Scam Apps

Malicious Firefox Add-ons Block Browser From Downloading Security Updates

OpenText Strengthens Ransomware Resilience

Forcepoint Completes Acquisition of Bitglass

Jumio Launches End-to-end Orchestration for its KYX Platform

~ 25 Oct 2021 ~

If you're using this hijacked NPM library anywhere in your software stack, read this

SolarWinds Attacker Targets Cloud Service Providers in New Supply Chain Threat

Industrial Goods & Services Tops Ransomware Targets in 2021

Who's In Your Wallet? Exploring Mobile Wallet Security

5 Ways CMMC Security Requirements May Impact Universities

Conti Ransom Gang Starts Selling Access to Victims

New York Times Journalist Hacked with NSO Spyware

Theres a wave of ransomware coming down the pipeline. What can you do about it?

Ransomware criminals have feelings too: BlackMatter abuse caused crims to shut down negotiation portal

Microsoft Digital Defense Report shares new insights on nation-state attacks

How We Can Narrow the Talent Shortage in Cybersecurity