Port 22

~ 20 May 2022 ~

Cisco Issues Patch for New IOS XR Zero-Day Vulnerability Exploited in the Wild

Friday Squid Blogging: Squid Street Art

China-linked Twisted Panda caught spying on Russian defense R&D

Chatbot Army Deployed in Latest DHL Shipping Phish

Partial Patching Still Provides Strong Protection Against APTs

The Onion on Google Map Surveillance

Quantum Key Distribution for a Post-Quantum World

Cryptocurrency: secure or not? Week in security with Tony Anscombe

Sandworm uses a new version of ArguePatch to attack targets in Ukraine

Microsoft Rushes a Fix After May Patch Tuesday Breaks Authentication

University of Toronto Magazine: The Extremism Machine

Authentication Is Static, Yet Attackers Are Dynamic: Filling the Critical Gap

Microsoft patches the patch that broke Windows authentication

New Open Source Project Brings Consistent Identity Access to Multicloud

Bluetooth Flaw Allows Remote Unlocking of Digital Locks

Microsoft Bing censors politically sensitive Chinese terms internationally, reports Citizen Lab

Protecting data now as the quantum era approaches

Canada bans Huawei and ZTE from 5G networks, citing national security risks

India slightly softens infosec incident reporting and data retention rules

Microsoft Warns Rise in XorDdos Malware Targeting Linux Devices

Cytrox's Predator Spyware Target Android Users with Zero-Day Exploits

Researchers Uncover Rust Supply-Chain Attack Targeting Cloud CI Pipelines

Hackers Exploiting VMware Horizon to Target South Korea with NukeSped Backdoor

US wont prosecute good faith security researchers under CFAA

~ 19 May 2022 ~

Hackers Trick Users with Fake Windows 11 Downloads to Distribute Vidar Malware

More Than 1,000 Cybersecurity Career Pursuers Complete the (ISC) Entry-Level Cybersecurity Certification Pilot Exam

Deadbolt Ransomware Targeting QNAP NAS Devices

US recovers a record $15m from the 3ve ad-fraud crew

QNAP Urges Users to Update NAS Devices to Prevent Deadbolt Ransomware Attacks

Pro-Russian Information Operations Escalate in Ukraine War

DoJ Won't Charge 'Good Faith' Security Researchers

Majority of Kubernetes API Servers Exposed to the Public Internet

Dig Exits Stealth With $11M for Cloud Data Detection and Response Solution

Spyware Vendors Target Android With Zero-Day Exploits

Rise in XorDdos: A deeper look at the stealthy DDoS malware targeting Linux devices

Iran, China-linked gangs join Putin's disinformation war online

6 Scary Tactics Used in Mobile App Attacks

Phishing Attacks for Initial Access Surged 54% in Q1

Bada Bing, Bada Boom: Microsoft Bings Chinese Political Censorship of Autosuggestions in North America

Websites that Collect Your Data as You Type

Mitsubishi Electric MELSEC iQ-F Series

Hot glare of the spotlight doesnt slow BlackByte ransomware gang

The flip side of the coin: Why crypto is catnip for criminals

New Bluetooth Hack Could Let Attackers Remotely Unlock Smart Locks and Cars

The cyber threat isnt going anywhere, but the fight back starts in London

7 Key Findings from the 2022 SaaS Security Survey Report

Your snoozing iOS 15 iPhone may actually be sleeping with one antenna open

High-Severity Bug Reported in Google's OAuth Client Library for Java

Patch your VMware gear now or yank it out, Uncle Sam tells federal agencies

~ 18 May 2022 ~

Web Trackers Caught Intercepting Online Forms Even Before Users Hit Submit

VMware Releases Patches for New Vulnerabilities Affecting Multiple Products

MITRE Creates Framework for Supply Chain Security

CISA to Federal Agencies: Patch VMWare Products Now or Take Them Offline

Meet Wizard Spider, the multimillion-dollar gang behind Conti, Ryuk malware

How Pwn2Own Made Bug Hunting a Real Sport

Lacework Integrates Kubernetes Features to Enhance Security Across Multi-Cloud Environments

How these crooks backdoor online shops and siphon victims' credit card info

CISA: Unpatched F5 BIG-IP Devices Under Active Attack

The Industry Must Better Secure Open Source Code From Threat Actors

Senators Urge FTC to Probe ID.me Over Selfie Data

Microsoft Flags Attack Targeting SQL Servers With Novel Approach

2022: The Year Zero Trust Becomes Mainstream

So you want to be a CISO: What you should know about data protection

How Threat Actors Are a Click Away From Becoming Quasi-APTs

Your data's auctioned off up to 987 times a day, NGO reports

iPhone Malware that Operates Even When the Phone Is Turned Off

This Hacktivist Site Lets You Prank-Call Russian Officials

Microsoft warns partners to revoke unused authorizations that drive <em>your</em> software

Fake news why do people believe it?

State of internet crime in Q1 2022: Bot traffic on the rise, and more

Monero-mining botnet targets Windows, Linux web servers

How to Protect Your Data When Ransomware Strikes

Researchers Expose Inner Workings of Billion-Dollar Wizard Spider Cybercrime Gang

[eBook] Your 90-Day MSSP Plan: How to Improve Margins and Scale-Up Service Delivery

Hackers Gain Fileless Persistence on Targeted SQL Servers Using a Built-in Utility

U.S. Warns Against North Korean Hackers Posing as IT Freelancers

Microsoft Warns of "Cryware" Info-Stealing Malware Targeting Crypto Wallets

When Your Smart ID Card Reader Comes With Malware

SANS MGT521 Security Culture Course New Version Released

~ 17 May 2022 ~

Russian Conti Ransomware Gang Threatens to Overthrow New Costa Rican Government

FBI warns of North Korean cyberspies posing as foreign IT workers

TorchLight Expands Cybersecurity Services With MDR Sentinel in Partnership With Microsoft

Critical VMware Bug Exploits Continue, as Botnet Operators Jump In

FBI: E-Tailers, Beware Web Injections for Scraping Credit-Card Data, Backdoors

New Venture Capital Fund Focuses on Emerging Cybersecurity Tech

(ISC) Unveils 100K in the UK Scheme to Expand the UK Cybersecurity Workforce with 100,000 Free Entry-Level Certification Exams and Education Opportunities

Rubrik Launches Rubrik Security Cloud to Secure Data, Wherever it Lives, Across Enterprise, Cloud, and SaaS

Your iPhone Is Vulnerable to a Malware Attack Even When Its Off

Widespread Attack on WordPress Sites Targets Tatsu Builder Plug-in

Training to Beat a Bad Cybersecurity Culture

Local Government's Guide to Minimizing the Risk of a Cyberattack

Easy authentication and authorization in Azure Active Directory with No-Code Datawiza

Pentester pops open Tesla Model 3 using low-cost Bluetooth module

Google assuring open source code to secure software supply chains

In hot pursuit of cryware: Defending hot wallets from attacks

Google Cloud Aims to Share Its Vetted Open Source Ecosystem

Barracuda Expands Cloud-Native SASE Platform to Protect Hybrid Cloud Deployments

Qualys Adds Custom Assessment and Remediation to Its Cloud Platform