Port 22

~ 29 Sep 2021 ~

Give put-upon infosec bods professional recognition to keep them working for you, says chartered institute

REvil customers complain ransomware gang uses backdoors to filch ransoms

Beware! This Android Trojan Stole Millions of Dollars from Over 10 Million Users

[eBook] Your First 90 Days as CISO 9 Steps to Success

Hackers Targeting Brazil's PIX Payment System to Drain Users' Bank Accounts

New FinSpy Malware Variant Infects Windows Systems With UEFI Bootkit

~ 28 Sep 2021 ~

75K Email Inboxes Hit in New Credential Phishing Campaign

Outsourced Software Pose Greater Risks to Enterprise Application Security

How nation-state attackers like NOBELIUM are changing cybersecurity

NSA, CISA Issue Guidelines for Selecting and Securing VPNs

Most Large Enterprises Fail to Protect Their Domain Names

Comments on the Federal Governments Proposed Approach to Address Harmful Content Online

ASUS patches ROG Armoury Crate app after researcher spots all-too-common flaw

US Extradites CardPlanet Operator Back to Russia

A simpler, more integrated approach to data governance

Latest FinFisher spyware upgrades 'particularly worrying,' says Kaspersky

Apple Airtag Bug Enables Good Samaritan Attack

Notorious Spyware Tool Found Hiding Beneath Four Layers of Obfuscation

Check What Information Your Browser Leaks

FinSpy: unseen findings

Modern Security Breaches Demand Diligent Planning and Executive Support

Pandemic Privacy Explained

Pandemic Privacy: A Preliminary Analysis of Collection Technologies, Data Collection Laws, and Legislative Reform during COVID-19

UK umbrella payroll firm GiantPay confirms it was hit by 'sophisticated' cyber-attack

Dune Foresawand InfluencedHalf a Century of Global Conflict

Microsoft warns: Active Directory FoggyWeb malware being actively used by Nobelium gang

Atlassian Confluence RCE Flaw Abused in Multiple Cyberattack Campaigns

Q2 2022 should see networking sales boom when payouts to replace Huawei and ZTE kit start to flow

Emails, chat logs, more leaked online from far-right militia linked to US Capitol riot

Master Lock Introduces New Bluetooth ProSeries Padlocks

Ethereum dev admits helping North Korea mine crypto-bucks, faces 20 years jail

Blockhead admits to helping North Korea mine crypto-bucks, faces 20 years jail

Washington's New Cyber Focus Raises the Bar for IT Pros Across Supply Chains

India, Japan flex cyber-defence muscles as China kicks the Quad

New BloodyStealer Trojan Steals Gamers' Epic Games and Steam Accounts

~ 27 Sep 2021 ~

Story of the creds-leaking Exchange Autodiscover flaw the one Microsoft wouldn't fix even after 5 years

Microsoft Warns of FoggyWeb Malware Targeting Active Directory FS Servers

CISA: Wide Exploitation of New VMware vCenter Server Flaw Likely

Microsoft Adds Emergency Threat Mitigation to Its Exchange Server Software

Microsoft Warns of 'FoggyWeb' Malware Targeting AD FS Servers

7 Ways to Thwart Malicious Insiders

Women and People of Color Experience More Cyber Threats

Thoma Bravo Completes Strategic Investment in Intel 471

FoggyWeb: Targeted NOBELIUM malware leads to persistent backdoor

BloodyStealer: Advanced New Trojan Targets Accounts of Popular Online Gaming Platforms

A guide to combatting human-operated ransomware: Part 2

Cloudflare Ventures into Simplifying Email Security

Cloudflare Ventures into Simplifying Email Security

Zero Trust Comes to Industry's Broadest Cybersecurity Platform

Telos, Splunk, stackArmor, AWS Announce FASTTR Initiative to Accelerate Compliance

Google releases emergency fix to plug zeroday hole in Chrome

Google releases emergency fix to plug zeroday hole in Chrome

UK's National Crime Agency WLTM Deputy Director of Digital Data & Technology

How to Get Started With Zero Trust in a SaaS Environment

Research Highlights Significant Evolution in Email Security

Research Highlights Significant Evolution in Email Security

Cloudflare Is Taking a Shot at Email Security

Fake 'BT' caller fleeces elderly victim of 30k in APP app scam

Tracking Stolen Cryptocurrencies

BloodyStealer and gaming assets for sale

Russian Turla APT Group Deploying New Backdoor on Targeted Systems

Aunalytics Unveils Secure Managed Services with Integrated Security

New Android Malware Steals Financial Data from 378 Banking and Wallet Apps

How Does DMARC Prevent Phishing?

'Quad' group seeks to set security standards for global tech industry

STAR livestream with Katie Nickels: September 24, 2021 Episode NOTES

NEW FOR710: Reverse-Engineering Malware: Advanced Code Analysis - Beta opening at the Cyber Defense Initiative Event in December

~ 26 Sep 2021 ~

A New Jupyter Malware Version is Being Distributed via MSI Installers

How to Go Passwordless on Your Microsoft Account

~ 25 Sep 2021 ~

Even the CIA and NSA Use Ad Blockers to Stay Safe Online

~ 24 Sep 2021 ~

Urgent Chrome Update Released to Patch Actively Exploited Zero-Day Vulnerability

SonicWall Issues Patches for a New Critical Flaw in SMA 100 Series Devices

A New APT Hacker Group Spying On Hotels and Governments Worldwide

Friday Squid Blogging: Person in Squid Suit Takes Dog for a Walk

What Is the Difference Between Security and Resilience?

Frustrated dev drops three zero-day vulns affecting Apple iOS 15 after six-month wait

Consumers Share Security Fears as Risky Behaviors Persist

I Am Not Satoshi Nakamoto

TangleBot Campaign Underscores SMS Threat

The Proliferation of Zero-days

Contrast Application Security Platform Scales to Support OWASP Risks

Week in security with Tony Anscombe

Week in security with Tony Anscombe

Our Eye Is on the SPARROW

Endpoint Still a Prime Target for Attack

Stop worrying that crims could break the 'net, say cyber-diplomats only nations have tried

Apple's New iCloud Private Relay Service Leaks Users' Real IP Addresses

Google Warns of a New Way Hackers Can Make Malware Undetectable on Windows

Apple warns of arbitrary code execution zero-day being actively exploited on Macs

Cisco Releases Patches 3 New Critical Flaws Affecting IOS XE Software

~ 23 Sep 2021 ~

Google Spots New Technique to Sneak Malware Past Detection Tools

Primer: Microsoft Active Directory Security for AD Admins

FamousSparrow APT Group Flocks to Hotels, Governments, Businesses

SAIC Appoints Kevin Brown as Chief Information Security Officer

Supply Chain and Ransomware Threats Drove 60% Increase in Global Cyber Intelligence Sharing Among Financial Firms

BlackFog ARM 64 Edition Provides Anti Data Exfiltration Across New Patforms

Urgent Apple iOS and macOS Updates Released to Fix Actively Exploited Zero-Days

Apple Patches Zero-Days in iOS, Known Vuln in macOS

Microsoft Exchange Autodiscover Flaw Leaks Thousands of Credentials

How to Implement a Security Champions Program