Port 22

~ 23 Sep 2021 ~

Ransomware Isn't Back. It Never Left

Microsoft Exchange Bug Exposes ~100,000 Windows Domain Credentials

Trane Symbio

Trane Tracer

Researchers finger new APT group, FamousSparrow, for hotel attacks

FamousSparrow: Asuspicious hotel guest

FamousSparrow: Asuspicious hotel guest

Wake me up till SAS summit ends

A New Bug in Microsoft Windows Could Let Hackers Easily Install a Rootkit

Why You Should Consider QEMU Live Patching

New Android Malware Targeting US, Canadian Users with COVID-19 Lures

Colombian Real Estate Agency Leak Exposes Records of Over 100,000 Buyers

Managing Human Risk Should be a Regular Element on Any Cybersecurity Team

~ 22 Sep 2021 ~

Zoom's $15bn merger with Five9 probed by Uncle Sam for national security risks

Apple tried to patch this security hole in macOS Finder but didn't consider upper and lowercase characters

Password Reuse Problems Persist Despite Known Risks

What Are the Different Types of Cyber Insurance?

6 Lessons From Major Data Breaches This Year

Who Is BlackMatter?

UK MoD Data Breach Shows Cybersecurity Must Protect Both People and Data

Lithuania tells its citizens to throw Xiaomi mobile devices in the bin

A Cyber-Resilience Model for the Next Era

Strained Relationships Hinder DevSecOps Innovation

CISA, FBI, NSA Warn of Increase in Conti Ransomware Attacks

Midmarket Security: Think Youre Safe? Think Again

Ronald Deibert Wins Shaughnessy Cohen Prize for Political Writing

CyberGRX Shows Organizations Fail to Mitigate Third-Party Risk

FBI Had the REvil Decryption Key

Why Security Pros Should Rethink Their Focus on Information Resilience

Microsoft Exchange Autodiscover protocol found leaking hundreds of thousands of credentials

Plugging the holes: How to prevent corporate data leaks in the cloud

Plugging the holes: How to prevent corporate data leaks in the cloud

Druva Introduces Curated Recovery Technology for Accelerated Ransomware Recovery

Microsoft Warns of a Wide-Scale Phishing-as-a-Service Operation

Synology Releases C2 Backup for Windows

New Nagios Software Bugs Could Let Hackers Take Over IT Infrastructures

How Cynet's Response Automation Helps Organizations Mitigate Cyber Threats

The ABCs of Cybersecurity

Break out your emergency change process and patch this ransomware-friendly bug ASAP, says VMware

~ 21 Sep 2021 ~

Database containing personal info on 106m people who traveled to Thailand found open to the internet report

US Sanctions Cryptocurrency Exchange SUEX for Aiding Ransomware Gangs

New Cooperative's Ransomware Attack Underscores Threat to Food & Agriculture

The Gap in Your Zero Trust Implementation

CTO 2.0: Maiffret Rejoins BeyondTrust

High-Severity RCE Flaw Disclosed in Several Netgear Router Models

VMware Warns of Critical File Upload Vulnerability Affecting vCenter Server

Suex to be you: Feds sanction cryptocurrency exchange for handling payments from 8+ ransomware variants

10 Threat Trends in DNS Security

US Treasury Dept. Sanctions Suex Cryptocurrency Exchange

Data Sharing, Added Security Steps Drive Consumers to Shop Elsewhere

5 Ways to Become a Better Cyber-Threat Exterminator

Elizabeth Kolade on How AI Is a 'Double-Edged Sword' & the Challenge of Harmonizing Cyber and Physical Security

The iOS 15 Privacy Settings You Should Change Right Now

3 trends shaping identity as the center of modern security

European police dismantle cybercrime ring with ties to Italian Mafia

European police dismantle cybercrime ring with ties to Italian Mafia

Catching the big fish: Analyzing a large-scale phishing-as-a-service operation

Why Cryptomining Malware Is a Harbinger of Future Attacks

Fix network printing or keep Windows secure? Admins would rather disable PrintNightmare patch

UK Ministry of Defence apologises after Afghan interpreters' personal data exposed in email blunder

Alaskas Department of Health and Social Services Hack

Detection evasion in CLR and tips on how to detect such attacks

Unpatched High-Severity Vulnerability Affects Apple macOS Computers

Cring Ransomware Gang Exploits 11-Year-Old ColdFusion Bug

Mafia works remotely, too, it seems: 100+ people suspected of phishing, SIM swapping, email fraud cuffed

Youve trained at the cutting edge, heres how to keep your DFIR skills razor sharp

New Capoae Malware Infiltrates WordPress Sites and Installs Backdoored Plugin

Cybersecurity Priorities in 2021: How Can CISOs Re-Analyze and Shift Focus?

~ 20 Sep 2021 ~

Does Your Organization Have a Security.txt File?

Open Source Software Projects Up Their Security Game but Face More Attacks

archTIS Acquires Cipherpoint Technology Assets and Customers

Apache OpenOffice can be hijacked by malicious documents, fix still in beta

10 Ways to Avoid Zero-Trust Failure

Google: New Privacy Feature Will Affect 'Billions' of Android Devices

F5 Networks to Buy Threat Stack

Ransomware recovery: Start getting back up before youre even hit

A guide to combatting human-operated ransomware: Part 1

White House Cybersecurity Summit: A Missed Opportunity

Europol Busts Major Crime Ring, Arrests Over 100 Online Fraudsters

A New Wave of Malware Attack Targeting Organizations in South America

Tick, tick, tick TikTok China just limited kids to 40 minutes' use each day

Why a Strong Security Culture?

What You Need to Know about CVE-2021-30860 aka FORCEDENTRY

Introducing the New Version of SANS ICS515 ICS Visibility, Detection, and Response

~ 19 Sep 2021 ~

Google to Auto-Reset Unused Android App Permissions for Billions of Devices

Numando: A New Banking Trojan Targeting Latin American Users

How to Set Up a NAS to Securely Share Files

~ 18 Sep 2021 ~

Former US Intelligence Operatives Admit They Hacked for UAE

Apple and Google Go Further Than Ever to Appease Russia

~ 17 Sep 2021 ~

Yes, of course there's now malware for Windows Subsystem for Linux

Arista, Cisco, Huawei, Juniper Networks, and Nokia Launch New MANRS Equipment Vendor Program to Improve Routing Security Worldwide

CISA to Host Fourth Annual National Cybersecurity Summit

How Should the CSO Work With the Chief Privacy Officer?

Friday Squid Blogging: Rams Horn Squid Shells

Mirai Botnet Exploiting OMIGOD Azure Vulnerability

International Insider Threat: DoJ Fines US Intel Officials Who Aided UAE

Week in security with Tony Anscombe

Week in security with Tony Anscombe

Something phishy: Tech recruiters jabbed by fake COVID-19 Passport scam

IoT 'Nutrition' Labels Aim to Put Security on Display