Port 22

~ 3 Jul 2021 ~

Kaseya supplychain attack: What we know so far

IT management biz Kaseya pwned by miscreants to infect businesses with ransomware

Do Not Stare Into the Crypto Orb

Android Apps with 5.8 million Installs Caught Stealing Users' Facebook Passwords

Kaseya Supply-Chain Attack Hits Nearly 40 Service Providers With REvil Ransomware

Learn to Code Get 2021 Master Bundle of 13 Online Courses @ 99% OFF

~ 2 Jul 2021 ~

A New Kind of Ransomware Tsunami Hits Hundreds of Companies

Friday Squid Blogging: Best Squid-Related Headline

Digital rights org claims cyberattacks against Filipino media outlets come from government and army

Microsoft tells US lawmakers cloud has changed the game on data privacy, gets 10 info demands <i>a day</i> from cops

Another 0-Day Looms for Many Western Digital Users

Week in security with Tony Anscombe

Twitter now lets users set security keys as the only 2FA method

The PrintNightmare continues: Microsoft confirms presence of vulnerable code in all versions of Windows

SOC Investment Improves Detection and Response Times, Data Shows

More Russian Hacking

Brit firm fined 200k for banging on about missold PPI in 11.4 million nuisance calls

New Mirai-Inspired Botnet Could Be Using Your KGUARD DVRs in Cyber Attacks

Mongolian Certificate Authority Hacked to Distribute Backdoored CA Software

New Google Scorecards Tool Scans Open-Source Software for More Security Risks

Recommended Sources for Ransomware Information

~ 1 Jul 2021 ~

PrintNightmare: Kicking users from Pre-Windows 2000 legacy group may thwart domain controller exploitation

NSA, FBI Reveal Hacking Methods Used by Russian Military Hackers

Microsoft Warns of Critical "PrintNightmare" Flaw Being Exploited in the Wild

Microsoft and Eclypsium lock horns over Dell SupportAssist flaws on secured-core PCs

Intuit to Share Payroll Data from 1.4M Small Businesses With Equifax

Microsoft warns of serious vulnerabilities in Netgear's DGN2200v1 router

Microsoft warns of serious vulnerabilities in Netgear's DGN220)v1 router

Fancy Bear Is Trying to Brute-Force Hundreds of Networks

Insurance and Ransomware

Cyber insurance model is broken, consider banning ransomware payments, think tank suggests

Cyber insurance model is broken and ransomware payments should be banned, says think tank

WhiteHat Security Rebrands as NTT Application Security

Do cybercriminals play cyber games in quarantine? A look one year later

Windows 11's Security Push Leaves Scores of PCs Behind

Johnson Controls Facility Explorer

Sensormatic Electronics C-CURE 9000

Delta Electronics DOPSoft

Mitsubishi Electric Air Conditioning System

Mitsubishi Electric Air Conditioning Systems

All Bachmann M1 System Processor Modules

Stop Playing Catchup: Move From Reactive to Proactive to Defeat Cyber Threats

IndigoZebra APT Hacking Campaign Targets the Afghan Government

Rethinking Application Security in the API-First Era

Facebook Sues 4 Vietnamese for Hacking Accounts and $36 Million Ad Fraud

3 Steps to Strengthen Your Ransomware Defenses

The Summit for You on Managing Human Risk SANS 2021 Security Awareness Summit

~ 30 Jun 2021 ~

Microsoft Discloses Critical Bugs Allowing Takeover of NETGEAR Routers

Hackers Wanted in the U.S. for Spreading Gozi Virus Arrested in Colombia

Microsoft hooks up with MITRE to map Azure's ATT&amp;CK surface for 'proactive security'

We Infiltrated a Counterfeit Check Ring! Now What?

Global police shut down VPN service favored by cybercriminals

International law enforcement op nukes Russian-language DoubleVPN service allegedly favoured by cybercriminals

Microsoft faces up to an old foe with out-of-band patch for PDF weirdness

Microsoft finds new NETGEAR firmware vulnerabilities that could lead to identity theft and full system compromise

Leaked print spooler exploit lets Windows users remotely execute code as system on your domain controller

Intl. Law Enforcement Operation Takes Down DoubleVPN

8-month suspended sentence for script kiddie who DDoS'd Labour candidate in runup to 2019 UK general election

The critical role of Zero Trust in securing our world

3 Things Every CISO Wishes You Understood

UK arm of international charity the Salvation Army hit by ransomware attack

Common Facebook scams and how to avoid them

ITU ranks USA most secure nation on Global Cyber Security Index, UK in tie for second with Saudi Arabia

America tops ITU's Global Cyber Security Index, UK in tie for second with Saudi Arabia

Authorities Seize DoubleVPN Service Used by Cybercriminals

[Webinar] How Cyber Attack Groups Are Spinning a Larger Ransomware Web

Researchers Leak PoC Exploit for a Critical Windows RCE Vulnerability

Subdomain security is substandard, say security researchers

NEW DFIR FOR532: Enterprise Memory Forensics In-Depth Coming Soon

Instructor Spotlight: AJ Yawn

GitHub Launches 'Copilot' AI-Powered Code Completion Tool

You can hijack Google Cloud VMs using DHCP floods, says this guy, once the stars are aligned and...

~ 29 Jun 2021 ~

Samsung commits to 5 years of Android updates... for its enterprise smartphone users at least

Intel sticks another nail in the coffin of TSX with feature-disabling microcode update

MITRE ATT&CK mappings released for built-in Azure security controls

Google Updates Vulnerability Data Format to Support Automation

Ransomware Losses Drive Up Cyber-Insurance Costs

Data for 700 million LinkedIn users up for grabs on hacker forum

UK Cabinet Office's spending on cybersecurity training rises by 500% in a year

CISA Publishes Catalog of Poor Security Practices

Survey Data Reveals Gap in Americans' Security Awareness

Risks of Evidentiary Software

Watchdog bans crypto super-exchange Binance from 'regulated activities' in the UK

Exacq Technologies exacqVision Web Service

Exacq Technologies exacqVision Enterprise Manager

Panasonic FPWIN Pro

JTEKT TOYOPUC PLC

AVEVA System Platform

Claroty Secure Remote Access Site

Remote dating: How do the apps safeguard our data?

Unpatched Virtual Machine Takeover Bug Affects Google Compute Engine

America worlds sole cyber superpower, ten years ahead of China, says Brit think tank

New API Lets App Developers Authenticate Users via SIM Cards

Google now requires app developers to verify their address and use 2FA

~ 28 Jun 2021 ~

Microsoft approved a Windows driver booby-trapped with rootkit malware

SolarWinds Hackers Continue Assault With New Microsoft Breach

Microsoft Refining Third-Party Driver Vetting Processes After Signing Malicious Rootkit

Attacks Erase Western Digital Network-Attached Storage Drives

New House Bill Aims to Drive Americans' Security Awareness

Microsoft Tracks Attack Campaign Against Customer Support Agents