Port 22

~ 28 Oct 2021 ~

Israeli Researcher Cracked Over 3500 Wi-Fi Networks in Tel Aviv City

A Guide to Shift Away from Legacy Authentication Protocols in Microsoft 365

New Wslink Malware Loader Runs as a Server and Executes Modules in Memory

Malicious NPM Libraries Caught Installing Password Stealer and Ransomware

~ 27 Oct 2021 ~

HelpSystems Acquires Digital Guardian, Extends DLP Capabilities

Defenders Worry Orgs Are More Vulnerable Than Last Year

QR Codes Help Attackers Sneak Emails Past Security Controls

NPM packages disguised as Roblox API code caught carrying ransomware

The Pixel 6 Chips Best Upgrade Isnt Speed. Its Security

Read Between the Lines: Finding Flaws in EPUB Reading Systems

Blind People Have Won the Right to Break Ebook DRMfor Now

Kaspersky Buys Brain4Net to Build SASE & XDR Tools

6 Eye-Opening Statistics About Software Supply Chain Security

Cybercriminals Ramp Up Attacks on Web APIs

New insights on cybersecurity in the age of hybrid work

Dark HunTOR: 150 arrested, $31 million seized in major dark web bust

Dark HunTOR: 150 arrested, $31 million seized in major dark web bust

How the FBI Gets Location Information

Identity-Focused Security Controls Prevail

Annual Cyber Risk Survey Finds Businesses Are Sharpening Their Focus on Cybersecurity but Also Reveals Much Room for Improvement in Building Cyber-Resilience

Cyber Readiness Institute Names Karen S. Evans as New Managing Director

Cynerio Launches IoT Attack Detection and Response Module for Healthcare IoT Devices

Onfido Acquires EYN to Provide Acoustic-Based Liveness Detection

Avast Business Introduces Network Discovery for SMBs

ThycoticCentrify Integrates Secret Server With Privileged Access Management Platform

Extracting type information from Go binaries

Warehouse belonging to Chinese payment terminal manufacturer raided by FBI

Wslink: Unique and undocumented malicious loader that runs as a server

Wslink: Unique and undocumented malicious loader that runs as a server

Hackers Using Squirrelwaffle Loader to Deploy Qakbot and Cobalt Strike

Protonmail celebrates Swiss court victory exempting it from telco data retention laws

[eBook] The Guide to Centralized Log Management for Lean IT Security Teams

Singaporean minister touts internet 'kill switch' that finds kids reading net nasties and cuts 'em off ASAP

Cyber Attack in Iran Reportedly Cripples Gas Stations Across the Country

China Telecom booted out of USA as Feds worry it could disrupt or spy on local networks

Latest Report Uncovers Supply Chain Attacks by North Korean Hackers

~ 26 Oct 2021 ~

Free Tool Helps Security Teams Measure Their API Attack Surface

North Korea's Lazarus Group Turns to Supply Chain Attacks

Ready to Play? Squid Game Becomes an Attractive Lure to Spread Cyberthreats

This AI predicts how old children are. Can it keep them safe?

IBM Announces Advances and New Collaborations in AI-Powered Automation, 5G Connectivity and Security at Mobile World Congress Los Angeles

CISA Announces Appointment of Washington Secretary of State Kim Wyman as Senior Election Security Lead

Dark Web Drug Busts Lead to 150 Arrests

Gas Stations in Iran Downed by Cyberattack

These couldn't wait for Patch Tuesday: Adobe issues bonus fixes for 92 security holes in 14 products

Cybersecurity Talent Gap Narrows as Workforce Grows

DoJ & Europol Arrest 150 in Disruption of DarkNet Drug Operation

FBI Raids Chinese Point-of-Sale Giant PAX Technology

Are Baby Boomers More Vulnerable Online Than Younger Generations? You Might Be Surprised

Protect your business from password sprays with Microsoft DART recommendations

Pulling Back the Curtain on Bug Bounties

Wardrivers Can Still Easily Crack 70% of Wi-Fi Passwords

Matrix for the masses platform Element One goes live: $5 a month with WhatsApp, Signal, Telegram bridges

DDoSers take weekend off only to resume campaign against Voipfone on Monday

APT trends report Q3 2021

Fuji Electric Tellus Lite V-Simulator and V-Server Lite

Putting cybersecurity first: Why securebydesign must be the norm

Putting cybersecurity first: Why securebydesign must be the norm

GCHQ director outlines plan to 'go after' links between ransomware crims and state actors

Over 10 Million Android Users Targeted With Premium SMS Scam Apps

Malicious Firefox Add-ons Block Browser From Downloading Security Updates

OpenText Strengthens Ransomware Resilience

Forcepoint Completes Acquisition of Bitglass

Jumio Launches End-to-end Orchestration for its KYX Platform

~ 25 Oct 2021 ~

If you're using this hijacked NPM library anywhere in your software stack, read this

SolarWinds Attacker Targets Cloud Service Providers in New Supply Chain Threat

Industrial Goods & Services Tops Ransomware Targets in 2021

Who's In Your Wallet? Exploring Mobile Wallet Security

5 Ways CMMC Security Requirements May Impact Universities

Conti Ransom Gang Starts Selling Access to Victims

New York Times Journalist Hacked with NSO Spyware

Theres a wave of ransomware coming down the pipeline. What can you do about it?

Ransomware criminals have feelings too: BlackMatter abuse caused crims to shut down negotiation portal

Microsoft Digital Defense Report shares new insights on nation-state attacks

How We Can Narrow the Talent Shortage in Cybersecurity

SolarWinds attacker on the move: Russia's Nobelium crew has trebled attacks targeting MSPs, cloud resellers, says Microsoft

HIV Scotland fined 10,000 for BCC email blunder identifying names of virus-carriers' patient-advocates

Online harms dont need dangerous legislation, they need a spot of naval action

Facebook sues scraper who sold 178 million phone numbers and user IDs

NOBELIUM targeting delegated administrative privileges to facilitate broader attacks

New Attack Let Attacker Collect and Spoof Browser's Digital Fingerprints

Hardware-grade enterprise authentication without hardware: new SIM security solution for IAM

Cleanup on aisle C: Tesco app back online after attack led to shopping app outages

Microsoft Warns of Continued Supply-Chain Attacks by the Nobelium Hacker Group

Hackers Exploited Popular BillQuick Billing Software to Deploy Ransomware

Ultimate Guide to Leveraging AWS Security Hub and AWS Cong to meet SOC 2 Requirements

~ 24 Oct 2021 ~

NYT Journalist Repeatedly Hacked with Pegasus after Reporting on Saudi Arabia

New York Times: I Was Hacked. The Spyware Used Against Me Makes Us All Vulnerable.

11 Security Settings You Should Know About in Windows 11

Breaking the News: New York Times Journalist Ben Hubbard Hacked with Pegasus after Reporting on Previous Hacking Attempts

~ 23 Oct 2021 ~

Ransomware Rise Pushes Organizations to Prepare for Attack

International Operation Knocks Notorious REvil Group Offline

Microsoft Warns of TodayZoo Phishing Kit Used in Extensive Credential Stealing Attacks

Feds Reportedly Hacked REvil Ransomware Group and Forced it Offline

~ 22 Oct 2021 ~

Popular NPM Package Hijacked to Publish Crypto-mining Malware

Friday Squid Blogging: Squid Eating Maine Shrimp

aDolus Raises $2.5M to Secure Critical Infrastructure and Grow Sales and Marketing Team

'TodayZoo' Phishing Kit Cobbled Together From Other Malware

Better late than never: Microsoft rolls out a public preview of E2EE in Teams calls

7 Ways to Lock Down Enterprise Printers