Port 22

~ 1 Jul 2022 ~

OpenSea NFT Marketplace Faces Insider Hack

Time Constraints Hamper Security Awareness Programs

Crypto sleuths pin $100 million Harmony theft on Lazarus Group

Criminals Use Deepfake Videos to Interview for Remote Work

DragonForce Malaysia Releases LPE Exploit, Threatens Ransomware

Watch out for survey scams Week in security with Tony Anscombe

Phishing scam poses as Canadian tax agency before Canada Day

Analyzing the Swiss E-Voting System

When It Comes to SBOMs, Do You Know the Ingredients in Your Ingredients?

RSA 2022: Omdia Research Take Aways

Microsoft Going Big on Identity with the Launch of Entra

Is Your New Car a Threat to National Security?

Microsoft Warns About Evolving Capabilities of Toll Fraud Android Malware Apps

Google Improves Its Password Manager to Boost Security Across All Platforms

Microsoft gives its partners power to change AD privileges on customer systems without permission

Solving the indirect vulnerability enigma - fixing indirect vulnerabilities without breaking your dependency tree

New 'SessionManager' Backdoor Targeting Microsoft IIS Servers in the Wild

Month of PowerShell: 5 Tips for Getting Started with PowerShell

Amazon Quietly Patches 'High Severity' Vulnerability in Android Photos App

~ 30 Jun 2022 ~

Microsoft Warns of Cryptomining Malware Campaign Targeting Linux Servers

OpenSea phishing threat after rogue insider leaks customer email addresses

Jenkins warns of security holes in these 25 plugins

Google: Hack-for-Hire Groups Present a Potent Threat

ZuoRAT Malware Is Targeting Routers

18 Zero-Days Exploited So Far in 2022

API Security Losses Total Billions, But It's Complicated

California state's gun control websites expose 10 years of personal data

Exchange Servers Backdoored Globally by SessionManager

Study Reveals Traditional Data Security Tools Have a 60% Failure Rate Against Ransomware and Extortion

NXM Announces Platform That Protects Space Infrastructure and IoT Devices From Cyberattacks

A Fintech Horror Story: How One Company Prioritizes Cybersecurity

Google battles bots, puts Workspace admins on alert

Critical ManageEngine ADAudit Plus Vulnerability Allows Network Takeover, Mass Data Exfiltration

Zero-Days Aren't Going Away Anytime Soon & What Leaders Need to Know

Toll fraud malware: How an Android application can drain your wallet

Using process creation properties to catch evasion techniques

A New, Remarkably Sophisticated Malware Is Attacking Routers

You Need to Update Windows and Chrome Right Now

Exemys RME1

Yokogawa Wide Area Communication Router

Emerson DeltaV Distributed Control System

Distributed Data Systems WebHMI

CODESYS Gateway Server (Update A)

Costco 40th anniversary scam targets WhatsApp users

Google Blocks Dozens of Malicious Domains Operated by Hack-for-Hire Groups

The SessionManager IIS backdoor: a possibly overlooked GELSEMIUM artefact

U.S. FCC Commissioner Asks Apple and Google to Remove TikTok from App Stores

What is Shadow IT and why is it so risky?

Ex-Canadian Government Employee Pleads Guilty Over NetWalker Ransomware Attacks

Israel plans Cyber-Dome to defeat digital attacks from Iran and others

North Korean Hackers Suspected to be Behind $100M Horizon Bridge Hack

~ 29 Jun 2022 ~

Start using Modern Auth now for Exchange Online

Patch Now: Linux Container-Escape Flaw in Azure Service Fabric

'Prolific' NetWalker extortionist pleads guilty to ransomware charges

ZuoRAT Hijacks SOHO Routers from Cisco, Netgear

Broken Authentication Vuln Threatens Amazon Photos Android App

How to Master the Kill Chain Before Your Attackers Do

What's Your AppSec Personality?

Microsoft at RSA 2022: Envisioning the future of security

Cyberattacks via Unpatched Systems Cost Orgs More Than Phishing

Shifting the Cybersecurity Paradigm From Severity-Focused to Risk-Centric

5 Surprising Cyberattacks AI Stopped This Year

Kaspersky Reveals Phishing Emails That Employees Find Most Confusing

Ecuadors Attempt to Resettle Edward Snowden

Do back offices mean backdoors?