Port 22

~ 24 May 2022 ~

New Zoom Flaws Could Let Attackers Hack Victims Just by Sending them a Message

Microsoft Elevation-of-Privilege Vulnerabilities Spiked Again in 2021

Patch now: Zoom chat messages can infect PCs, Macs, phones with malware

New Attack Shows Weaponized PDF Files Remain a Threat

DeFi Is Getting Pummeled by Cybercriminals

New Connecticut Privacy Law Makes Path to Compliance More Complex

XM Cyber Adds New Security Capability for Microsoft Active Directory

Strong Password Policy Isn't Enough, Study Shows

Why do hackers keep coming back to attack you? Because they can

Facebook opens political ad data vaults to researchers

Netskope Expands Data Protection Capabilities to Endpoint Devices and Private Apps

Nisos Announces $15 Million in Series B Funding Round

Crypto Hacks Arent a Niche Concern; They Impact Wider Society

The Justice Department Will No Longer Charge Security Researchers with Criminal Hacking

Open Source Intelligence May Be Changing Old-School War

Rockwell Automation Logix Controllers

Matrikon OPC Server

It's 2022 and there are still malware-laden PDFs in emails exploiting bugs from 2017

The Surveillance State Is Primed for Criminalized Abortion

Popular PyPI Package 'ctx' and PHP Library 'phpass' Hijacked to Steal AWS Keys

SIM-based Authentication Aims to Transform Device Binding Security to End Phishing

Malware Analysis: Trickbot

Conti Ransomware Gang Shut Down After Splitting into Smaller Groups

Microsoft Warns of Web Skimmers Mimicking Google Analytics and Meta Pixel Code

Purple Teaming Threat-Informed Detection Engineering

Instructor Spotlight: Nico Dekens

Screencastify fixes bug that would have let rogue websites spy on webcams

~ 23 May 2022 ~

Multiple Governments Buying Android Zero-Days for Spying: Google

QuSecure Carves Out Space in Quantum Cryptography With Its Vision of a Post-RSA World

Malicious Python Repository Package Drops Cobalt Strike on Windows, macOS & Linux Systems

Linux Trojan XorDdos Attacks Surge, Targeting Cloud, IoT

Anatomy of a DDoS amplification attack

Why the Employee Experience Is Cyber Resilience

How to improve risk management using Zero Trust architecture

Beneath the surface: Uncovering the shift in web skimming

Valeo Networks Acquires Next I.T.

Kingston Digital Releases Touch-Screen Hardware-Encrypted External SSD for Data Protection

After the Okta Breach, Diversify Your Sources of Truth

Forging Australian Drivers Licenses

How GDPR Is Failing

ISaPWN research on the security of ISaGRAF Runtime

Common NFT scams and how to avoid them

Yes, Containers Are Terrific, But Watch the Security Risks

How to find NPM dependencies vulnerable to account hijacking

Microsoft sounds the alarm on wait for it a Linux botnet

South Korean and US presidents gang up on North Korea's cyber-offensives

Fronton: Russian IoT Botnet Designed to Run Social Media Disinformation Campaigns

PayPal Pays a Hacker $200,000 for Discovering 'One-Click-Hack' Vulnerability

Instructor Spotlight: Nick Mitropoulos

~ 22 May 2022 ~

How to Limit Who Can Contact You on Facebook

~ 21 May 2022 ~

North Korean IT Workers Are Infiltrating Tech Companies

Conti: Russian-backed rulers of Costa Rican hacktocracy?

~ 20 May 2022 ~

Researchers Find Backdoor in School Management Plugin for WordPress

Cisco Issues Patch for New IOS XR Zero-Day Vulnerability Exploited in the Wild

Friday Squid Blogging: Squid Street Art

China-linked Twisted Panda caught spying on Russian defense R&D

Chatbot Army Deployed in Latest DHL Shipping Phish

Partial Patching Still Provides Strong Protection Against APTs

The Onion on Google Map Surveillance

Quantum Key Distribution for a Post-Quantum World

Cryptocurrency: secure or not? Week in security with Tony Anscombe

Sandworm uses a new version of ArguePatch to attack targets in Ukraine

Microsoft Rushes a Fix After May Patch Tuesday Breaks Authentication

University of Toronto Magazine: The Extremism Machine

Authentication Is Static, Yet Attackers Are Dynamic: Filling the Critical Gap