Port 22

~ 21 Jun 2021 ~

Software-Container Supply Chain Sees Spike in Attacks

Data Leaked in Fertility Clinic Ransomware Attack

Baltimore County Public Schools' Ransomware Recovery Tops $8M

The Future of Machine Learning and Cybersecurity

Statesponsored or financially motivated: Is there any difference anymore?

5 Critical Steps to Recovering From a Ransomware Attack

Sharpen your cybersecurity skills, however and wherever works for you, with these SANS Institute courses

South Koreas nuclear research agency breached by North Korea-affiliated cyberattackers, says malware analyst group

DroidMorph Shows Popular Android Antivirus Fail to Detect Cloned Malicious Apps

Beware! Connecting to This Wireless Network Can Break Your iPhone's Wi-Fi Feature

~ 19 Jun 2021 ~

A Bug in the Android Google App Put Privacy at Risk

~ 18 Jun 2021 ~

North Korea Exploited VPN Flaw to Hack South's Nuclear Research Institute

Cyber espionage by Chinese hackers in neighbouring nations is on the rise

Friday Squid Blogging: Video of Giant Squid Hunting Prey

This Week in Database Leaks: Cognyte, CVS, Wegmans

Microsoft announces recipients of academic grants for AI research on combating phishing

Racist malware blocks The Pirate Bay by tampering with victims' Windows hosts file

Week in security with Tony Anscombe

CREST president Ian Glover to retire after 13 years but where's the transparency, bossman?

A New Tool Wants to Save Open Source from Supply Chain Hacks

First American Financial Pays Farcical $500K Fine

Peloton Vulnerability Found and Fixed

Poltergeist attack could leave autonomous vehicles blind to obstacles or haunt them with new ones

4 Habits of Highly Effective Security Operators

5 essential things to do before ransomware strikes

Russia bans VyprVPN, Opera VPN services for not complying with blacklist request

SANS DFIR Summit 2021 Top 10 Summit improvements you must know

Computer Security Resources

Google Releases New Framework to Prevent Software Supply Chain Attacks

Google dishes out homemade SLSA, a recipe to thwart software supply-chain attacks

~ 17 Jun 2021 ~

[eBook] 7 Signs You Might Need a New Detection and Response Tool

Update Your Chrome Browser to Patch Yet Another 0-Day Exploit in-the-Wild

Ex-Brave staffer launches GDPR sueball in Germany over tech giants' real-time bidding for ad inventory

Intentional Flaw in GPRS Encryption Algorithm GEA-1

The Cl0p Bust Shows Exactly Why Ransomware Isnt Going Away

One in Five Manufacturing Firms Targeted by Cyberattacks

Carnival Cruise Line Reports Security Breach

Google Launches SLSA, A New Framework for Supply Chain Integrity

Improve your threat detection and response with Microsoft and Wortell

Most health apps engage in unhealthy dataharvesting habits

Tim Cook: Sideloading is a disaster and proposed App Store reforms would harm user privacy and security

Paul van Oorschots Computer Security and the Internet

Schneider Electric Enerlin'X ComX 510

Softing OPC-UA C++ SDK

Advantech WebAccess/SCADA

Black Kingdom ransomware

Rockwell Automation ISaGRAF5 Runtime (Update A)

Biden to Putin: Get your ransomware gangs under control and dont you dare cyber-attack our infrastructure

Molerats Hackers Return With New Attacks Targeting Middle Eastern Governments

South Korea has a huge problem with digital sex crimes against women says Human Rights Watch

A New Spyware is Targeting Telegram and Psiphon VPN Users in Iran

GPRS-era mobile data encryption algorithm GEA/1 was 'weak by design', still lingers in today's phones

Strengthen Your Password Policy With GDPR Compliance

Researchers Uncover 'Process Ghosting' A New Malware Evasion Technique

2021 Verizon Data Breach Incident Report Insights

~ 16 Jun 2021 ~

School teacher accused of pocketing $1m+ in insider trading using tips from Silicon Valley pal

Ransomware Operators' Strategies Evolve as Attacks Rise

Ryuk ransomware recovery cost us $8.1m and counting, says Baltimore school authority

Smoking Out a DARKSIDE Affiliates Supply Chain Software Compromise

Smoking Out a DARKSIDE Affiliates Supply Chain Software Compromise

Biden Tells Putin Critical Infrastructure Sectors 'Off Limits' to Russian Hacking

Security Flaw Discovered In Peloton Equipment

We've found another reason not to use Microsoft's Paint 3D researchers

Ukrainian Police Nab Six Tied to CLOP Ransomware

Cuffed: Ukraine police collar six Clop ransomware gang suspects in joint raids with South Korean cops

Papa don't breach: UK data watchdog fines that other pizza place 10,000 over unsolicited marketing blitz

VPNs and Trust

DuckDuckGos Quest to Prove Online Privacy Is Possible

Ferocious Kitten: 6 years of covert surveillance in Iran

OSINT 101: What is open source intelligence and how is it used?

Ukraine Police Arrest Cyber Criminals Behind Clop Ransomware Attacks

Malware Attack on South Korean Entities Was Work of Andariel Group

Alibaba suffers billion-user data leak of usernames and mobile numbers

Ransomware Attackers Partnering With Cybercrime Groups to Hack High-Profile Targets

Top 5 ICS Incident Response Tabletops and How to Run Them

Slow the Revolving Door of Talent

SANS 2021 Threat Report

Critical ThroughTek Flaw Opens Millions of Connected Cameras to Eavesdropping

~ 15 Jun 2021 ~

Zoll Defibrillator Dashboard would execute contents of random Excel files ordinary users could import

Microsoft Disrupts Large-Scale BEC Campaign Across Web Services

Andariel Group Targets South Korean Entities in New Campaign

Microsoft takes down largescale BEC operation

Afternoon Cyber Tea: Microsofts cybersecurity response to COVID-19

Andrew Appel on New Hampshires Election Audit

How Does One Get Hired by a Top Cybercrime Gang?

Apple Says It's Time to Digitize Your ID, Ready or Not

NCSC chief: Ransomware is more of a threat to Britain than hostile nations' spies

Deloitte Buys Terbium Labs to Expand Threat Intel Capabilities

TimeCache aims to block side-channel cache attacks without hurting performance

Andariel evolves to target South Korea with ransomware

Brit IT firms wound up by court order after fooling folk into paying for 'support' over fake computer errors

The latest REvil ransomware victim? Sol Oriens. Oh, a US nuclear weapons contractor

ThroughTek P2P SDK

Automation Direct CLICK PLC CPU Modules

When security gets physical: Mossad boss hints at less-than-subtle Stuxnet followup

Experts Shed Light On Distinctive Tactics Used by Hades Ransomware

NATO summit communiqu compares repeat cyberattacks to armed attacks and stops short of saying 'one-in, all-in' rule will always apply

Instagram Bug Allowed Anyone to View Private Accounts Without Following Them

Protecting Against Ransomware From the Human Perspective

~ 14 Jun 2021 ~

G7 nations call out Russia for harbouring ransomware crims ahead of Biden-Putin powwow