Port 22

~ 20 May 2022 ~

Microsoft patches the patch that broke Windows authentication

New Open Source Project Brings Consistent Identity Access to Multicloud

Bluetooth Flaw Allows Remote Unlocking of Digital Locks

Microsoft Bing censors politically sensitive Chinese terms internationally, reports Citizen Lab

Protecting data now as the quantum era approaches

Canada bans Huawei and ZTE from 5G networks, citing national security risks

India slightly softens infosec incident reporting and data retention rules

Microsoft Warns Rise in XorDdos Malware Targeting Linux Devices

Cytrox's Predator Spyware Target Android Users with Zero-Day Exploits

Researchers Uncover Rust Supply-Chain Attack Targeting Cloud CI Pipelines

Hackers Exploiting VMware Horizon to Target South Korea with NukeSped Backdoor

US wont prosecute good faith security researchers under CFAA

~ 19 May 2022 ~

Hackers Trick Users with Fake Windows 11 Downloads to Distribute Vidar Malware

More Than 1,000 Cybersecurity Career Pursuers Complete the (ISC) Entry-Level Cybersecurity Certification Pilot Exam

Deadbolt Ransomware Targeting QNAP NAS Devices

US recovers a record $15m from the 3ve ad-fraud crew

QNAP Urges Users to Update NAS Devices to Prevent Deadbolt Ransomware Attacks

Pro-Russian Information Operations Escalate in Ukraine War

DoJ Won't Charge 'Good Faith' Security Researchers

Majority of Kubernetes API Servers Exposed to the Public Internet

Dig Exits Stealth With $11M for Cloud Data Detection and Response Solution

Spyware Vendors Target Android With Zero-Day Exploits

Rise in XorDdos: A deeper look at the stealthy DDoS malware targeting Linux devices

Iran, China-linked gangs join Putin's disinformation war online

6 Scary Tactics Used in Mobile App Attacks

Phishing Attacks for Initial Access Surged 54% in Q1

Bada Bing, Bada Boom: Microsoft Bings Chinese Political Censorship of Autosuggestions in North America

Websites that Collect Your Data as You Type

Mitsubishi Electric MELSEC iQ-F Series

Hot glare of the spotlight doesnt slow BlackByte ransomware gang

The flip side of the coin: Why crypto is catnip for criminals

New Bluetooth Hack Could Let Attackers Remotely Unlock Smart Locks and Cars

The cyber threat isnt going anywhere, but the fight back starts in London

7 Key Findings from the 2022 SaaS Security Survey Report

Your snoozing iOS 15 iPhone may actually be sleeping with one antenna open

High-Severity Bug Reported in Google's OAuth Client Library for Java

Patch your VMware gear now or yank it out, Uncle Sam tells federal agencies

~ 18 May 2022 ~

Web Trackers Caught Intercepting Online Forms Even Before Users Hit Submit

VMware Releases Patches for New Vulnerabilities Affecting Multiple Products

MITRE Creates Framework for Supply Chain Security

CISA to Federal Agencies: Patch VMWare Products Now or Take Them Offline

Meet Wizard Spider, the multimillion-dollar gang behind Conti, Ryuk malware

How Pwn2Own Made Bug Hunting a Real Sport

Lacework Integrates Kubernetes Features to Enhance Security Across Multi-Cloud Environments

How these crooks backdoor online shops and siphon victims' credit card info

CISA: Unpatched F5 BIG-IP Devices Under Active Attack

The Industry Must Better Secure Open Source Code From Threat Actors

Senators Urge FTC to Probe ID.me Over Selfie Data

Microsoft Flags Attack Targeting SQL Servers With Novel Approach

2022: The Year Zero Trust Becomes Mainstream

So you want to be a CISO: What you should know about data protection

How Threat Actors Are a Click Away From Becoming Quasi-APTs

Your data's auctioned off up to 987 times a day, NGO reports

iPhone Malware that Operates Even When the Phone Is Turned Off

This Hacktivist Site Lets You Prank-Call Russian Officials

Microsoft warns partners to revoke unused authorizations that drive <em>your</em> software

Fake news why do people believe it?

State of internet crime in Q1 2022: Bot traffic on the rise, and more

Monero-mining botnet targets Windows, Linux web servers

How to Protect Your Data When Ransomware Strikes

Researchers Expose Inner Workings of Billion-Dollar Wizard Spider Cybercrime Gang

[eBook] Your 90-Day MSSP Plan: How to Improve Margins and Scale-Up Service Delivery

Hackers Gain Fileless Persistence on Targeted SQL Servers Using a Built-in Utility