Port 22

~ 12 Dec 2021 ~

Apache Log4j Vulnerability Log4Shell Widely Under Active Attack

How to Guard Against Smishing Attacks on Your Phone

Guidance for preventing, detecting, and hunting for CVE-2021-44228 Log4j 2 exploitation

~ 11 Dec 2021 ~

US Wins Appeal to Extradite Julian Assange

What to Do While Waiting for the Log4J Updates

~ 10 Dec 2021 ~

Friday Squid Blogging: The Far Side Squid Comic

Security Experts Sound Alarm on Zero-Day in Widely Used Log4j Tool

NIST Cyber-Resiliency Framework Extended to Include Critical Infrastructure Controls

Irish Health Service ransomware attack happened after one staffer opened malware-ridden email

Russian National Sentenced for Role in Kelihos Botnet

Extremely Critical Log4J Vulnerability Leaves Much of the Internet at Risk

A Log4J Vulnerability Has Set the Internet 'On Fire'

Dark Reading Reflects on a Legacy and Life Well-Written: Tim Wilson

Log4j RCE: Emergency patch issued to plug critical auth-free code execution hole in widely-used logging utility

The Vulnerability Lag: Cut Ransomware Risks Resulting From Digital Transformation

Week in security with Tony Anscombe

Revealed: Remember the Sony rootkit rumpus? It was almost oh so much worse

New Firefox Sandbox Isolates Third-Party Libraries

Law Enforcement Access to Chat Data and Metadata

Russias Internet Censorship Machine Is Going After Tor

BlackCat: A New Rust-based Ransomware Malware Spotted in the Wild

Ransomwared payroll provider leaks data on 38,000 Australian government workers

1.6 Million WordPress Sites Under Cyberattack From Over 16,000 IP Addresses

Russia Blocks Tor Privacy Service in Latest Censorship Move

~ 9 Dec 2021 ~

Broadcom Inc. Announces $10 Billion Share Repurchase Authorization

Emotet Is Back and More Dangerous Than Before

Why Red Teaming While Black Can Be Risky

Researchers Explore Microsoft Outlook Phishing Techniques

Lack of Patching Leaves 300,000 Routers at Risk for Attack

Best practices for AI security risk management

A third of you slackers out there still aren't using HTTPS by default

One-Third of Phishing Pages Gone in a Day

One-Third of Phishing Pages Active Less Than A Day

A closer look at Qakbots latest building blocks (and how to knock them down)

Why the Private Sector Is Key to Stopping Russian Hacking Group APT29

LastPass Announces New Integration with Google Workspace

Google Shuts Down Glupteba Botnet, Sues Operators

Resistance is ... cheap? Cloudflare, Mandiant, and pals form incident response 'n' cyber insurance borg

How to Build a Better Internal Fraud Protection Program

The Executive Women's Forum on Information Security, Risk Management & Privacy Presents the Leadership Scholarship

IRONSCALES Raises $64 Million in Series C Funding Round Led by PSG

Intel 471 Forms Tech Alliance With CyCognito

(ISC) Welcomes Students to Apply for its Undergraduate, Graduate, and Women's Cybersecurity Scholarships

Zscaler Extends Zero Trust Exchange Platform to Deliver Zero Trust for Workloads

SnapHack: Watch out for those who can hack into anyones Snapchat!

Hillrom Welch Allyn Cardio Products

Hitachi Energy GMS600, PWC600, and Relion

WECON LeviStudioU

The life cycle of phishing pages

Ransomware giving you sleepless nights? Heres how to insure a good nights sleep

Oz Feds reveal distribution model behind backdoored 'An0m' chat app spread by crims

Why Holidays Put Your Company at Risk of Cyber Attack (And How to Take Precautions)

Over 300,000 MikroTik Devices Found Vulnerable to Remote Hacking Bugs

~ 8 Dec 2021 ~

Canada Charges Its Most Prolific Cybercriminal

A Year After SolarWinds, Supply Chain Threats Still Loom

Over a Dozen Malicious NPM Packages Caught Hijacking Discord Servers

How to Stop Hackers From Turning Your Systems Against You

Claroty Raises $400M More, Acquires Healthcare IoT Security Firm Medigate

Newly Found Authentication Flaws Highlight Dangers of Coding From Scratch

SonicWall Urges Customers to Immediately Patch Critical SMA 100 Flaws

New German Government is Pro-Encryption and Anti-Backdoors

Microsoft Seizes Domains Used by a Chinese Hacking Group

Canadian charged with running ransomware attack on US state of Alaska

How Do I Empower a Remote Workforce Without Compromising Security?

Trickbot-Infected Machines Drop Emotet Samples

New research shows IoT and OT innovation is critical to business but comes with significant risks

Not all tech disasters are all hands events. But how do you tell which is which?

Why Cloud Service Providers Are a Single Point of Failure

How to Opt Out of Verizons Custom Experience Tracking

Improve kernel security with the new Microsoft Vulnerable and Malicious Driver Reporting Center

Virgin Media fined 50,000 after spamming 451,000 who didn't want marketing emails

5 Tips to Stay on the Offensive and Safeguard Your Attack Surface

Whats the right amount of trust to build into your network? Less than Zero

Microsoft extends Secured-core concept to servers

Google Disrupts Blockchain-based Glupteba Botnet; Sues Russian Hackers

140,000 Reasons Why Emotet is Piggybacking on TrickBot in its Return from the Dead

[eBook] Guide to Achieving 24x7 Threat Monitoring and Response for Lean IT Security Teams

Top 10 SANS Summits Talks of 2021

Finest Free Torrenting VPNs

~ 7 Dec 2021 ~

Ripple Effects Felt Across the Internet With AWS Outage

New Financial Services Industry Report Reveals Major Gaps in Storage and Backup Security

Google Disrupts Botnet Targeting Windows Machines

Warning: Yet Another Bitcoin Mining Malware Targeting QNAP NAS Devices

Rubrik's New Managed Service Protects Data from Ransomware Attacks

Virtual-Network Vulnerability Found in AWS, Other Clouds

Cerberus Sentinel Announces Acquisition of Arkavia Networks

The Dark Web Has Its Own People's Court

DigiCert Advances Passwordless Authentication with Support for Windows Hello for Business

5 Ways GRC & Security Can Partner to Reduce Insider Risk

New Secured-core servers are now available from the Microsoft ecosystem to help secure your infrastructure

Cryptominers aren't just a headache they're a big neon sign that Bad Things are on your network

Defending Against the Use of Deepfakes for Cyber Exploitation

Foreign Office IT chaos: Shocking testimony reveals poor tech support hindered Afghan evac attempts

Someone Is Running Lots of Tor Relays

5 common gift card scams and how to spot them

Hitachi Energy RTU500 OpenLDAP

Hitachi Energy XMC20 and FOX61x

FANUC Robot Controllers

The story of the year: ransomware in the headlines

Cybersecurity Takes the Wheel as Auto Industry's Top Priority