Port 22

~ 12 May 2022 ~

Everything We Learned From the LAPSUS$ Attacks

~ 11 May 2022 ~

Government Agencies Warn of Increase in Cyberattacks Targeting MSPs

Hackers Deploy IceApple Exploitation Framework on Hacked MS Exchange Servers

Five Eyes turn spotlight on MSPs: Potential weak links in IT supply-chain security

CISA Urges Organizations to Patch Actively Exploited F5 BIG-IP Vulnerability

PlainID Debuts Authorization-as-a-Service Platform

Threat Actors Are Stealing Data Now to Decrypt When Quantum Computing Comes

Ready, IAM, Fire: How Weak IAM Makes You a Target

Android 13 Tries to Make Privacy and Security a No-Brainer

Cloud Firm Appian Awarded $2B in Trade Secret Cyber-Theft Lawsuit

Microsoft Simplifies Security Patching Process for Exchange Server

Orca Security Unveils Context-Aware Shift Left Security to Identify and Prevent Cloud Application Security Issues Earlier

Man Sentenced for Stealing from PayPal Accounts in Wire Fraud Scheme

Fraudulent 'Bot-driven' College Enrollment up 50%, New Study Finds

NSA Warns Managed Service Providers Are Now Prime Targets for Cyberattacks

Keeper Security Partners with SHI International for New Fully Managed IT Service (SHI Complete)

Concentric AI Raises Series A Funding Led by Ballistic Ventures to Autonomously Secure Business-Critical Data

Breaking Down the Strengthening American Cybersecurity Act

Quantum Ransomware Strikes Quickly, How to Prepare and Recover

Material Security Reaches $1.1 Billion Valuation for Zero Trust Security on Microsoft and Google Email

Center for Threat-Informed Defense, Microsoft, and industry partners streamline MITRE ATT&CK matrix evaluation for defenders

The EU Wants Big Tech to Scan Your Private Chats for Child Abuse

SpyCloud Report: Fortune 1000 Employees Pose Elevated Cyber Risk to Companies

Fresh ransomware samples indicate REvil is back

Cyber-Espionage Attack Drops Post-Exploit Malware Framework on Microsoft Exchange Servers

ICE Is a Domestic Surveillance Agency

The Danger of Online Data Brokers

Vanity URLs Could be Spoofed for Social Engineering Attacks

New ransomware trends in 2022

Thousands of Top Websites See What You TypeBefore You Hit Submit

Novel Nerbian RAT Lurks Behind Faked COVID Safety Emails

Opportunity out of crisis: Tapping the Great Resignation to close the cybersecurity skills gap

Yahoo Japan strives for universal passwordless authentication

[White Paper] Social Engineering: What You Need to Know to Stay Resilient

Bitter APT Hackers Add Bangladesh to Their List of Targets in South Asia

Researchers Warn of Nerbian RAT Targeting Entities in Italy, Spain, and the U.K

Microsoft Patch Tuesday, May 2022 Edition

Malicious NPM Packages Target German Companies in Supply Chain Attack

Microsoft closes Windows LSA hole under active attack

Cloud Instance Metadata Services (IMDS)

E.U. Blames Russia for Cyberattack on KA-SAT Satellite Network Operated by Viasat

~ 10 May 2022 ~

Email domain for NPM lib with 6m downloads a week grabbed by expert to make a point

What to Patch Now: Actively Exploited Windows Zero-Day Threatens Domain Controllers

Microsoft Releases Fix for New Zero-Day with May 2022 Patch Tuesday Updates

US Pledges to Help Ukraine Keep the Internet and Lights On

US, Europe formally blame Russia for data wiper attacks against Ukraine, Viasat

AMD Gave Google Cloud Rare Access to Its Tech to Hunt Chip Flaws

Lincoln College Set to Close After Crippling Cyberattack

Cybercriminals Are Increasingly Exploiting Vulnerabilities in Windows Print Spooler

Microsoft security experts outline next steps after compromise recovery

Arctic Wolf Launches Arctic Wolf Labs Focused on Security Operations Research and Intelligence Reporting

5-Buck DCRat Malware Foretells a Worrying Cyber Future

Onapsis Announces New Offering to Jumpstart Security for SAP Customers

Malware goes regional as attackers change tactics

Mastering the New CISO Playbook

Adminer in Industrial Products

Eaton Intelligent Power Protector

Eaton Intelligent Power Manager Infrastructure

Eaton Intelligent Power Manager

AVEVA InTouch Access Anywhere and Plant SCADA Access Anywhere

Mitsubishi Electric MELSOFT GT OPC UA

5 Benefits of Detection-as-Code

New REvil Samples Indicate Ransomware Gang is Back After Months of Inactivity

Experts Detail Saintstealer and Prynt Stealer Info-Stealing Malware Families

Microsoft Mitigates RCE Vulnerability Affecting Azure Synapse and Data Factory