Port 22

~ 26 Oct 2021 ~

Protect your business from password sprays with Microsoft DART recommendations

Pulling Back the Curtain on Bug Bounties

Wardrivers Can Still Easily Crack 70% of Wi-Fi Passwords

Matrix for the masses platform Element One goes live: $5 a month with WhatsApp, Signal, Telegram bridges

DDoSers take weekend off only to resume campaign against Voipfone on Monday

APT trends report Q3 2021

Fuji Electric Tellus Lite V-Simulator and V-Server Lite

Putting cybersecurity first: Why securebydesign must be the norm

Putting cybersecurity first: Why securebydesign must be the norm

GCHQ director outlines plan to 'go after' links between ransomware crims and state actors

Over 10 Million Android Users Targeted With Premium SMS Scam Apps

Malicious Firefox Add-ons Block Browser From Downloading Security Updates

OpenText Strengthens Ransomware Resilience

Forcepoint Completes Acquisition of Bitglass

Jumio Launches End-to-end Orchestration for its KYX Platform

~ 25 Oct 2021 ~

If you're using this hijacked NPM library anywhere in your software stack, read this

SolarWinds Attacker Targets Cloud Service Providers in New Supply Chain Threat

Industrial Goods & Services Tops Ransomware Targets in 2021

Who's In Your Wallet? Exploring Mobile Wallet Security

5 Ways CMMC Security Requirements May Impact Universities

Conti Ransom Gang Starts Selling Access to Victims

New York Times Journalist Hacked with NSO Spyware

Theres a wave of ransomware coming down the pipeline. What can you do about it?

Ransomware criminals have feelings too: BlackMatter abuse caused crims to shut down negotiation portal

Microsoft Digital Defense Report shares new insights on nation-state attacks

How We Can Narrow the Talent Shortage in Cybersecurity

SolarWinds attacker on the move: Russia's Nobelium crew has trebled attacks targeting MSPs, cloud resellers, says Microsoft

HIV Scotland fined 10,000 for BCC email blunder identifying names of virus-carriers' patient-advocates

Online harms dont need dangerous legislation, they need a spot of naval action

Facebook sues scraper who sold 178 million phone numbers and user IDs

NOBELIUM targeting delegated administrative privileges to facilitate broader attacks

New Attack Let Attacker Collect and Spoof Browser's Digital Fingerprints

Hardware-grade enterprise authentication without hardware: new SIM security solution for IAM

Cleanup on aisle C: Tesco app back online after attack led to shopping app outages

Microsoft Warns of Continued Supply-Chain Attacks by the Nobelium Hacker Group

Hackers Exploited Popular BillQuick Billing Software to Deploy Ransomware

Ultimate Guide to Leveraging AWS Security Hub and AWS Cong to meet SOC 2 Requirements

~ 24 Oct 2021 ~

NYT Journalist Repeatedly Hacked with Pegasus after Reporting on Saudi Arabia

New York Times: I Was Hacked. The Spyware Used Against Me Makes Us All Vulnerable.

11 Security Settings You Should Know About in Windows 11

Breaking the News: New York Times Journalist Ben Hubbard Hacked with Pegasus after Reporting on Previous Hacking Attempts

~ 23 Oct 2021 ~

Ransomware Rise Pushes Organizations to Prepare for Attack

International Operation Knocks Notorious REvil Group Offline

Microsoft Warns of TodayZoo Phishing Kit Used in Extensive Credential Stealing Attacks

Feds Reportedly Hacked REvil Ransomware Group and Forced it Offline

~ 22 Oct 2021 ~

Popular NPM Package Hijacked to Publish Crypto-mining Malware

Friday Squid Blogging: Squid Eating Maine Shrimp

aDolus Raises $2.5M to Secure Critical Infrastructure and Grow Sales and Marketing Team

'TodayZoo' Phishing Kit Cobbled Together From Other Malware

Better late than never: Microsoft rolls out a public preview of E2EE in Teams calls

7 Ways to Lock Down Enterprise Printers

What Does Better Insider Risk Management Look Like?

Recycled Cobalt Strike key pairs show many crooks are using same cloned installation

Consultation on Draft Guidance for Police Services Privacy Obligations on the Use of Facial Recognition Technology

Week in security with Tony Anscombe

Week in security with Tony Anscombe

What Squid Game Teaches Us About Cybersecurity

Nation-State Attacker of Telecommunications Networks

New Sex Toy Standards Let Some Sensitive Details Slide

Unhappy customers and their own tricks used against them, REvil ransomware gang reportedly pulled offline by 'multi-country' operations

Whats lurking in the shadows? How to manage the security risks of shadowIT

Whats lurking in the shadows? How to manage the security risks of shadowIT

'Lone Wolf' Hacker Group Targeting Afghanistan and India with Commodity RATs

How your phone, laptop, or watch can be tracked by their Bluetooth transmissions

Hackers Set Up Fake Company to Get IT Experts to Launch Ransomware Attacks

YouTubers fell for shady 'sponsors' who seized, then sold, accounts

Researchers Discover Microsoft-Signed FiveSys Rootkit in the Wild

~ 21 Oct 2021 ~

Google Buckles Down on Android Enterprise Security

Malware Abuses Core Features of Discord

Cybrary Launches New Partnership with Check Point Software to Make Cybersecurity Training Accessible to All

Security Teams Still Favor Prevention Over Detection

Akamai Technologies Completes Acquisition of Guardicore to Extend Its Zero Trust Solutions to Help Stop Ransomware

Plurilock to Acquire Assets of CloudCodes Software

Invicti Security Announces $625 Million Growth Investment Led by Summit Partners

Nearly Three-Quarters of Organizations Victimized by DNS Attacks in Past 12 Months

Cohesity Announces Disaster Recovery as a Service, Providing Automated Disaster Recovery

Cohesity Announces Disaster Recovery as a Service, Providing Automated Disaster Recovery

Why Should My Organization Consider XDR?

Microsoft Launches Security Program for Nonprofits

How Microsoft is partnering with vendors to provide Zero Trust solutions

Defenders wantedbuilding the new cybersecurity professionals

Macs Still Targeted Mostly With Adware, Less With Malware

We regret to inform you there's an RCE vuln in old version of WinRAR. Yes, the file decompression utility

Franken-phish: TodayZoo built from other phishing kits

How Psychology Can Save Your Cybersecurity Awareness Training Program

Problems with Multifactor Authentication

Before and After a Pen Test: Steps to Get Through It

B. Braun Infusomat Space Large Volume Pump

ICONICS GENESIS64 and Mitsubishi Electric MC Works64

Delta Electronics DIALink

ICONICS GENESIS64 and Mitsubishi Electric MC Works64 OPC UA

Cybersecurity careers: What to know and how to get started

Cybersecurity careers: What to know and how to get started

Research finds consumer-grade IoT devices showing up... on corporate networks

What is self-learning AI and how does It tackle ransomware?

Bug in Popular WinRAR Software Could Let Attackers Hack Your Computer

Product Overview: Cynet SaaS Security Posture Management (SSPM)

Malicious NPM Packages Caught Running Cryptominer On Windows, Linux, macOS Devices

U.S. Government Bans Sale of Hacking Tools to Authoritarian Regimes

Hackers Stealing Browser Cookies to Hijack High-Profile YouTube Accounts