Port 22

~ 14 May 2021 ~

Rapid7 Source Code Breached in Codecov Supply-Chain Attack

~ 13 May 2021 ~

Decades-Old Flaws Affect Almost Every Wi-Fi Device

GameStop FOMO Inspires a New Wave of Crypto Pump-and-Dumps

Ransomware victim Colonial Pipeline paid $5m to get oil pumping again, restored from backups anyway report

85% of Data Breaches Involve Human Interaction: Verizon DBIR

European police bust major online investment fraud ring

When AI Becomes the Hacker

New US Executive Order on Cybersecurity

Colonial Pipeline was looking to hire cybersecurity manager before ransomware attack shut down operations

The Best Personal Safety Devices, Apps, and Alarms

Rockwell Automation Connected Components Workbench

Johnson Controls Sensormatic Tyco AI

OPC Foundation UA Products Built with .NET Framework

Oops, says Manchester City Council after thousands of number plates exposed in parking ticket spreadsheet

OPC UA Products Built with the .NET Framework 4.5, 4.0, and 3.5

Can Data Protection Systems Prevent Data At Rest Leakage?

Dark Web Getting Loaded With Bogus Covid-19 Vaccines and Forged Cards

Security Awareness is Managing Human Risk

Ransomware: Leadership Perspective

When it comes to cybersecurity, there's always time for summer school or winter training

~ 12 May 2021 ~

Apple's Find My network can be abused to leak secrets to the outside world via passing devices

Researchers Unearth 167 Fake iOS & Android Trading Apps

Putting The Spotlight on DarkSide

Happy to pay out to ransomware masterminds? Yup, we thought so

Vulnerable Protocols Leave Firms Open to Further Compromises

1 million risky apps rejected or removed from Apples App Store in 2020

Securing a new world of hybrid work: What to know and what to do

How to secure your hybrid work world with a Zero Trust approach

Hashes, Salts, and Rainbow Tables: Confessions of a Password Cracker

Book Sale: Beyond Fear

Britain to spend 22m influencing Indo-Pacific nations' cybersecurity policies against 'authoritarian regimes'

ESET Research goes to RSA Conference 2021 with two presentations

ESET Research goes to RSA Conference 2021 with record number of presentations

Ransomware world in 2021: who, how and why

Blessed are the cryptographers, labelling them criminal enablers is just foolish

Nearly All Wi-Fi Devices Are Vulnerable to New FragAttacks

Beijing twirls ban-hammer at 84 more apps it says need to stop slurping excess data

South Korea orders urgent review of energy infrastructure cybersecurity

Latest Microsoft Windows Updates Patch Dozens of Security Flaws

FOR528: Ransomware for Incident Responders - New DFIR Course Coming Soon

Cut Through the Noise: Ransomware What to Communicate to Your Workforce

Tech industry quietly patches FragAttacks Wi-Fi flaws that leak data, weaken security

Ransomware Gang Leaks Metropolitan Police Data After Failed Negotiations

~ 11 May 2021 ~

Alert: Hackers Exploit Adobe Reader 0-Day Vulnerability in the Wild

Shining a Light on DARKSIDE Ransomware Operations

Shining a Light on DARKSIDE Ransomware Operations

Microsoft Patch Tuesday, May 2021 Edition

SolarWinds CEO describes overhauled Orion build system after that 'very small, unique' security breach

Microsoft emits more fixes for Exchange Server plus patches for remote-code exec holes in HTTP stack, Visual Studio

Threat and Vulnerability Management now supports all major platforms

A Startup With NSA Roots Wants Silently Disarming Cyberattacks on the Wire to Become the Norm

Application Attacks Spike as Criminals Target Remote Workers

Microsoft Patch Tuesday: 4 Critical CVEs, 3 Publicly Known, 1 Wormable

A Closer Look at the DarkSide Ransomware Gang

Gartner names Microsoft a Leader in the 2021 Endpoint Protection Platforms Magic Quadrant

UK's Computer Misuse Act to be reviewed, says Home Secretary as she condemns ransomware payoffs

Cartoon Caption Winner: Greetings, Earthlings

NHS App gets go-ahead for vaccine passport use despite protest from privacy groups

NHS App gets go-ahead for UK vaccine passport use despite protest from privacy groups

AI Security Risk Assessment Tool

App Tracking: Apps plead for users to press allow, but 85% of Apple iOS consumers are not opting in

WhatsApp will limit features for users who dont accept new datasharing rules

Omron CX-One

Mitsubishi Electric GOT and Tension Controller

Siemens Linux Based Products

Siemens SINAMICS Medium Voltage Products

Siemens Mendix Database Replication Module

Siemens SNMP Implementation of WinCC Runtime

Siemens SIMATIC NET CP343-1

Siemens Tecnomatix Plant Simulation

Siemens Mendix Excel Importer Module

Siemens SCALANCE XM-400 and XR-500 Devices

Compsci boffin publishes proof-of-concept code for 54-year-old zero-day in Universal Turing Machine

Train operator phlunks phishing test by teasing employees with non-existent COVID bonus

LIVE Webinar The Rabbit Hole of Automation

U.S Intelligence Agencies Warn About 5G Network Weaknesses

Tencent research team scores free powerups for electric cars with Raspberry Pi-powered X-in-the-middle attack

Indian government says 5G doesnt cause COVID-19. Also points out India has no 5G networks

Experts warn of a new Android banking trojan stealing users' credentials

Trend Micro hosted email service is down, inboxes still stuck in cloudy limbo

U.S. Declares Emergency in 17 States Over Fuel Pipeline Cyber Attack

DarkSide Hit Colonial Pipelineand Created an Unholy Mess

~ 10 May 2021 ~

Apple Execs Chose to Keep a Hack of 128 Million iPhones Quiet

Ransomware Shuts Down US Pipeline

Kubecon 2021: A largely dry and corporate affair where the best bits involved a spot of Kubernetes-hacking roleplay

Colonial Pipeline Cyberattack: What Security Pros Need to Know

Four Plead Guilty to RICO Conspiracy Involving Hosting Services for Cybercrime

Fintech Startup Offers $500 for Payroll Passwords

Uncle Sam wants 'ethical hackers' to crack its planetary defenses, but don't expect a pay-day from this bug bounty

Newly Unclassified NSA Document on Cryptography in the 1970s

DDoS attacks in Q1 2021

Namecheap hosted 25%+ of fake UK govt phishing sites last year NCSC report

Over 25% Of Tor Exit Relays Spied On Users' Dark Web Activities

Is it still a good idea to require users to change their passwords?

SANS ICS Site Visit Plan

Cut Through the Noise: Are Password Managers Still Safe and Secure?

Ransomware shuts US oil pipeline that pumps 100 million gallons a day

~ 9 May 2021 ~

Four Plead Guilty to Aiding Cyber Criminals with Bulletproof Hosting

What's Google Floc? And How Does It Affect Your Privacy?

Google Gets Serious About Two-Factor Authentication. Good!