Port 22

~ 9 Aug 2021 ~

Black Hat security conference returns to Las Vegas complete with hacks to quiet the hotel guest from hell

Pulse Secure VPNs Get New Urgent Update for Poorly Patched Critical Flaw

Why You Need Automation to Achieve Compliance in the Cloud - Part 2

Vulnerability Management Resources

~ 8 Aug 2021 ~

What You Should Know About the Google Play Store Changes

~ 7 Aug 2021 ~

Microsoft Edges Super Duper Secure Mode Does What It Says

All the Ways Spotify Tracks Youand How to Stop It

AI Wrote Better Phishing Emails Than Humans in a Recent Test

~ 6 Aug 2021 ~

Squid Dog Toy

All your DNS were belong to us: AWS and Google Cloud shut down spying vulnerability

FragAttacks Foil 2 Decades of Wireless Security

Week in security with Tony Anscombe

Black Hat 2021: Lessons from a lawyer

Black Hat 2021: Wanted posters for ransomware slingers

IIStealer: A serverside threat to ecommerce transactions

Anatomy of native IIS malware

Using Master Faces to Bypass Face-Recognition Authenticating Systems

Researchers Call for 'CVE' Approach for Cloud Vulnerabilities

Apple to Scan Every Device for Child Abuse Content But Experts Fear for Privacy

South Korea to test grenade-launching drones

Microsoft wonders if disabling just-in-time compilation of JavaScript improves browser security

New Amazon Kindle Bug Could've Let Attackers Hijack Your eBook Reader

USA enlists Big Tech to help it develop and execute cyber security plans

India's Koo, a Twitter-like Service, Found Vulnerable to Critical Worm Attacks

US 'dropped the ball' on security by going it alone claims Huawei US CSO

VMware Issues Patches to Fix Critical Bugs Affecting Multiple Products

~ 5 Aug 2021 ~

Apple is about to start scanning iPhone users' devices for banned content, warns professor

Messaging Apps Have an Eavesdropping Problem

Apple Walks a Privacy Tightrope to Spot Child Abuse in iCloud

CISA Launches JCDC, the Joint Cyber Defense Collaborative

Incident Responders Explore Microsoft 365 Attacks in the Wild

Sharing the first SimuLand dataset to expedite research and learn about adversary tradecraft

Is your personal information being abused?

Got a cheap Cisco router in your home office? If it's one of these, there's an exposed RCE hole you need to plug

Ransomware Gangs and the Name Game Distraction

A New Approach to Securing Authentication Systems' Core Secrets

Zoom Lied about End-to-End Encryption

Das tut mir leid! Germany's ruling party sorry for calling cops on researcher after she outed canvassing app flaws

HCC Embedded InterNiche TCP/IP stack, NicheLite

FATEK Automation FvDesigner

mySCADA myPRO

Spam and phishing in Q2 2021

Advantech WebAccess SCADA

Why cloud security is the key to unlocking value from hybrid working

Not all authentication is created equal and thats a good thing

Salesforce Release Updates A Cautionary Tale for Security Teams

A Wide Range of Cyber Attacks Leveraging Prometheus TDS Malware Service

Unpatched Security Flaws Expose Mitsubishi Safety PLCs to Remote Attacks

A Visual Summary of SANS Security Awareness Summit 2021

~ 4 Aug 2021 ~

Cisco Issues Critical Security Patches to Fix Small Business VPN Router Bugs

Spotting brand impersonation with Swin transformers and Siamese neural networks

Watch a Hacker Hijack a Hotel Room's Lights, Fans, and Beds

Worried your data protection strategy is dated? Dont let a ransomware infection prove you right

SolarWinds urges US judge to toss out crap infosec sueball: We got pwned by actual Russia, give us a break

Black Hat 2021 nonvirtual edition

Several Malware Families Targeting IIS Web Servers With Malicious Modules

Google: Linux kernel and its toolchains are underinvested by at least 100 engineers

UK data watchdog sees its approach to government health tech during COVID-19 outbreak as 'pragmatic'

Legacy EDR. Yes, its a thing

Russian Federal Agencies Were Attacked With Chinese Webdav-O Virus

New Chinese Spyware Being Used in Widespread Cyber Espionage Attacks

~ 3 Aug 2021 ~

Critical Flaws Affect Embedded TCP/IP Stack Widely Used in Industrial Control Devices

Citizen's New Service Helps Paying Users Summon the Cops

Russia tells UN it wants vast expansion of cybercrime offenses, plus network backdoors, online censorship

Do you have a grip on the lifecycle security of your AWS-deployed applications?

How to manage a side-by-side transition from your traditional SIEM to Azure Sentinel

UK's Ministry of Defence coughs up bug bounties for public-facing web pentesting

France Cracked Down on Googles Ad Tech. Whats Next?

Paragon: Yet Another Cyberweapons Arms Manufacturer

Shopping for execs: ID management biz Okta poaches Google's veep of engineering to run product dev activities

Swisslog Healthcare Translogic PTS

Chinese Hackers Target Major Southeast Asian Telecom Companies

Research finds attack groups working for 'Chinese state interests' lurking in SE Asian telco networks since 2017

~ 2 Aug 2021 ~

Credit-card-stealing, backdoored packages found in Python's PyPI library hub

Nuisance call-blocking firm fined 170,000 for making almost 200,000 nuisance calls

New Normal Demands New Security Leadership Structure

The European Space Agency Launches Hackable Satellite

PwnedPiper vulns have potential to turn Swisslog's PTS hospital products into Swiss cheese, says Armis

Hospitals Still Use Pneumatic Tubesand They Can Be Hacked

On course for a good hacking

Huawei to America: You're not taking cyber-security seriously until you let China vouch for us

Zoom agrees to pay subscribers $25 to put its security SNAFUs behind it

PwnedPiper PTS Security Flaws Threaten 80% of Hospitals in the U.S.

New APT Hacking Group Targets Microsoft IIS Servers with ASP.NET Exploits

PyPI Python Package Repository Patches Critical Supply Chain Flaw

Solarmarker InfoStealer Malware Once Again Making its Way Into the Wild

~ 1 Aug 2021 ~

A Guide to RCS, and Why It Makes Texting So Much Better

~ 31 Jul 2021 ~

The Top 30 Cybersecurity Bugs Include Plenty of Usual Suspects

Sysadmins: Why not simply verify there's no backdoor in every program you install, and thus avoid any cyber-drama?

~ 30 Jul 2021 ~

Friday Squid Blogging: Squid Skin Is Naturally Anti-microbial

I Am Parting With My Crypto Library

Here's 30 servers Russian intelligence uses to fling malware at the West, beams RiskIQ

Week in security with Tony Anscombe

The Privacy Battle That Apple Isnt Fighting

Storing Encrypted Photos in Googles Cloud

Watch out for these scams, targeting Amazons customers

Malware and Trojans, but there's only one horse the boss man wants to hear about

We can't believe people use browsers to manage their passwords, says maker of password management tools

Experts Uncover Several C&C Servers Linked to WellMess Malware

Several Malicious Typosquatted Python Libraries Found On PyPI Repository