Port 22

~ 12 Apr 2022 ~

Industrial cybersecurity group gathers lobbying force

Tarrask malware uses scheduled tasks for defense evasion

Russia's Sandworm Hackers Attempted a Third Blackout in Ukraine

John Oliver on Data Brokers

OpenSSH takes aim at 'capture now, decrypt later' quantum attacks

Building a Cybersecurity Mesh Architecture in the Real World

DuckDuckGos Privacy Browser Finally Lands on Desktop

Critical bug allows attacker to remotely control medical robot

Valmet DNA

Mitsubishi Electric MELSEC-Q Series C Controller Module

Inductive Automation Ignition

Mitsubishi Electric GT25-WLAN

Aethon TUG Home Base Server

Industroyer2: Industroyer reloaded

The State of Stalkerware in 2021

Singapore to license pentesters and managed infosec operators

Using AI to automate the Red Team

Defending the Endpoint with AI

HCL and HP named in unflattering audit of Indias biometric ID system

Critical LFI Vulnerability Reported in Hashnode Blogging Platform

Finding Attack Paths in Cloud Environments

EU Officials Reportedly Targeted with Israeli Pegasus Spyware

NGINX Shares Mitigations for Zero-Day Bug Affecting LDAP Implementation

Google Sues Scammer for Running 'Puppy Fraud Scheme' Website

~ 11 Apr 2022 ~

Google, GitHub Collaboration Focuses on Securing Code Build Processes

European officials reportedly targeted by NSO spyware

Former DHS Acting IT Chief Convicted in Software, Database Theft Scheme

In Appreciation: Mike Murray

Over 16,500 Sites Hacked to Distribute Malware via Web Redirect Service

Imprivata Acquires SecureLink to Deliver a Single-Vendor Platform to Manage and Secure All Enterprise and Third-Party Digital Identities

SafeGuard Cyber Provides Security Advice for Defending Against Browser-in-the-Browser (BitB) Attacks

Attackers exploit Spring4Shell flaw to let loose the Mirai botnet

10 Signs of a Good Security Leader

There are few guarantees when it comes to ransomware, except that youre a target

Learn the latest cybersecurity techniques at the Microsoft Security Summit

Identity access management has a new price: $6.9 billion

Double-Your-Crypto Scams Share Crypto Scam Host

Creating a Security Culture Where People Can Admit Mistakes

Going Passwordless? Here Are 6 Steps to Get Started

De-anonymizing Bitcoin

Google Play pulls sneaky data-harvesting apps with 46m+ downloads

The Tricky Aftermath of Source Code Leaks

Researchers warn of FFDroider and Lightning info-stealers targeting users in the wild

Building an Internal Red Team? Go Purple First

~ 10 Apr 2022 ~

Microsoft's New Autopatch Feature to Help Businesses Keep Their Systems Up-to-Date

~ 9 Apr 2022 ~

TSAs Terrorist Watch List Comes for Amtrak Passengers

Finnish govt websites knocked down as Ukraine President addresses MPs

~ 8 Apr 2022 ~

Hackers Exploiting Spring4Shell Vulnerability to Deploy Mirai Botnet Malware

Friday Squid Blogging: Do Squid Have Emotions?

Google Removes Dangerous Banking Malware From Play Store

Microsoft Sinkholes Russian Hacking Group's Domains Targeting Ukraine

Microsoft dogs Strontium domains to stop attacks on Ukraine

BakerHostetler Launches 2022 Data Security Incident Response Report Resilience And Perseverance

Software-as-a-Service Rules the Cloud

How Russia's Invasion Triggered a US Crackdown on Its Hackers

Zero days are for life, not just for Christmas. Heres how to deal with them

ByteChek Founder AJ Yawn Brings Discipline to Everything He Does

Security Nihilism Is Putting Your Company and Its Employees at Risk

Week in security with Tony Anscombe

WatchGuard Didn't Explicitly Disclose a Flaw Exploited by Hackers

AirTags Are Used for Stalking Far More than Previously Reported

Chinese Hacker Groups Continue to Target Indian Power Grid Assets

Researchers Connect BlackCat Ransomware with Past BlackMatter Malware Activity

China accused of cyberattacks on Indian power grid

Ukrainian FIN7 Hacker Gets 5-Year Sentence in the United States