Port 22

~ 19 May 2022 ~

DoJ Won't Charge 'Good Faith' Security Researchers

Majority of Kubernetes API Servers Exposed to the Public Internet

Dig Exits Stealth With $11M for Cloud Data Detection and Response Solution

Spyware Vendors Target Android With Zero-Day Exploits

Rise in XorDdos: A deeper look at the stealthy DDoS malware targeting Linux devices

Iran, China-linked gangs join Putin's disinformation war online

6 Scary Tactics Used in Mobile App Attacks

Phishing Attacks for Initial Access Surged 54% in Q1

Bada Bing, Bada Boom: Microsoft Bings Chinese Political Censorship of Autosuggestions in North America

Websites that Collect Your Data as You Type

Mitsubishi Electric MELSEC iQ-F Series

Hot glare of the spotlight doesnt slow BlackByte ransomware gang

The flip side of the coin: Why crypto is catnip for criminals

New Bluetooth Hack Could Let Attackers Remotely Unlock Smart Locks and Cars

The cyber threat isnt going anywhere, but the fight back starts in London

7 Key Findings from the 2022 SaaS Security Survey Report

Your snoozing iOS 15 iPhone may actually be sleeping with one antenna open

High-Severity Bug Reported in Google's OAuth Client Library for Java

Patch your VMware gear now or yank it out, Uncle Sam tells federal agencies

~ 18 May 2022 ~

Web Trackers Caught Intercepting Online Forms Even Before Users Hit Submit

VMware Releases Patches for New Vulnerabilities Affecting Multiple Products

MITRE Creates Framework for Supply Chain Security

CISA to Federal Agencies: Patch VMWare Products Now or Take Them Offline

Meet Wizard Spider, the multimillion-dollar gang behind Conti, Ryuk malware

How Pwn2Own Made Bug Hunting a Real Sport

Lacework Integrates Kubernetes Features to Enhance Security Across Multi-Cloud Environments

How these crooks backdoor online shops and siphon victims' credit card info

CISA: Unpatched F5 BIG-IP Devices Under Active Attack

The Industry Must Better Secure Open Source Code From Threat Actors

Senators Urge FTC to Probe ID.me Over Selfie Data

Microsoft Flags Attack Targeting SQL Servers With Novel Approach

2022: The Year Zero Trust Becomes Mainstream

So you want to be a CISO: What you should know about data protection

How Threat Actors Are a Click Away From Becoming Quasi-APTs

Your data's auctioned off up to 987 times a day, NGO reports

iPhone Malware that Operates Even When the Phone Is Turned Off

This Hacktivist Site Lets You Prank-Call Russian Officials

Microsoft warns partners to revoke unused authorizations that drive <em>your</em> software

Fake news why do people believe it?

State of internet crime in Q1 2022: Bot traffic on the rise, and more

Monero-mining botnet targets Windows, Linux web servers

How to Protect Your Data When Ransomware Strikes

Researchers Expose Inner Workings of Billion-Dollar Wizard Spider Cybercrime Gang

[eBook] Your 90-Day MSSP Plan: How to Improve Margins and Scale-Up Service Delivery

Hackers Gain Fileless Persistence on Targeted SQL Servers Using a Built-in Utility

U.S. Warns Against North Korean Hackers Posing as IT Freelancers

When Your Smart ID Card Reader Comes With Malware

SANS MGT521 Security Culture Course New Version Released

~ 17 May 2022 ~

Russian Conti Ransomware Gang Threatens to Overthrow New Costa Rican Government

FBI warns of North Korean cyberspies posing as foreign IT workers

TorchLight Expands Cybersecurity Services With MDR Sentinel in Partnership With Microsoft

Critical VMware Bug Exploits Continue, as Botnet Operators Jump In

FBI: E-Tailers, Beware Web Injections for Scraping Credit-Card Data, Backdoors

New Venture Capital Fund Focuses on Emerging Cybersecurity Tech

(ISC) Unveils 100K in the UK Scheme to Expand the UK Cybersecurity Workforce with 100,000 Free Entry-Level Certification Exams and Education Opportunities

Rubrik Launches Rubrik Security Cloud to Secure Data, Wherever it Lives, Across Enterprise, Cloud, and SaaS

Your iPhone Is Vulnerable to a Malware Attack Even When Its Off

Widespread Attack on WordPress Sites Targets Tatsu Builder Plug-in

Training to Beat a Bad Cybersecurity Culture

Local Government's Guide to Minimizing the Risk of a Cyberattack

Easy authentication and authorization in Azure Active Directory with No-Code Datawiza

Pentester pops open Tesla Model 3 using low-cost Bluetooth module

Google assuring open source code to secure software supply chains