Port 22

~ 8 Dec 2021 ~

Trickbot-Infected Machines Drop Emotet Samples

New research shows IoT and OT innovation is critical to business but comes with significant risks

Not all tech disasters are all hands events. But how do you tell which is which?

Why Cloud Service Providers Are a Single Point of Failure

How to Opt Out of Verizons Custom Experience Tracking

Improve kernel security with the new Microsoft Vulnerable and Malicious Driver Reporting Center

Virgin Media fined 50,000 after spamming 451,000 who didn't want marketing emails

5 Tips to Stay on the Offensive and Safeguard Your Attack Surface

Whats the right amount of trust to build into your network? Less than Zero

Microsoft extends Secured-core concept to servers

Google Disrupts Blockchain-based Glupteba Botnet; Sues Russian Hackers

140,000 Reasons Why Emotet is Piggybacking on TrickBot in its Return from the Dead

[eBook] Guide to Achieving 24x7 Threat Monitoring and Response for Lean IT Security Teams

Top 10 SANS Summits Talks of 2021

Finest Free Torrenting VPNs

~ 7 Dec 2021 ~

Ripple Effects Felt Across the Internet With AWS Outage

New Financial Services Industry Report Reveals Major Gaps in Storage and Backup Security

Google Disrupts Botnet Targeting Windows Machines

Warning: Yet Another Bitcoin Mining Malware Targeting QNAP NAS Devices

Rubrik's New Managed Service Protects Data from Ransomware Attacks

Virtual-Network Vulnerability Found in AWS, Other Clouds

Cerberus Sentinel Announces Acquisition of Arkavia Networks

The Dark Web Has Its Own People's Court

DigiCert Advances Passwordless Authentication with Support for Windows Hello for Business

5 Ways GRC & Security Can Partner to Reduce Insider Risk

New Secured-core servers are now available from the Microsoft ecosystem to help secure your infrastructure

Cryptominers aren't just a headache they're a big neon sign that Bad Things are on your network

Defending Against the Use of Deepfakes for Cyber Exploitation

Foreign Office IT chaos: Shocking testimony reveals poor tech support hindered Afghan evac attempts

Someone Is Running Lots of Tor Relays

5 common gift card scams and how to spot them

Hitachi Energy RTU500 OpenLDAP

Hitachi Energy XMC20 and FOX61x

FANUC Robot Controllers

The story of the year: ransomware in the headlines

Cybersecurity Takes the Wheel as Auto Industry's Top Priority

Microsoft wins court approval to take over sites run by Chinese crime gang

Eltima SDK Contain Multiple Vulnerabilities Affecting Several Cloud Service Provides

LINE Pay leaks around 133,000 users data to Github, of all places

SolarWinds Hackers Targeting Government and Business Entities Worldwide

Microsoft Seizes 42 Malicious Web Domains Used By Chinese Hackers

~ 6 Dec 2021 ~

MITRE Engenuity & Cybrary Surpass 25,000 Users in MITRE ATT&CK Defender Certification Program

Microsoft Seizes Malicious Websites Used by Prolific Chinese APT Group

Latest Firefox 95 Includes RLBox Sandboxing to Protect Browser from Malicious Code

NICKEL targeting government organizations across Latin America and Europe

US Military Has Acted Against Ransomware Groups: Report

Russian Actors Behind SolarWinds Attack Hit Global Business & Government Targets

5 Ways to Keep Fraudsters at Bay Over the Holidays

SEARCH for Hidden Cyber Threats: 6 Steps to Unleash a Hyper-effective Threat Hunting Team

Spar shops across northern UK shut after cyber attack hits payment processing abilities

Miscreants make off with $150m of digital assets in BitMart security breach

Thieves Using AirTags to Follow Cars

Why the C-Suite Doesn't Need Access to All Corporate Data

Cuba ransomware gang scores almost $44m in ransom payments across 49 orgs, say Feds

What are buffer overflow attacks and how are they thwarted?

Malicious KMSPico Windows Activator Stealing Users' Cryptocurrency Wallets

Vulnerability Scanning Frequency Best Practices

Hackers Steal $200 Million Worth of Cryptocurrency Tokens from BitMart Exchange

14 New XS-Leaks (Cross-Site Leaks) Attacks Affect All Modern Web Browsers

~ 4 Dec 2021 ~

A Planned Parenthood LA Hack Affects 400,000 Patients

American diplomats' iPhones reportedly compromised by NSO Group intrusion software

Pegasus Spyware Reportedly Hacked iPhones of U.S. State Department and Diplomats

~ 3 Dec 2021 ~

NSO Group Spyware Hits at Least 9 US State Department Phones

Utility biz Delta-Montrose Electric Association loses billing capability and two decades of records after cyber attack

Feds charge two men with claiming ownership of others' songs to steal YouTube royalty payments

Who Is the Network Access Broker Babam?

One-Third of Black Friday Shoppers Were Bots, Fake Users

Warning: Yet Another Zoho ManageEngine Product Found Under Active Attacks

NSO Group Spyware Used to Breach US State Dept. Phones

IGI Cybersecurity Introduces CISO Team-as-a-Service

Friday Squid Blogging: Squeeze the Squid

Protecting your critical infrastructure is one thingprotecting your backups is the same thing

How Criminals Are Using Synthetic Identities for Fraud

Logiq.ai Tackles Observability Problem With LogFlow

Netgear router flaws exploitable with authentication ... like the default creds on Netgear's website

Week in security with Tony Anscombe

Scammers exploit Omicron fears in new COVID19 phishing campaign

USB Devices the Common Denominator in All Attacks on Air-Gapped Systems

An Insider's Account of Disclosing Vulnerabilities

Testing Faraday Cages

Researchers Detail How Pakistani Hackers Targeting Indian and Afghan Governments

New Malvertising Campaigns Spreading Backdoors, Malicious Chrome Extensions

Why Everyone Needs to Take the Latest CISA Directive Seriously

New Payment Data Sealing Malware Hides in Nginx Process on Linux Servers

~ 2 Dec 2021 ~

A Software Bug Let Hackers Drain $31M From a Crypto Service

Ransomware, Carding, and Initial Access Brokers: Group-IB Presents Report on Trending Crimes

Darktrace Reports 30% More Ransomware Attacks Targeting Organizations During the Holiday Period

BadgerDAO DeFi defunded as hackers apparently nab millions in crypto tokens

Remote Browser Isolation Stars in Content Protection Role

CISA Warns of Actively Exploited Critical Zoho ManageEngine ServiceDesk Vulnerability

Top 5 Reasons to Get 'SASE' With Security

Planned Parenthood LA Breach Compromises 400,000 Patients' Data

Develop 'Foursight' Keep Your Post-COVID Transformation on Track

Structured threat hunting: One way Microsoft Threat Experts prioritizes customer defense

Facebook Will Force More At-Risk Accounts to Use Two-Factor

Key Characteristics of Malicious Domains: Report

Behind the unprecedented effort to protect customers against the NOBELIUM nation-state attack

When Will a Cloud Infrastructure Heavyweight Launch a SASE?

Ubiquiti Developer Charged With Extortion, Causing 2020 Breach

Breaking the Black Mirror and Other Lessons From Day of Shecurity