Port 22

~ 18 Mar 2022 ~

This browser-in-browser attack is perfect for phishing

Code-Sabotage Incident in Protest of Ukraine War Exposed Open Source Risks

CyCognito Launches Exploit Intelligence

Cyclops Blink malware sets up shop in ASUS routers

Menlo Security: Less Than Three in 10 Organizations Are Equipped to Combat Growing Wave of Web-Based Cyber Threats

A Chance to Raise Shields Right

Security Teams Struggle to Get Started With Zero Trust

Satellite Networks Worldwide at Risk of Possible Cyberattacks, FBI & CISA Warn

Exotic Lily is a business-like access broker for ransomware gangs

Week in security with Tony Anscombe

The Road Ahead for Cyber and Infrastructure Security

CISOs face 'perfect storm' of ransomware and state-supported cybercrime

SAP community website leaks member data to savvy users

Why Vaccine Cards Are So Easily Forged

Conti Leaks Reveal the Ransomware Group's Links to Russia

Defending the data center: The time to act is now

Hackers Target Bank Networks with new Rootkit to Steal Money from ATM Machines

Experts Find Some Affiliates of BlackMatter Now Spreading BlackCat Ransomware

Google Uncovers 'Initial Access Broker' Working with Conti Ransomware Gang

~ 17 Mar 2022 ~

Pro-Ukraine Protestware Pushes Antiwar Ads, Geo-Targeted Malware

6 Reasons Not to Pay Ransomware Attackers

New Variant of Russian Cyclops Blink Botnet Targeting ASUS Routers

ThreatMapper Updated With New Scanning Tools

Firefly Announces Release of ValidIaC Open Source Solution

Nok Nok Labs Unveils S3 Authentication Suite

Multiple Automotive Manufacturers Infected With Emotet

Cloudflare Announces API Gateway

Has Trickbot gang hijacked your router? This scanner may have an answer

Titaniam Announces Completion of Product Suite

Glasswall Launches Freemium Version of its Desktop Content Disarm and Reconstruction App

Stopping Russian Cyberattacks at Their Source

A Leader in multiple Zero Trust security categories: Industry analysts weigh in

Cut Down on Alert Overload and Leverage Layered Security Measures

How CAPTCHAs can cloak phishing URLs in emails

Death of the Password? FIDO Alliance Reveals Its New Plan

Brit data regulator fines five cold-calling fiends 405k

Change Password

Conti Leak: A Ransomware Gang's Chats Expose Its Crypto Plans

Popular NPM Package Updated to Wipe Russia, Belarus Systems to Protest Ukraine Invasion

DirtyMoe Botnet Gains New Exploits in Wormable Module to Spread Rapidly

The Golden Hour of Incident Response

Devil-may-care Lapsus$ gang is not the aspirational brand infosec needs

TrickBot Malware Abusing Hacked IoT Devices as Command-and-Control Servers

Ukraine Secret Service Arrests Hacker Helping Russian Invaders

New Vulnerability in CRI-O Engine Lets Attackers Escape Kubernetes Containers

Shifting from Penetration Testing to Red Team and Purple Team

~ 16 Mar 2022 ~

Enhancing DLP With Natural Language Understanding for Better Email Security

How Pen Testing Gains Critical Security Buy-in and Defense Insight

CafePress fined for covering up 2019 customer info leak

TAC Security Survey Reveals: 88% of Businesses Rely on Manual Processes to Identify Network Vulnerabilities

CSC Unveils 3D Domain Monitoring Solution on DomainSec Platform

4 Critical Capabilities for a SaaS Security Posture Management (SSPM) Solution

Microsoft the No. 1 Most-Spoofed Brand in Phishing Attacks

New LokiLocker ransomware family includes wiper function

What the Newly Signed US Cyber-Incident Law Means for Security

VPNs Give Russians an End Run Around Censorship

Linux botnet exploits Log4j flaw to pwn Arm, x86 systems

Breaking RSA through Insufficiently Random Primes

Russia State-Sponsored Hackers Used Misconfigured MFA to Breach NGO

Manage subject rights requests at scale with Microsoft Priva

Russia-linked attackers breach NGO by exploiting MFA, PrintNightmare vuln

Uncovering Trickbots use of IoT devices in command-and-control infrastructure

Would 'Cyber Geneva Conventions' Defuse Online Aggression?

How Should My Security Analyst Use the MITRE ATT&CK Framework?

UK regulator puts NortonLifeLock merger with Avast on ice