Port 22

~ 9 Jul 2021 ~

How Dangerous is Malware? New Report Finds It's Tough to Tell

CISA Analysis Reveals Successful Attack Techniques of FY 2020

New Framework Aims to Describe & Address Complex Social Engineering Attacks

Week in security with Tony Anscombe

Europe Makes the Case to Ban Biometric Surveillance

Cartoon Caption Winner: Sight Unseen

Magecart Hackers Hide Stolen Credit Card Data Into Images for Evasive Exfiltration

New SaaS Security Report Dives into the Concerns and Plans of CISOs in 2021

Kaseya delays SaaS restore to Sunday, CEO says this sucks but decision was his alone

Enterprise Security Tech Q&A

Critical Flaws Reported in Philips Vue PACS Medical Imaging Systems

~ 8 Jul 2021 ~

Hackers Use New Trick to Disable Macro Security Warnings in Malicious Office Files

Microsoft Keeps Failing to Patch a Critical Windows Bug

The Unfixed Flaw at the Heart of REvils Ransomware Spree

US offers Julian Assange time in Australian prison instead of American supermax if he loses London extradition fight

Microsoft named a Visionary in the 2021 Gartner Magic Quadrant for SIEM for Azure Sentinel

Morgan Stanley Discloses Data Breach

New WildPressure Malware Capable of Targeting Windows and MacOS

Microsoft issues patch to fix PrintNightmare zeroday bug

Kaseya Left Customer Portal Vulnerable to 2015 Flaw in its Own Software

Details of the REvil Ransomware Attack

ICO survey on data flouters: 50% say they receive more unwanted calls than before pandemic

Criminals prefer to WFH too: Singapore infosec agency says 43% of all crimes in the city-state happened online in 2020

VISAM Automation Base (VBASE) (Update A)

Rockwell Automation MicroLogix 1100

MDT AutoSave

What Colonial Pipeline Means for Commercial Building Cybersecurity

Ransomware: To pay or not to pay? Legal or illegal? These are the questions

In conversation with Gene Hoffman, co-creator of the internet's first ad blocker

India under attack by rapidly-evolving advanced persistent threat actor SideCopy, says Cisco Talos

White hats reported key Kaseya VSA flaw months ago. Ransomware outran the patch

Quick look at CVE-2021-1675 & CVE-2021-34527 (aka PrintNightmare)

Critical Flaws Reported in Sage X3 Enterprise Management Software

Experts Uncover Malware Attacks Targeting Corporate Networks in Latin America

Security Awareness Training is Broken. Human Risk Management (HRM) is the Fix

How to Mitigate Microsoft Print Spooler Vulnerability PrintNightmare

SideCopy Hackers Target Indian Government Officials With New Malware

~ 7 Jul 2021 ~

You've patched that critical Sage X3 ERP security hole, yeah? Not exposing the suite to the internet, either, yeah?

Bogus Kaseya VSA patches circulate, booby-trapped with remote-access tool

Microsoft's Emergency Patch Fails to Fully Fix PrintNightmare RCE Vulnerability

Microsoft struggles to wake from its PrintNightmare: Latest print spooler patch can be bypassed, researchers say

How to build a privacy program the right way

Oi! Our British Airways data breach compo sueball is still going, shouts rival law firm

Attacks on Kaseya Servers Led to Ransomware in Less Than 2 Hours

Accessibility and usability for all in Azure Sentinel

Fake Android Apps Promise Cryptomining Services to Steal Funds

Report shines light on REvil's depressingly simple tactics: Phishing, credential-stuffing RDP servers... the usual

Sophos Acquires Capsule8 for Linux Server & Container Security

Microsoft Issues Emergency Patch for Windows Flaw

Microsoft Releases Emergency Patch for 'PrintNightmare' Vuln

UK's data watchdog probes use of private email to discuss government business at the Department of Health

Wildpressure targets the macOS platform

Bandidos at large: A spying campaign in Latin America

Citing cross-border data transfer and privacy concerns, China promises security blitz on securities

Mega-distie SYNNEX attacked and Microsoft cloud accounts it tends tampered

WildPressure APT Emerges With New Malware Targeting Windows and macOS

Dozens of Vulnerable NuGet Packages Allow Attackers to Target .NET Platform

[Whitepaper] XDR vs. NDR/NTA What do Organizations Truly Need to Stay Safe?

Microsoft patches PrintNightmare even on Windows 7 but the terror isnt over

Kaseyas VSA SaaS restart fails, service restoration delayed by at least ten hours

~ 6 Jul 2021 ~

Kaspersky Password Manager's random password generator was about as random as your wall clock

Microsoft Issues Emergency Patch for Critical Windows PrintNightmare Vulnerability

Ransomware-hit law firm gets court order asking crooks not to publish the data they stole

Researchers Learn From Nation-State Attackers' OpSec Mistakes

Aclpwn.Py Exploit ACL Based Privilege Escalation Paths in Active Directory

Aclpwn.Py Exploit ACL Based Privilege Escalation Paths in Active Directory

Aclpwn.Py Exploit ACL Based Privilege Escalation Paths in Active Directory

Preparing for your migration from on-premises SIEM to Azure Sentinel

Vulnerability in the Kaspersky Password Manager

British Airways data breach lawsuit settled: Airline coughs up potentially millions to make sueball bounce away

British Airways data breach lawsuit settled: Airline coughs up around 30m to make sueball bounce away

Alleged Cybercriminal Arrested in Morocco Following Interpol Probe

Why the Password Isn't Dead Quite Yet

Philips Vue PACS

Moxa NPort IAW5000A-I/O Series Serial Device Server

Quantum Key Distribution: Is it as secure as claimed and what can it offer the enterprise?

DARPA nails cash to project 'FENCE' a smart camera that only sends pics when pixels change

Kaseya says it's seen no sign of supply chain attack, sets SaaS restoration target of Tuesday afternoon, on-prem fix to follow

Kaseya Rules Out Supply-Chain Attack; Says VSA 0-Day Hit Its Customers Directly

Interpol Arrests Moroccan Hacker Engaged in Nefarious Cyber Activities

Q&A From the Executives and Ransomware: Stop, Collaborate, and Listen! Webcast

Home schooling for Cyber Professionals Part 2 Students and instructors share their training routines and tips.

~ 5 Jul 2021 ~

The cost of cyber insurance increased 32% last year and shows no signs of easing

The wheels come off Formula 1's notification service as fans plied with attacker's messages

What's this about a lawyer looking for an heir? City of London Police seek IT crew to help crack down on fraud

Amazon Echo Dots Store a Wealth of DataEven After a Reset

REvil ransomware attack against MSPs and its clients around the world

Stealing Xbox Codes

Getting Started with Security Testing: A Practical Guide for Startups

DiDi, Chinas Uber analog, booted from local app stores for data naughtiness

IT for service providers biz Kaseya defers decision about SaaS restoration following supply chain attack

TrickBot Botnet Found Deploying A New Ransomware Called Diavol

~ 4 Jul 2021 ~

Microsoft Urges Azure Users to Update PowerShell to Patch RCE Flaw

How REvil Ransomware Took Out Thousands of Business at Once

REvil Used 0-Day in Kaseya Ransomware Attack, Demands $70 Million Ransom

~ 3 Jul 2021 ~

Kaseya supplychain attack: What we know so far

IT management biz Kaseya pwned by miscreants to infect businesses with ransomware

Do Not Stare Into the Crypto Orb

Android Apps with 5.8 million Installs Caught Stealing Users' Facebook Passwords

Kaseya Supply-Chain Attack Hits Nearly 40 Service Providers With REvil Ransomware