Port 22

~ 26 Nov 2021 ~

The Privacy Sandbox saga continues: UK watchdog extracts more commitments from Google over advertising tech

Government-favoured child safety app warned it could violate the UK's Investigatory Powers Act with message-scanning tech

IT threat evolution in Q3 2021. Mobile statistics

IT threat evolution Q3 2021

IT threat evolution in Q3 2021. PC statistics

If you want to see off next years cyber-threats, the time to prepare is now

Hackers Targeting Biomanufacturing Facilities With Tardigrade Malware

Crypto Hackers Using Babadeda Crypter to Make Their Malware Undetectable

CronRAT: A New Linux Malware Thats Scheduled to Run on February 31st

~ 25 Nov 2021 ~

Israel Bans Sales of Hacking and Surveillance Tools to 65 Countries

Microsoft Defender for Endpoint laid low. Not by malware, but by another buggy Windows patch

Its about the survival of the fittest CISOs must be brave enough to throw away their security playbook, or suffer the consequences

The triangle of holiday shopping: Scams, social media and supply chain woes

Product Releases Should Not Be Scary

UK.gov emits draft IoT and smartphone security law for Parliamentary scrutiny

Google advises passwords are good, spear phishing is bad, and free clouds get attacked

Huawei's AppGallery riddled with malware-infected games

This New Stealthy JavaScript Loader Infecting Computers with Malware

Hackers Using Microsoft MSHTML Flaw to Spy on Targeted PCs with Malware

If You're Not Using Antivirus Software, You're Not Paying Attention

US bans Chinese firms including one linked to HPEs China JV for feeding tech to Beijing's military

Warning Hackers Exploiting New Windows Installer Zero-Day Exploit in the Wild

~ 24 Nov 2021 ~

VMware Warns of Newly Discovered Vulnerabilities in vSphere Web Client

How Threat Actors Get into OT Systems

In Appreciation: Dark Reading's Tim Wilson

MediaTek Chip Flaw Could Have Let Attackers Spy on Android Phones

OpenText Acquires Bricata

Apple Sues NSO Group

Max Schrems hits Irish Data Protection Commissioner with corruption complaint

When Will Security Frameworks Catch Up With the New Cybersecurity Normal?

Apple's Pegasus lawsuit a 'declaration of war' against offensive software developers, says Kaspersky director

How a malicious Android app could covertly turn the DSP in your MediaTek-powered phone into an eavesdropping bug

Avoiding the shopping blues: How to shop online safely this holiday season

Yes, ransomware is your number one security nightmare. But heres how to sleep easy

Eavesdropping Bugs in MediaTek Chips Affect 37% of All Smartphones and IoT Globally

China trying to export its Great Firewall and governance model

APT C-23 Hackers Using New Android Spyware Variant to Target Middle East Users

~ 23 Nov 2021 ~

Webinar and eBook: The Dark Side of EDR. Are You Prepared?

Over 9 Million Android Phones Running Malware Apps from Huawei's AppGallery

Baffle's Data Privacy Cloud Protects Data for Amazon Redshift Customers

New Android Spyware Variants Linked to Middle Eastern APT

Why Should I Adopt a Zero Trust Security Strategy?

Apple Sues Israel's NSO Group for Spying on iPhone Users With Pegasus Spyware

Apple Sues NSO Group for Spyware Use

Apple sues 'amoral 21st century mercenaries' NSO for infecting iPhones with Pegasus spyware

Zero-day proof-of-concept exploit lands for Windows make-me-admin vulnerability

The McDonald's Ice Cream Machine Hacking Saga Has a New Twist

FBI, CISA urge organizations to be on guard for attacks during holidays

Stay safe online this holiday shopping season with tips from Microsoft

Crypto for cryptographers! Infosec types revolt against use of ancient abbreviation by Bitcoin and NFT devotees

Holiday Scams Drive SMS Phishing Attacks

MVP Health Care secures member portal access with Microsoft Azure Active Directory B2C

Alleged Brit SIM-swapper will kill himself if extradited to US for trial, London court told

How Sun Tzu's Wisdom Can Rewrite the Rules of Cybersecurity

UK Ministry of Justice secures HVAC systems 'protected' by passwordless Wi-Fi after Register tipoff

Threats to ICS and industrial enterprises in 2022

The dangers of connected healthcare: predictions for 2022

Privacy predictions 2022

Cyberthreats to financial organizations in 2022

Infosec bods: After more than a year, Sky gets round to squashing hijacking bug in 6m home broadband routers

Don't Help Cybercriminals Dash With Your Customers' Cash This Black Friday

What Avengers Movies Can Teach Us About Cybersecurity

Researchers Detail Privilege Escalation Bugs Reported in Oracle VirtualBox

More Stealthier Version of BrazKing Android Malware Spotted in the Wild

The Importance of IT Security in Your Merger Acquisition

Indian bank smacks down allegation it exposed 180 million customers' accounts

Pentagon Partners With GreyNoise to Investigate Internet Scans

Security Awareness Metrics What to Measure and How

SANS Addresses ICS/OT Cyber Defence

~ 22 Nov 2021 ~

GoDaddy Breach Exposes SSL Keys of Managed WordPress Hosting Customers

GoDaddy Data Breach Exposes Over 1 Million WordPress Customers' Data

CISA Urges Critical Infrastructure to Be Alert for Holiday Threats

Arrest in Ransom Your Employer Email Scheme

Bug Bounties Surge as Firms Compete for Talent

SSL keys, sFTP passwords and more exposed after someone broke into GoDaddy Managed WordPress using 'compromised password'

10 Stocking Stuffers for Security Geeks

Is it OK to Take Your CEO Offline to Protect the Network?

How to investigate service provider trust chains in the cloud

Ecommerce platforms (cough, Magento) need patching before Black Friday, warns UK's National Cyber Security Centre

Devious Tardigrade Malware Hits Biomanufacturing Facilities

Why the 'Basement Hacker' Stereotype Is Wrong and Dangerous

Crypto Means Cryptography, not Cryptocurrency

Turbine maker Vestas Wind Systems admits to cyber incident, refuses to confirm if ransomware is at play

Nigeria's central bank digital currency is 'same Naira, more possibilities' if you count government snooping

What to do if you receive a data breach notice

Black Friday 2021: How to Have a Scam-Free Shopping Day

A tiny typo in an automated email to thousands of customers turns out to be a big problem for legal

After four bans, TikTok finally passes the Pakistan challenge

New Golang-based Linux Malware Targeting eCommerce Websites

Amazon India execs charged after sellers allegedly use site to smuggle marijuana

Hackers Exploiting ProxyLogon and ProxyShell Flaws in Spam Campaigns

Shopping Safely Online over the Holidays

~ 21 Nov 2021 ~

Facebook Postpones Plans for E2E Encryption in Messenger, Instagram Until 2023

~ 20 Nov 2021 ~

A Canadian Teen Was Arrested in a $36.5M SIM-Swap Heist

RedCurl Corporate Espionage Hackers Return With Updated Hacking Tools

North Korean Hackers Found Behind a Range of Credential Theft Campaigns

~ 19 Nov 2021 ~

US Banks Will Be Required to Report Cyberattacks Within 36 Hours

Friday Squid Blogging: Bigfin Squid Captured on Video

The Zelle Fraud Scam: How it Works, How to Fight Back

3 Takeaways from the Gartner Risk Management Summit