Port 22

~ 22 Jul 2021 ~

NSO Group 'will no longer be responding to inquiries' about misuse of its software

APT Hackers Distributed Android Trojan via Syrian e-Government Portal

Reduce End-User Password Change Frustrations

US senators warn China's Digital Yuan could compromise Olympic athletes

Oracle Warns of Critical Remotely Exploitable Weblogic Server Flaws

Another Hacker Arrested for 2020 Twitter Hack and Massive Bitcoin Scam

ICS Threat Hunting - They're Shootin at the Lights! - PART 1

2021 SANS Security Awareness Planning Kit

~ 21 Jul 2021 ~

Spanish cops cuff Brit bloke accused of playing role in 2020 celeb Twitter hijacking

Serial Swatter Who Caused Death Gets Five Years in Prison

Cybercriminals may target 2020 Tokyo Olympics, FBI warns

Google Cloud's Intrusion Detection Service attempts to make security 'invisible' but cost will be the big giveaway

Microsoft acquires CloudKnox Security to offer unified privileged access and cloud entitlement management

The evolution of a matrix: How ATT&CK for Containers was built

Venmo Gets More Privatebut It's Still Not Fully Safe

Managed Detection and Response in Q4 2020

Malicious NPM Package Caught Stealing Users' Saved Passwords From Browsers

XLoader Windows InfoStealer Malware Now Upgraded to Attack macOS Systems

Several New Critical Flaws Affect CODESYS Industrial Automation Software

[eBook] A Guide to Stress-Free Cybersecurity for Lean IT Security Teams

Make-me-admin holes found in Windows, Linux kernel

~ 20 Jul 2021 ~

Journo who went to prison for 2 years for breaking US cyber-security law is jailed again

New Windows and Linux Flaws Give Attackers Highest System Privileges

Spam Kingpin Peter Levashov Gets Time Served

NSO Group Hacked

Fortinet's security appliances hit by remote code execution vulnerability

Northern Train's ticketing system out to lunch as ransomware attack shuts down servers

Verified: UK.gov launching plans for yet another digital identity scheme

Some URL shortener services distribute Android malware, including banking or SMS trojans

US legal eagles representing Apple, IBM, and more take 5 months to inform clients of ransomware data breach

Mitsubishi Electric MELSEC-F Series

16-Year-Old Security Bug Affects Millions of HP, Samsung, Xerox Printers

This New Malware Hides Itself Among Windows Defender Exclusions to Evade Detection

US and Global Allies Accuse China of Massive Microsoft Exchange Attack

~ 19 Jul 2021 ~

Dont Wanna Pay Ransom Gangs? Test Your Backups.

How China's Hacking Entered a Reckless New Phase

Cloudstar IT provider for real estate, finance, insurance worlds downed by ransomware

capa 2.0: Better, Faster, Stronger

capa 2.0: Better, Faster, Stronger

capa 2.0: Better, Faster, Stronger

Law Firm for Ford, Pfizer, Exxon Discloses Ransomware Attack

Candiru: Another Cyberweapons Arms Manufacturer

NSO Group Spyware Used On Journalists & Activists Worldwide

UK and chums call out Chinese Ministry of State Security for Hafnium Microsoft Exchange Server attacks

Researchers Warn of Linux Cryptojacking Attackers Operating from Romania

Turns Out That Low-Risk iOS Wi-Fi Naming Bug Can Hack iPhones Remotely

Amnesty International and French media protection org claim massive misuse of NSO spyware

Five Critical Password Security Rules Your Employees Are Ignoring

Transition to Cyber Security From a Non-Cyber Role

SANS+HBCU Live Streams

Researcher Uncover Yet Another Unpatched Windows Printer Spooler Vulnerability

~ 18 Jul 2021 ~

New Leak Reveals Abuse of Pegasus Spyware to Target Journalists Globally

Independent Peer Review of Amnesty Internationals Forensic Methods for Identifying Pegasus Spyware

~ 17 Jul 2021 ~

Biden Puts a $10M Bounty on Foreign Hackers

Bidens Cybersecurity Team Gets Crowded at the Top

China's New Law Requires Researchers to Report All Zero-Day Bugs to Government

Instagram Launches 'Security Checkup' to Help Users Recover Hacked Accounts

CloudFlare CDNJS Bug Could Have Led to Widespread Supply-Chain Attacks

~ 16 Jul 2021 ~

Hackers Got Past Windows Hello by Tricking a Webcam

Friday Squid Blogging: Giant Squid Model

REvil is Off-Line

You'll want to shut down the Windows Print Spooler service (yes, again): Another privilege escalation bug found

Wanted: State-backed bandits planning cyberattacks on US infrastructure. Reward: $10m

Researchers Create New Approach to Detect Brand Impersonation

Week in security with Tony Anscombe

Google patches Chrome zeroday vulnerability exploited in the wild

Vacationing? How to avoid the cybersecurity blues

Israeli Firm Helped Governments Target Journalists, Activists with 0-Days and Spyware

Facebook Suspends Accounts Used by Iranian Hackers to Target US Military Personnel

To the Moon! Skyrocket Your Cyber Career with Continuous Education

Introduction to ICS Security Part 2

Microsoft, Google, Citizen Lab blow lid off zero-day bug-exploiting spyware sold to governments

~ 15 Jul 2021 ~

Update Your Chrome Browser to Patch New ZeroDay Bug Exploited in the Wild

Microsoft Warns of New Unpatched Windows Print Spooler Vulnerability

The SolarWinds Hackers Used an iOS Flaw to Compromise iPhones

Attackers Exploited 4 Zero-Day Flaws in Chrome, Safari & IE

State Dept. to Pay Up to $10M for Information on Foreign Cyberattacks

Facebook Catches Iranian Spies Catfishing US Military Targets

CISA Launches New Website to Aid Ransomware Defenders

Microsoft: Israeli Firm's Tools Used to Target Activists, Dissidents

This is the data watchdog! Surrender your Matt Hancock smoochy-kiss pics right now!

Protecting customers from a private-sector offensive actor using 0-day exploits and DevilsTongue malware

Hooking Candiru: Another Mercenary Spyware Vendor Comes into Focus

Regulating facial recognition technology? It's the 'Wild West out there,' says US law boffin

Colorado Passes Consumer Privacy Law

NortonLifeLock sniffs around Avast, announces 'advanced discussions' for acquisition

Ypsomed mylife

Report sheds light on 'cocky' but 'creative' Mespinoza ransomware group

Sports events and online streaming: prepare your cybersecurity

Restoring your privacy costs money, which makes it a marker of class

China's Cyberspies Targeting Southeast Asian Government Entities

Google Details iOS, Chrome, IE Zero-Day Flaws Exploited Recently in the Wild

New Zero-Trust API Offers Mobile Carrier Authentication to Developers

Ransomware Attacks Targeting Unpatched EOL SonicWall SMA 100 VPN Appliances

So nice of China to put all of its network zero-day vulns in one giant database no one will think to break into

DFIR Live Training Special 2021 - SAVE THE DATE

~ 14 Jul 2021 ~

16 Cybercriminals Behind Mekotio and Grandoreiro Banking Trojan Arrested in Spain

Facial-recognition technology gets a smack in the chops from civil rights campaigners

WhatsApp Has a Secure Fix for One of Its Biggest Drawbacks

Arrests of members of Tetrade seed groups Grandoreiro and Melcoz