Port 22

~ 9 Jun 2021 ~

2021 Information Controls Fellowship Program

CISA Addresses Rise in Ransomware Threatening OT Assets

'I put the interests of the country first': Colonial Pipeline CEO on why oil biz paid off ransomware crooks

CRSP: The emergency team fighting cyber attacks beside customers

Mysterious Gelsemium APT was behind February compromise of NoxPlayer, says ESET

Intel's latest patch set plugs some serious holes in CPU, Bluetooth, server, and ironically security lines

Gelsemium: When threat actors go gardening

Information Flows and Democracy

Ransomware Is Not the Problem

New TLS Attack Lets Attackers Launch Cross-Protocol Attacks Against Secure Sites

Security researcher says attacks on Russian government have Chinese fingerprints and typos, too

Crypto-Mining Attacks Targeting Kubernetes Clusters via Kubeflow Instances

EBook Creating a Large Company Security Stack on a Lean Company Budget

Critical Vulnerability Recaps

Extra urgency in June's Patch Tuesday: Microsoft warns six bugs are being exploited

~ 8 Jun 2021 ~

Update Your Windows Computers to Patch 6 New In-the-Wind Zero-Day Bugs

FBI paid renegade developer $180k for backdoored AN0M chat app that brought down drug underworld

Microsoft Patches Six Zero-Day Security Holes

Phished Account Credentials Mostly Verified in Hours

Microsoft Patches 6 Zero-Days Under Active Attack

PuzzleMaker attacks with Chrome zero-day exploit chain

How an Obscure Company Took Down Big Chunks of the Internet

Hundreds of suspected criminals arrested after being tricked into using FBIrun chat app

Cryptography whizz Phil Zimmermann looks back at 30 years of Pretty Good Privacy

FBI Issues Encrypted Devices to Capture Criminals

FBI Issued Encrypted Devices to Capture Criminals

Optimize security with Azure Firewall solution for Azure Sentinel

Microsoft CISO Shares Remote Work Obstacles & Lessons Learned

Siloscape malware targets Windows containers, breaks through to the underlying Kubernetes cluster

How to Turn Off Amazon Sidewalk

DoS vulns in 3 open-source MQTT message brokers could leave users literally locked out of their homes or offices

Johnson Controls Metasys

Open Design Alliance Drawings SDK

AVEVA InTouch

Schneider Electric IGSS

Schneider Electric Modicon X80

Thales Sentinel LDK Run-Time Environment

Siemens Mendix SAML Module

Siemens TIM 1531 IRC

Siemens Solid Edge

Siemens SIMATIC TIM libcurl

Vulnerabilities in Weapons Systems

Feds Secretly Ran a Fake Encrypted Chat App and Busted Over 800 Criminals

I think therefore IAM: It's not cool, it's not sexy, but it's one of the most important and difficult areas in modern IT

New UAF Vulnerability Affecting Microsoft Office to be Patched Today

Uncle Sam recovers 63.7 of 75 Bitcoins Colonial Pipeline paid to ransomware crew

Top 10 Privacy and Security Features Apple Announced at WWDC 2021

Australian cops, FBI created backdoored chat app, told crims it was secure then listened to 9,000 users' plots

U.S. Recovers $2.3 Million Ransom Paid to Colonial Pipeline Hackers

FBI drops subpoena to identify readers of USA Today article about shootout with agents

Everything Apple announced: Tor-like Safari anonymization. Cloaked iCloud addresses. Cloud CI/CD. And more

~ 7 Jun 2021 ~

Justice Dept. Claws Back $2.3M Paid by Colonial Pipeline to Ransomware Gang

Google, Facebook, Chaos Computer Club join forces to oppose German state spyware

US House Rep on cyber committees tweets Gmail password, PIN in Capitol riot lawsuit outrage

Ransomware Hit Another Pipeline Firmand 70GB of Data Leaked

First Known Malware Surfaces Targeting Windows Containers

DoJ Seizes $2.3M in Bitcoin Paid to Colonial Pipeline Attackers

Latvian Woman Charged for Role In Crafting Trickbot Malware

CISA Warns Criminals Seek to Exploit Critical VMware Bug

Cartoon Caption Winner: Road Trip

Remember Anonymous? It/they might be back, and it/they are angry with Elon Musk

Adventures in Contacting the Russian FSB

Cyber Athletes Compete to Form US Cyber Team

Gootkit: the cautious Trojan

We're right behind Computer Misuse Act reforms for busting ransomware gangs, says UK infosec industry

The Supreme Court Narrowed the CFAA

NortonLifeLock Criticized for New Cryptomining Feature

Hacking space: How to pwn a satellite

Shifting the focus from reactive to proactive, with human-led secure coding

Military infosec SNAFUs: What WhatsApp and bears in the woods can teach us

Researchers Discover First Known Malware Targeting Windows Containers

Hackers Breached Colonial Pipeline Using Compromised VPN Password

SANS 2021 Visibility Report

Latvian Woman Charged for Her Role in Creating Trickbot Banking Malware

~ 6 Jun 2021 ~

How to Protect Your Files From Ransomware

~ 5 Jun 2021 ~

The Safest Way to Store and Share Your Nudes

The FBIs Director Compares Ransomware Threat to 9/11

GitHub Updates Policy to Remove Exploit Code When Used in Active Attacks

Break Into Ethical Hacking With 18 Training Courses For Just $42.99

TikTok Quietly Updated Its Privacy Policy to Collect Users' Biometric Data

ALERT: Critical RCE Bug in VMware vCenter Server Under Active Attack

~ 4 Jun 2021 ~

Friday Squid Blogging: Squids in Space

Biden expands Chinese tech and military blocklist to 59 companies

Good news for pentesters and network admins: US issues ransomware guidance asking biz to skill up security teams

Week in security with Tony Anscombe

Android banking malware sharply increased in the first chunk of 2021, reckons ESET

Security and Human Behavior (SHB) 2021

The policy of truth: As ransomware claims rise, what's a cyber insurer to do?

Google to Let Android Users Opt-Out to Stop Ads From Tracking Them

Brit retailer Furniture Village confirms 'cyber-attack' as systems outage rolls into Day 7

10 Critical Flaws Found in CODESYS Industrial Automation Software

How to use Google's new dependency mapping tool to find security flaws buried in your projects

A Visual Summary of SANS CloudSecNext Summit

~ 3 Jun 2021 ~

Google Chrome to Help Users Identify Untrusted Extensions Before Installation

Supreme Court narrows Computer Fraud and Abuse Act: Misusing access not quite the same as breaking in

Hart and Microsoft announce partnership to incorporate ElectionGuard

Proposed Sale Casts Cloud Over Future of FireEye's Products

Google Experts Explore Open Source Security Challenges & Fixes

Microsofts Vote Tracking Software Clears a Major Hurdle

Afternoon Cyber Tea: Cybersecurity challenged to meet diversity goals