Port 22

~ 4 May 2022 ~

China-Backed Winnti APT Siphons Reams of US Trade Secrets in Sprawling Cyber-Espionage Attack

Microsoft Releases Defender for SMBs

F5 Warns of a New Critical BIG-IP Remote Code Execution Vulnerability

Q&A: How China Is Exporting Tech-Based Authoritarianism Across the World

New Ransomware Variant Linked to North Korean Cyber Army

Security Stuff Happens: What Will the Public Hear When You Say You've Been Breached?

How a senior product manager is leading the passwordless movement at Microsoft

Communication around Heroku security incident dubbed 'train wreck'

AI for Cybersecurity Shimmers With Promise, But Challenges Abound

What Stars Wars Teaches Us About Threats

AutoRABIT Secures $26M in Series B Investment from Full In Partners to Expand DevSecOps Platform

Uptycs Announces New Cloud Identity and Entitlement Management (CIEM) Capabilities

SAC Health System Impacted By Security Incident

3 most dangerous types of Android malware

New Sophisticated Malware

Indias New Super App Has a Privacy Problem

A new secret stash for fileless malware

SEC Plans to Hire More Staff in Crypto Enforcement Unit to Fight Frauds

Chinese Hackers Caught Stealing Intellectual Property from Multinational Companies

Putin threatens supply chains with counter-sanction order

Critical RCE Bug Reported in dotCMS Content Management Software

Ukraine War Themed Files Become the Lure of Choice for a Wide Range of Hackers

Cyber-spies target Microsoft Exchange to steal M&A info

~ 3 May 2022 ~

Aryaka, Carnegie Mellons CyLab to Research New Threat Mitigation Techniques

What Should I Know About Defending IoT Attack Surfaces?

Syxsense Enterprise Unifies Endpoint Security and IT Management for Real-Time Vulnerability Monitoring and Remediation

API Security Company Traceable AI Lands $60 Million Series B

SolarWinds Attackers Gear Up for Typosquatting Attacks

Unpatched DNS-Poisoning Bug Affects Millions of Devices, Stumps Researchers

REvil Revival: Are Ransomware Gangs Ever Really Gone?

Syxsense Launches Unified Endpoint Security and Management Platform

SEC nearly doubles cryptocurrency cop roles in special cyber unit

Is Leaking a SCOTUS Opinion a Crime? The Law Is Far From Clear

Third-Party App Access Is the New Executable File

Using Pupil Reflection in Smartphone Camera Selfies

How to Create a Cybersecurity Mentorship Program

Zero trust is more than just vendors and products it requires process

Automating your Microsoft security suite with D3 XGEN SOAR

Radware Launches SkyHawk Security, a Spinoff of Its Cloud Native Protector Business

Teleport Raises $110 Million Series C at $1.1 Billion Valuation Led by Bessemer Venture Partners

OccamSec Unveils New Cybersecurity Platform

Microsoft's standalone Defender for Business hits GA

Developing Software? Get Accountability Right First

Yokogawa CENTUM and ProSafe-RS

Critical vulnerabilities found in 'millions of Aruba and Avaya switches'

TLS Flaws Leave Avaya, Aruba Switches Open to Complete Takeover

Whats behind the recordhigh number of zero days?

Privacy pathology: It's time for the users to gather a little data. Evidence

Google starts testing fenced frames to guard its Privacy Sandbox

Critical TLStorm 2.0 Bugs Affect Widely-Used Aruba and Avaya Network Switches

Experts Analyze Conti and Hive Ransomware Gangs Chats With Their Victims

A Visual Summary of SANS CloudSecNext Summit 2022

6 Reasons SANS 2022 Security Awareness Summit is a Must-Attend

~ 2 May 2022 ~

AvosLocker Ransomware Variant Using New Trick to Disable Antivirus Protection

Chinese Hackers Caught Exploiting Popular Antivirus Products to Target Telecom Sector

Unpatched DNS Related Vulnerability Affects a Wide Range of IoT Devices

Russia to Rent Tech-Savvy Prisoners to Corporate IT?

New Hacker Group Pursuing Corporate Employees Focused on Mergers and Acquisitions

Google Offers $1.5M Bug Bounty for Android 13 Beta

Security is a pain for American Dental Association: Ransomware infection feared

SSE kicks the A out of SASE

Microsoft launches Defender for Business to help protect small and medium businesses

New Regulations in India Require Orgs to Report Cyber Incidents Within 6 Hours

DoD Scammed Out of $23M in Phishing Attack on Jet-Fuel Vendors

Dell brings data recovery tools to Apex and the cloud