Port 22

~ 24 Nov 2021 ~

VMware Warns of Newly Discovered Vulnerabilities in vSphere Web Client

How Threat Actors Get into OT Systems

In Appreciation: Dark Reading's Tim Wilson

MediaTek Chip Flaw Could Have Let Attackers Spy on Android Phones

OpenText Acquires Bricata

Apple Sues NSO Group

Max Schrems hits Irish Data Protection Commissioner with corruption complaint

When Will Security Frameworks Catch Up With the New Cybersecurity Normal?

Apple's Pegasus lawsuit a 'declaration of war' against offensive software developers, says Kaspersky director

How a malicious Android app could covertly turn the DSP in your MediaTek-powered phone into an eavesdropping bug

Avoiding the shopping blues: How to shop online safely this holiday season

Yes, ransomware is your number one security nightmare. But heres how to sleep easy

Eavesdropping Bugs in MediaTek Chips Affect 37% of All Smartphones and IoT Globally

China trying to export its Great Firewall and governance model

APT C-23 Hackers Using New Android Spyware Variant to Target Middle East Users

~ 23 Nov 2021 ~

Webinar and eBook: The Dark Side of EDR. Are You Prepared?

Over 9 Million Android Phones Running Malware Apps from Huawei's AppGallery

Baffle's Data Privacy Cloud Protects Data for Amazon Redshift Customers

New Android Spyware Variants Linked to Middle Eastern APT

Why Should I Adopt a Zero Trust Security Strategy?

Apple Sues Israel's NSO Group for Spying on iPhone Users With Pegasus Spyware

Apple Sues NSO Group for Spyware Use

Apple sues 'amoral 21st century mercenaries' NSO for infecting iPhones with Pegasus spyware

Zero-day proof-of-concept exploit lands for Windows make-me-admin vulnerability

The McDonald's Ice Cream Machine Hacking Saga Has a New Twist

FBI, CISA urge organizations to be on guard for attacks during holidays

Stay safe online this holiday shopping season with tips from Microsoft

Crypto for cryptographers! Infosec types revolt against use of ancient abbreviation by Bitcoin and NFT devotees

Holiday Scams Drive SMS Phishing Attacks

MVP Health Care secures member portal access with Microsoft Azure Active Directory B2C

Alleged Brit SIM-swapper will kill himself if extradited to US for trial, London court told

How Sun Tzu's Wisdom Can Rewrite the Rules of Cybersecurity

UK Ministry of Justice secures HVAC systems 'protected' by passwordless Wi-Fi after Register tipoff

Threats to ICS and industrial enterprises in 2022

The dangers of connected healthcare: predictions for 2022

Privacy predictions 2022

Cyberthreats to financial organizations in 2022

Infosec bods: After more than a year, Sky gets round to squashing hijacking bug in 6m home broadband routers

Don't Help Cybercriminals Dash With Your Customers' Cash This Black Friday

What Avengers Movies Can Teach Us About Cybersecurity

Researchers Detail Privilege Escalation Bugs Reported in Oracle VirtualBox

More Stealthier Version of BrazKing Android Malware Spotted in the Wild

The Importance of IT Security in Your Merger Acquisition

Indian bank smacks down allegation it exposed 180 million customers' accounts

Pentagon Partners With GreyNoise to Investigate Internet Scans

Security Awareness Metrics What to Measure and How

SANS Addresses ICS/OT Cyber Defence

~ 22 Nov 2021 ~

GoDaddy Breach Exposes SSL Keys of Managed WordPress Hosting Customers

GoDaddy Data Breach Exposes Over 1 Million WordPress Customers' Data

CISA Urges Critical Infrastructure to Be Alert for Holiday Threats

Arrest in Ransom Your Employer Email Scheme

Bug Bounties Surge as Firms Compete for Talent

SSL keys, sFTP passwords and more exposed after someone broke into GoDaddy Managed WordPress using 'compromised password'

10 Stocking Stuffers for Security Geeks

Is it OK to Take Your CEO Offline to Protect the Network?

How to investigate service provider trust chains in the cloud

Ecommerce platforms (cough, Magento) need patching before Black Friday, warns UK's National Cyber Security Centre

Devious Tardigrade Malware Hits Biomanufacturing Facilities

Why the 'Basement Hacker' Stereotype Is Wrong and Dangerous

Crypto Means Cryptography, not Cryptocurrency

Turbine maker Vestas Wind Systems admits to cyber incident, refuses to confirm if ransomware is at play

Nigeria's central bank digital currency is 'same Naira, more possibilities' if you count government snooping

What to do if you receive a data breach notice

Black Friday 2021: How to Have a Scam-Free Shopping Day

A tiny typo in an automated email to thousands of customers turns out to be a big problem for legal

After four bans, TikTok finally passes the Pakistan challenge

New Golang-based Linux Malware Targeting eCommerce Websites

Amazon India execs charged after sellers allegedly use site to smuggle marijuana

Hackers Exploiting ProxyLogon and ProxyShell Flaws in Spam Campaigns

Shopping Safely Online over the Holidays

~ 21 Nov 2021 ~

Facebook Postpones Plans for E2E Encryption in Messenger, Instagram Until 2023

~ 20 Nov 2021 ~

A Canadian Teen Was Arrested in a $36.5M SIM-Swap Heist

RedCurl Corporate Espionage Hackers Return With Updated Hacking Tools

North Korean Hackers Found Behind a Range of Credential Theft Campaigns

~ 19 Nov 2021 ~

US Banks Will Be Required to Report Cyberattacks Within 36 Hours

Friday Squid Blogging: Bigfin Squid Captured on Video

The Zelle Fraud Scam: How it Works, How to Fight Back

3 Takeaways from the Gartner Risk Management Summit

Join us at InfoSec Jupyterthon 2021

Week in security with Tony Anscombe

To Beat Ransomware, Apply Zero Trust to Servers Too

Zero Trust: An Answer to the Ransomware Menace?

New Rowhammer Technique

Iranian Hackers Are Going After US Critical Infrastructure

CYBERWARCON Foreign influence operations grow up

Locked Out of God Mode, Runners Hack Their Treadmills

US Indicts Iranian Nationals for Cyber-Enabled Election Interference

Defending critical infrastructure: The status quo isnt working

11 Malicious PyPI Python Libraries Caught Stealing Discord Tokens and Installing Shells

U.S. Charged 2 Iranian Hackers for Threatening Voters During 2020 Presidential Election

Search CT Logs for Misconfigured SSL Certificates

Web trust dies in darkness: Hidden Certificate Authorities undermine public crypto infrastructure

FBI Issues Flash Alert on Actively Exploited FatPipe VPN Zero-Day Bug

A Simple 5-Step Framework to Minimize the Risk of a Data Breach

Consequence-Driven ICS Risk Management

~ 18 Nov 2021 ~

Cloud Security Startup Lacework Gets a Boost With New $1.3B Funding

Canadian teen nabbed in $36.5M crypto heist possibly the biggest haul yet by a single individual

Microsoft Exchange Server Flaws Now Exploited for BEC Attacks

Experts Expose Secrets of Conti Ransomware Group That Made 25 Million from Victims

Boffins find way to use a standard smartphone to find hidden spy cams