Port 22

~ 15 Nov 2021 ~

Researchers Demonstrate New Fingerprinting Attack on Tor Encrypted Traffic

FBI spams thousands after 'software misconfiguration'

North Korean Hackers Target Cybersecurity Researchers with Trojanized IDA Pro

How to Tackle SaaS Security Misconfigurations

SANS and TechVets partner to help veterans find their path in cybersecurity

A Visual Summary of SANS Pen Test HackFest Summit 2021

~ 14 Nov 2021 ~

FBI's Email System Hacked to Send Out Fake Cyber Security Alert to Thousands

Upcoming Speaking Engagements

~ 13 Nov 2021 ~

Hoax Email Blast Abused Poor Coding in FBI Website

Someone Snuck a Card Skimmer Into Costco to Nab Shopper Data

~ 12 Nov 2021 ~

MSPAlliance Leadership Council Forms Vendor Council to Address Managed Services Supply Chain Risk

BT to Deploy 'Epidemiological AI' Based on the Spread of Viruses in Humans to Combat Cyberattacks

Ankura Launches Brooklyn Cyber Center

Emerging Security Tools Tackle GraphQL Security

Friday Squid Blogging: Giant Squid Art

Open Source Project Aims to Detect Living-Off-the-Land Attacks

ChaosDB: Infosec bods could pull anyone's plaintext Azure Cosmos DB keys at will from Microsoft admin tools

Follow the Leaders: A Blueprint for Software Security Success

MacOS Zero-Day Used against Hong-Kong Activists

Week in security with Tony Anscombe

How to Hire and Retain Effective Threat Hunters

The Sneaky Way TikTok Is Connecting You to Real-Life Friends

In Appreciation: Alan Paller

Hackers Increasingly Using HTML Smuggling in Malware and Phishing Attacks

AMD reveals an EPYC 50 flaws 23 of them rated High severity. Intel has 25 problems, too

There's no Huawei back now - Biden signs Act that forbids US buyers acquiring kit on naughty list

~ 11 Nov 2021 ~

Philippines gov takes down passport application website amid privacy leak fears

'Lyceum' Threat Group Broadens Focus to ISPs

Abcbot A New Evolving Wormable Botnet Malware Targeting Linux

Google Open Sources ClusterFuzzLite

Hackers Exploit macOS Zero-Day to Hack Hong Kong Users with new Implant

How Do I Know It's Time to Consider a SASE Migration?

Dutch newspaper accuses US spy agencies of orchestrating 2016 Booking.com breach

What Happens If Time Gets Hacked

Hackers Targeted Hong Kong Apple Devices in Widespread Attack

Cloud Attack Analysis Unearths Lessons for Security Pros

How to assess and improve the security culture of your business

If even tech leaders struggle with email encryption, are we all doomed?

Third-Party Software Risks Grow, but So Do Solutions

HTML smuggling surges: Highly evasive loader technique increasingly used in banking malware, targeted attacks

Palo Alto Networks patches 9.8 severity CVE in popular GlobalProtect product

Insider IP Theft Is Surging and Most Can't Stop It

Advice for Personal Digital Security

WECON PLC Editor

Multiple Data Distribution Service (DDS) Implementations

Siemens SIMATIC WinCC

Siemens Mendix

Siemens Mendix Studio Pro

Siemens SCALANCE W1750D

Siemens Nucleus RTOS-based APOGEE and TALON Products

Siemens NX OBJ Translator

When the alarms go off: 10key steps to take after adata breach

Siemens Climatix POL909

Siemens SENTRON powermanager

Researchers Uncover Hacker-for-Hire Group That's Active Since 2015

Malicious Chrome extensions are bad. But what about nice ones that can be hijacked? This new tool spots them

Ransomware: The ones that got away (with it)

USA signs internet freedom and no-hack pact it's ignored since 2018

TrickBot Operators Partner with Shathak Attackers for Conti Ransomware

New Zealand spooks say satellite snooping is obsolete better intel is found elsewhere

Navigating The Threat Landscape 2021 From Ransomware to Botnets

New Application Security Toolkit Uncovers Dependency Confusion Attacks

Iran's Lyceum Hackers Target Telecoms, ISPs in Israel, Saudi Arabia, and Africa

~ 10 Nov 2021 ~

Hacker-for-Hire Group Spied on More Than 3,500 Targets in 18 Months

Palo Alto Warns of Zero-Day Bug in Firewalls Using GlobalProtect Portal VPN

ChaosDB: Researchers Share Technical Details of Azure Flaw

SMS About Bank Fraud as a Pretext for Voice Phishing

Firms Will Struggle to Secure Extended Attack Surface in 2022

SquirrelWaffle Leverages Malspam to Deliver Qakbot, Cobalt Strike

RE:WIRED 2021: Jen Easterly Wants Hackers to Help US Cyber Defense

SolarWinds Vulnerability Exploited in First Stage of Clop Ransomware Attacks

Google scores big win as court blocks iPhone tracking lawsuit

The hunt for NOBELIUM, the most sophisticated nation-state attack in history

Defining the Hierarchy of Value in Cyber Intelligence

CISA and State and Local Partners Test Emergency Response Plans at Chevron Salt Lake Refinery

Boat biz breaches itself: Brittany Ferries 'fesses up to leaks caused by routine website update

4 Tips to Secure the OT Cybersecurity Budget You Require

Securing the Public: Who Should Take Charge?

Researcher Details Vulnerabilities Found in AWS API Gateway

Stor-a-File hit by ransomware after crooks target SolarWinds Serv-U FTP software

Hacking the Sony Playstation 5

Dark Reading Video News Desk Comes to Black Hat Europe

Streaming wars continue what about cyberthreats?

Researchers Discover PhoneSpy Malware Spying on South Korean Citizens

Researchers Discover PhoneSpy Malware Spying on South Korean Citizens

Former Broadcom engineer accused of pinching chip tech to share with new Chinese employer

13 New Flaws in Siemens Nucleus TCP/IP Stack Impact Safety-Critical Equipment

13 New Flaws in Siemens Nucleus TCP/IP Stack Impact Safety-Critical Equipment

14 New Security Flaws Found in BusyBox Linux Utility for Embedded Devices

14 New Security Flaws Found in BusyBox Linux Utility for Embedded Devices

SANS Experts Offer Advice: How to Make the Most of a Free Device with Your Training

~ 9 Nov 2021 ~

Microsoft Fixes Exchange Server Zero-Day

Microsoft Issues Patches for Actively Exploited Excel, Exchange Server 0-Day Bugs

Microsoft Issues Patches for Actively Exploited Excel, Exchange Server 0-Day Bugs

Are You Planning for the Quantum, Transhumanist Threat?

Let us give thanks that this November, Microsoft has given us just 55 security fixes, two of which are for actively exploited flaws

Microsoft Patch Tuesday, November 2021 Edition

Microsoft is a 5-time Leader in the Gartner Magic Quadrant for Access Management

Why Self-Learning AI Is Changing the Paradigm of ICS Security

Shotgun targeting of malware attacks will be the defining infosec theme of 2022, reckons Sophos