Port 22

~ 15 Jun 2021 ~

Deloitte Buys Terbium Labs to Expand Threat Intel Capabilities

TimeCache aims to block side-channel cache attacks without hurting performance

Andariel evolves to target South Korea with ransomware

Brit IT firms wound up by court order after fooling folk into paying for 'support' over fake computer errors

The latest REvil ransomware victim? Sol Oriens. Oh, a US nuclear weapons contractor

ThroughTek P2P SDK

Automation Direct CLICK PLC CPU Modules

When security gets physical: Mossad boss hints at less-than-subtle Stuxnet followup

Experts Shed Light On Distinctive Tactics Used by Hades Ransomware

NATO summit communiqu compares repeat cyberattacks to armed attacks and stops short of saying 'one-in, all-in' rule will always apply

Instagram Bug Allowed Anyone to View Private Accounts Without Following Them

Protecting Against Ransomware From the Human Perspective

~ 14 Jun 2021 ~

G7 nations call out Russia for harbouring ransomware crims ahead of Biden-Putin powwow

Ex-NSA leaker Reality Winner released from prison early for 'exemplary' behavior

Apple Issues Urgent Patches for 2 Zero-Day Flaws Exploited in the Wild

Upcoming Speaking Engagements

Behind the scenes of business email compromise: Using cross-domain threat data to disrupt a large BEC campaign

TikTok Can Now Collect Biometric Data

Norton dodges UK courts after telling Brit watchdog it will be nicer to consumers

Vishing: What is it and how do I avoid getting scammed?

We've been shown time and again that strong encryption puts crims behind bars, so why do politicos hate it?

Name That Toon: Sight Unseen

Google Workspace Now Offers Client-side Encryption For Drive and Docs

NoxPlayer Supply-Chain Attack is Likely the Work of Gelsemium Hackers

Cybersecurity Executive Order 2021: What It Means for Cloud and SaaS Security

The AN0M fake secure chat app may have been too clever for its own good

~ 13 Jun 2021 ~

Chinese Hackers Believed to be Behind SITA, Air India Data Breach

All the New Privacy Features Coming to iOS and macOS

~ 12 Jun 2021 ~

Google Won't Kill the URL After All

What You Should Know About Voil, the Latest Viral Selfie App

As Ransomware Demands Boom, Insurance Keeps Paying Out

~ 11 Jun 2021 ~

Friday Squid Blogging: Fossil of Squid Eating and Being Eaten

The FBI's Anom Stunt Rattles the Encryption Debate

UK tells UN that nation-states should retaliate against cyber badness with no warning

Trickbot Investigation Shows Details of Massive Cybercrime Effort

McDonald's Data Breach Exposed Business & Customer Data

Week in security with Tony Anscombe

A Mystery Malware Stole 26 Million Passwords From Windows PCs

EA Games looted by intruders: Publisher says 'no player data accessed' after reported theft of FIFA 21, Frostbite source

FBI/AFP-Run Encrypted Phone

Many Mobile Apps Intentionally Using Insecure Connections for Sending Data

Tracking ransomware cryptocurrency payments: What now for Bitcoin?

Seven-year-old make-me-root bug in Linux service polkit patched

Seven-year-old make-me-root bug in Linux kernel patched

Mozilla Says Google's New Ad TechFLoCDoesn't Protect User Privacy

China arrests over 1000 for using cryptocurrency to help launder proceeds of phone scams

Hackers Can Exploit Samsung Pre-Installed Apps to Spy On Users

Live Cybersecurity Webinar Deconstructing Cobalt Strike

7-Year-Old Polkit Flaw Lets Unprivileged Linux Users Gain Root Access

New Cyber Espionage Group Targeting Ministries of Foreign Affairs

Announcing Wildland Client v0.1

~ 10 Jun 2021 ~

Hackers Stole a Ton of EA DataIncluding Valuable Source Code

U.S. Authorities Shut Down SlilppLargest Marketplace for Stolen Logins

'Fancy Lazarus' Criminal Group Launches DDoS Extortion Campaign

How purple teams can embrace hacker culture to improve security

Google fixes actively exploited Chrome zeroday

Intl. Law Enforcement Operation Disrupts Slilpp Marketplace

Deepfakes Are on the Rise, but Don't Panic Just Yet

BackdoorDiplomacy: Upgrading from Quarian to Turian

Detecting Deepfake Picture Editing

Student Loans Company splashes out on 20,000 cybersecurity training courses for just 3,300 employees

ZOLL Defibrillator Dashboard

Rockwell Automation FactoryTalk Services Platform

AGG Software Web Server Plugin

Cyber Is the New Cold War & AI Is the Arms Race

South Koreas data watchdog barks warnings at Microsoft and five local firms

Ransomware-skewered meat producer JBS confesses to paying $11m for its freedom

Emerging Ransomware Targets Dozens of Businesses Worldwide

Using Breached Password Detection Services to Prevent Cyberattack

WannaCry / WannaCrypt Ransomware Resources

The Five Most Dangerous New Attack Techniques

BloodHound Sniffing Out the Path Through Windows Domains

ALPACA gnaws through TLS protection to snarf cookies and steal data

~ 9 Jun 2021 ~

Huawei flings open the doors of its third privacy and security transparency centre

Beef Supplier JBS Paid Hackers $11 Million Ransom After Cyberattack

New Chrome 0-Day Bug Under Active Attacks Update Your Browser ASAP!

Risk and reward: Nefilim ransomware gang mainly targets fewer, richer companies and that strategy is paying off, warns Trend Micro

Required MFA Is Not Sufficient for Strong Security: Report

PrivacyMic looks to keep your home smart without Google, Alexa, Siri and pals listening in

2021 Information Controls Fellowship Program

CISA Addresses Rise in Ransomware Threatening OT Assets

'I put the interests of the country first': Colonial Pipeline CEO on why oil biz paid off ransomware crooks

CRSP: The emergency team fighting cyber attacks beside customers

Mysterious Gelsemium APT was behind February compromise of NoxPlayer, says ESET

Intel's latest patch set plugs some serious holes in CPU, Bluetooth, server, and ironically security lines

Gelsemium: When threat actors go gardening

Information Flows and Democracy

Ransomware Is Not the Problem

New TLS Attack Lets Attackers Launch Cross-Protocol Attacks Against Secure Sites

Security researcher says attacks on Russian government have Chinese fingerprints and typos, too

Crypto-Mining Attacks Targeting Kubernetes Clusters via Kubeflow Instances

EBook Creating a Large Company Security Stack on a Lean Company Budget

Critical Vulnerability Recaps

Extra urgency in June's Patch Tuesday: Microsoft warns six bugs are being exploited

~ 8 Jun 2021 ~

Update Your Windows Computers to Patch 6 New In-the-Wind Zero-Day Bugs

FBI paid renegade developer $180k for backdoored AN0M chat app that brought down drug underworld

Microsoft Patches Six Zero-Day Security Holes

Phished Account Credentials Mostly Verified in Hours

Microsoft Patches 6 Zero-Days Under Active Attack

PuzzleMaker attacks with Chrome zero-day exploit chain