Port 22

~ 26 Jan 2022 ~

Revelstoke Launches With SOAR Platform to Automate SOCs

~ 25 Jan 2022 ~

Google Drops FLoC and Introduces Topics API to Replace Tracking Cookies for Ads

Threat Actors Use Microsoft OneDrive for Command-and-Control in Attack Campaign

How Does Threat Modeling Work in Software Development?

Link11 Sets New Standards in DDoS Protection as Test Winner

GE Gas Power ToolBoxST

12-Year-Old Polkit Flaw Lets Unprivileged Linux Users Gain Root Access

Why the Belarus Railways Hack Marks a First for Ransomware

Scary Fraud Ensues When ID Theft & Usury Collide

8 Security Startups to Watch in 2022

Striking a Balance Between Cybersecurity Awareness and Anxiety

How CISOs are preparing to tackle 2022

As IoT Attacks Increase, Experts Fear More Serious Threats

The 2022 Reset Scholarship in Social Media and Democracy

Merck Wins Insurance Lawsuit re NotPetya Attack

Sophos: Log4Shell would have been a catastrophe without the Y2K-esque mobilisation of engineers

4 Steps Toward Knowing Your Exploitable Attack Surface

Cyber-Physical Security: What It Is and What You Should Do

Watering hole deploys new macOS malware, DazzleSpy, in Asia

UK government opens consultation on medic-style register for Brit infosec pros

Yes, your data is special. But do you know how special?

Hackers Exploited MSHTML Flaw to Spy on Government and Defense Targets

Hackers Infect macOS with New DazzleSpy Backdoor in Watering-Hole Attacks

TrickBot Malware Using New Techniques to Evade Web Injection Attacks

Tales from the Dark Web, Part 2: Ransomware Stacked With Distribution Services Creates the Perfect Storm

Twitter's top security staff out after incoming CEO shakes things up

Test Your Team, Not Just Your Disaster Recovery Plan

Test Your Team, Not Just Your Disaster Recovery Plan

~ 24 Jan 2022 ~

Mobile Banking Trojan BRATA Gains New, Dangerous Capabilities

Trickbot Injections Get Harder to Detect & Analyze

Hackers Using New Malware Packer DTPacker to Avoid Analysis, Detection

Registration for the (ISC) Entry-Level Cybersecurity Certification Exam Pilot Program Is Now Open

DHS Sounds Alarm on Potential for Major Russian Cyberattacks on US

The Case for Backing Up Source Code

Ransomware Operators Are Feeling the Heat

Are You Prepared to Defend Against a USB Attack?

Hive View security camera customers left in the dark as some gear goes TITSUP*

A Level-Set on Russia-Borne Cyber Threats

Linux-Targeted Malware Increased by 35%

How I hacked my friends PayPal account

Myanmar's military junta seeks ban on VPNs and digital currency

ZTNAs Address Requirements VPNs Cannot. Here's Why.

Australian Prime Minister's WeChat Shanghaied by Chinese patriots

Hackers Creating Fraudulent Crypto Tokens as Part of 'Rug Pull' Scams

SOC 2 Trust Services Categories

ICS Cyber Resilience, Active Defense & Safety Series

~ 23 Jan 2022 ~

Emotet Now Using Unconventional IP Address Formats to Evade Detection

High-Severity Rust Programming Bug Could Lead to File, Directory Deletion

CFRipper CloudFormation Security Scanning & Audit Tool

CFRipper CloudFormation Security Scanning & Audit Tool

CFRipper CloudFormation Security Scanning & Audit Tool

Now Is a Good Time to Update Your Recovery Email Addresses

~ 22 Jan 2022 ~

Crypto.com Finally Admits It Lost $30 Million in a Hack

Experts Find Strategic Similarities b/w NotPetya and WhisperGate Attacks on Ukraine

Molerats Hackers Hiding New Espionage Attacks Behind Public Cloud Infrastructure

IT Leaders Consider Security Tech a Part of Business Transformation

~ 21 Jan 2022 ~

Hackers Planted Secret Backdoor in Dozens of WordPress Plugins and Themes

Apple preps fix for Safari's web-history-leaking IndexedDB privacy bug

Friday Squid Blogging: Piglet Squid

Fraud Is On the Rise, and It's Going to Get Worse

REvil Ransomware Gang Arrests Trigger Uncertainty, Concern in Cybercrime Forums

Critical Bugs in Control Web Panel Expose Linux Servers to RCE Attacks

Arm rages against the insecure chip machine with new Morello architecture

Looking Beyond Biden's Binding Security Directive

Crime Shop Sells Hacked Logins to Other Crime Shops