Port 22

~ 15 Jul 2021 ~

Ransomware Attacks Targeting Unpatched EOL SonicWall SMA 100 VPN Appliances

So nice of China to put all of its network zero-day vulns in one giant database no one will think to break into

DFIR Live Training Special 2021 - SAVE THE DATE

~ 14 Jul 2021 ~

16 Cybercriminals Behind Mekotio and Grandoreiro Banking Trojan Arrested in Spain

Facial-recognition technology gets a smack in the chops from civil rights campaigners

WhatsApp Has a Secure Fix for One of Its Biggest Drawbacks

Arrests of members of Tetrade seed groups Grandoreiro and Melcoz

Upcoming Speaking Engagements

Microsoft delivers comprehensive solution to battle rise in consent phishing emails

Targeted Attack Activity Heightens Need for Orgs. to Patch New SolarWinds Flaw

Microsoft Patch Tuesday fixes 13 critical flaws, including 4 under active attack

MISA expands portfolio and looks ahead during Microsoft Inspire

How Microsoft Security empowers partners to build customer trust

Germany Is About to Block One of the Biggest Porn Sites

China Taking Control of Zero-Day Exploits

Chinese Hackers Exploited Latest SolarWinds 0-Day in Targeted Attacks

LuminousMoth APT: Sweeping attacks for the chosen few

Hong Kong working to share its digital IDs with mainland China

What follows Patch Tuesday? Exploit Wednesday. Grab this bumper batch of security updates from Microsoft

REvil Ransomware Gang Mysteriously Disappears After High-Profile Attacks

Cybercriminals took advantage of WFH to target financial services companies, say financial bods

Update Your Windows PCs to Patch 117 New Flaws, Including 9 Zero-Days

Microsoft names Chinese group as source of new attack on SolarWinds

~ 13 Jul 2021 ~

Cubas Social Media Blackout Reflects an Alarming New Normal

Schneider Electric C-Bus Toolkit

Outrun the cyber-crooks with information security training from SANS Institute

Microsoft discovers threat actor targeting SolarWinds Serv-U software with 0-day exploit

Microsoft Patch Tuesday, July 2021 Edition

Critical Flaws Reported in Etherpad a Popular Google Docs Alternative

A New Critical SolarWinds Zero-Day Vulnerability Under Active Attack

REvil ransomware gang's websites vanish soon after Kaseya fiasco, Uncle Sam threatens retaliation

UK govt draws a blank over vaccine certification app no really, the report is half-empty

Microsoft Patches 3 Windows Zero-Days Amid 117 CVEs

Choosing your MSP: What the Kaseya incident tells us about thirdparty cyber risk

You'll never Guess whose data has been nicked as US fashion firm confirms systems breach

DoD-Validated Data Security Startup Emerges From Stealth

Iranian State-Sponsored Hacking Attempts

Microsoft to beef up security portfolio with reported half-billion-dollar RiskIQ buyout

Schneider Electric SCADApack RTU, Modicon Controllers, and Software

Siemens PROFINET Devices

Siemens SINUMERIK Integrate Operate Client

Siemens SIMATIC Software Products

Siemens SIMATIC Software Products

Siemens Industrial Products LLDP

Siemens Solid Edge

Siemens JT Utilities

Siemens RUGGEDCOM ROS

Researchers warn of unpatched remote code execution flaws in Schneider Electric industrial gear

The hybrid workplace: What does it mean for cybersecurity?

We're terrified of sharing information, but the benefits of talking about IT and infosec outweigh the negatives

Trickbot Malware Returns with a new VNC Module to Spy on its Victims

Iranian Hackers Posing as Scholars Target Professors and Writers in Middle-East

Tool Sprawl & False Positives Hold Security Teams Back

Kaseya restores SaaS, then 'performance issues' force a do-over

~ 12 Jul 2021 ~

Critical RCE Flaw in ForgeRock Access Manager Under Active Attack

With a straight face, Putin agrees to do something about ransomware coming out of Russia, apparently

SolarWinds issues software update one it wrote for a change to patch hole exploited in the wild

The Everyday IT Tools That Can Offer God Mode to Hackers

Analysis of the FBIs Anom Phone

SolarWinds Discloses Zero-Day Under Active Attack

Microsoft to acquire RiskIQ to strengthen cybersecurity of digital transformation and hybrid work

Looking for hands on, in-person cybersecurity training? Well, look to London

Microsoft Confirms Acquisition of RiskIQ

Crafting a Custom Dictionary for Your Password Policy

Hackers Spread BIOPASS Malware via Chinese Online Gambling Sites

Kaseya claims SaaS restoration going swimmingly

Why You Need Automation to Achieve Compliance in the Cloud - Part 1

~ 11 Jul 2021 ~

Kaseya Releases Patches for Flaws Exploited in Widespread Ransomware Attack

How to Make Your Web Searches More Secure and Private

Instructor Spotlight: Jason Fossen for SEC505 PowerShell

~ 10 Jul 2021 ~

The Latest Pro-Trump Twitter Clone Leaks User Dataon Day 1

A New System Is Helping Crack Down on Child Sex Abuse Images

~ 9 Jul 2021 ~

An Office Phone Flaw Cant Be Fixed By Cisco Alone

Friday Squid Blogging: Squid-Related Game

Spike in Chain Gang Destructive Attacks on ATMs

How Dangerous is Malware? New Report Finds It's Tough to Tell

CISA Analysis Reveals Successful Attack Techniques of FY 2020

New Framework Aims to Describe & Address Complex Social Engineering Attacks

Week in security with Tony Anscombe

Europe Makes the Case to Ban Biometric Surveillance

Cartoon Caption Winner: Sight Unseen

Magecart Hackers Hide Stolen Credit Card Data Into Images for Evasive Exfiltration

New SaaS Security Report Dives into the Concerns and Plans of CISOs in 2021

Kaseya delays SaaS restore to Sunday, CEO says this sucks but decision was his alone

Enterprise Security Tech Q&A

Critical Flaws Reported in Philips Vue PACS Medical Imaging Systems

~ 8 Jul 2021 ~

Hackers Use New Trick to Disable Macro Security Warnings in Malicious Office Files

Microsoft Keeps Failing to Patch a Critical Windows Bug

The Unfixed Flaw at the Heart of REvils Ransomware Spree

US offers Julian Assange time in Australian prison instead of American supermax if he loses London extradition fight

Microsoft named a Visionary in the 2021 Gartner Magic Quadrant for SIEM for Azure Sentinel

Morgan Stanley Discloses Data Breach

New WildPressure Malware Capable of Targeting Windows and MacOS

Microsoft issues patch to fix PrintNightmare zeroday bug

Kaseya Left Customer Portal Vulnerable to 2015 Flaw in its Own Software

Details of the REvil Ransomware Attack

ICO survey on data flouters: 50% say they receive more unwanted calls than before pandemic

Criminals prefer to WFH too: Singapore infosec agency says 43% of all crimes in the city-state happened online in 2020

VISAM Automation Base (VBASE) (Update A)

Rockwell Automation MicroLogix 1100