Port 22

~ 28 May 2021 ~

The SolarWinds Hackers Aren't 'Back.' They Never Went Away

Blurred Satellite Images Make Rebuilding Palestine Harder

Online flashcard sites spill security details of US nuclear weapon bunkers since 2013

Week in security with Tony Anscombe

Boss of ATM Skimming Syndicate Arrested in Mexico

Modern SOCs a 'Painful' Challenge Amid Growing Complexity: Report

SolarWinds Attackers Impersonate USAID in Advanced Email Campaign

The Misaligned Incentives for Cloud Security

Plug-ins for Code Editors Pose Developer-Security Threat

Researchers Warn of Facefish Backdoor Spreading Linux Rootkits

Russian gang behind SolarWinds hack returns with phishing attack disguised as mail from US aid agency

Hong Kong recorded phishing surge in 2020 as scum sought to cash in on viral worries

SolarWinds Hackers Target Think Tanks With New Backdoor

What certification do I need?

Chinese Cyber Espionage Hackers Continue to Target Pulse Secure VPN Devices

New sophisticated email-based attack from NOBELIUM

~ 27 May 2021 ~

WhatsApp's Fight With India Could Have Global Repercussions

Re-Checking Your Pulse: Updates on Chinese APT Actors Compromising Pulse Secure VPN Devices

Re-Checking Your Pulse: Updates on Chinese APT Actors Compromising Pulse Secure VPN Devices

'Have I Been Pwned' Code Base Now Open Source

BazaLoader Attackers Create Fake Movie Streaming Site to Trick Victims

A Never-Before-Seen Wiper Malware Is Hitting Israeli Targets

DHS Orders Pipeline Operators to Report Cyberattacks, Review Security Posture

Fujitsu pulls ProjectWEB tool offline after apparent supply chain attack sees Japanese infosec agency data stolen

The Story of the 2011 RSA Hack

Vulhub Pre-Built Vulnerable Docker Environments For Learning To Hack

Vulhub Pre-Built Vulnerable Docker Environments For Learning To Hack

Vulhub Pre-Built Vulnerable Docker Environments For Learning To Hack

GENIVI Alliance DLT

Johnson Controls Sensormatic Electronics VideoEdge

MesaLabs AmegaView

Siemens JT2Go and Teamcenter Visualization

Mitsubishi Electric MELSEC iQ-R Series

I hacked my friends website after a SIM swap attack

ExtraHop Explains How Advanced Threats Dominate Threat Landscape

Malvertising Campaign On Google Distributed Trojanized AnyDesk Installer

Hackers Using Fake Foundations to Target Uyghur Minority in China

Unfixable Apple M1 chip bug enables cross-process chatter, breaking OS security model

Ethical Phishing The Slippery Slope With Employee Deception

~ 26 May 2021 ~

Newly Discovered Bugs in VSCode Extensions Could Lead to Supply Chain Attacks

How user experience is shaping verifiable credentials and identity

Bluetooth bugs could allow attackers to impersonate devices

Google Discovers New Rowhammer Attack Technique

Becoming resilient by understanding cybersecurity risks: Part 4navigating current threats

New Disk Wiping Malware Targets Israel

As Chips Shrink, Rowhammer Attacks Get Harder to Stop

Devo: SIEM Continues to Evolve with Tech Trends and Emerging Threats

What to do about open source vulnerabilities? Move fast, says Linux Foundation expert

Kaspersky Security Bulletin 2020-2021. EU statistics

Computer Misuse Act: Tell the Home Office infosec needs a public interest defence in law, says CyberUp campaign

New Iranian Threat Actor Using Ransomware, Wipers in Destructive Attacks

Data Wiper Malware Disguised As Ransomware Targets Israeli Entities

In-person cybersec training? Yes, its back on the agenda this year

Contract killer: Certified PDFs can be secretly tampered with during the signing process, boffins find

VMware reveals critical vCenter hole it says needs to be considered at once

WhatsApp Sues Indian Government Over New Privacy Threatening Internet Law

Not in Cyber Security? No Problem!

Home-schooling for cyber professionals

~ 25 May 2021 ~

Google Researchers Discover A New Variant of Rowhammer Attack

Russian Hydra DarkNet Market Made Over $1.3 Billion in 2020

Critical RCE Vulnerability Found in VMware vCenter Server Patch Now!

Microsoft is a Leader in the 2021 Forrester Endpoint Security Software as a Service Wave

Cloud Compromise Costs Organizations $6.2M Per Year

Russia Profiting from Massive Hydra Cybercrime Marketplace

Rise in Opportunistic Hacks and Info-Sharing Imperil Industrial Networks

Snowden was right, rules human rights court as it declares UK spy laws broke ECHR

Apple fixes macOS zeroday bug that let malware take secret screenshots

MacOS Zero-Day Let Attackers Bypass Privacy Preferences

Brit watchdog shows some teeth over McAfee antivirus auto-renewals

Russian Sentenced to 30 Months for Running Criminal Website

Crimes of Opportunity: Increasing Frequency of Low Sophistication Operational Technology Compromises

Crimes of Opportunity: Increasing Frequency of Low Sophistication Operational Technology Compromises

Your Network's Smallest Cracks Are Now Its Biggest Threats

Datakit Libraries bundled in Luxion KeyShot

Rockwell Automation Micro800 and MicroLogix 1400

South Korea plans large scale quantum cryptography adoption, thanks in part to tech partnership with USA

Businesses Boost Security Budgets. Where Will the Money Go?

Turn the Tables: Supply Chain Defense Needs Some Offense, Fortinet Says

Evolution of JSWorm ransomware

Hard cheese: Stilton snap shared via EncroChat leads to drug dealer's downfall

Chinas Digital Yuan not aimed at challenging US dollar, says former Peoples Bank governor

New High-Severity Vulnerability Reported in Pulse Connect Secure VPN

~ 24 May 2021 ~

New Bluetooth Flaws Let Attackers Impersonate Legitimate Devices

Apple Issues Patches to Combat Ongoing 0-Day Attacks on macOS, tvOS

Apple patches macOS flaw exploited by malware to secretly snap screenshots

Legacy data protection and modern ransomware? The odds are not in your favor

Resources for accelerating your Zero Trust journey

Icarus moment: Mozilla Thunderbird was saving OpenPGP keys in plaintext after encryption snafu

Microsoft recognized as a Leader in The Forrester Wave: Unstructured Data Security Platforms, Q2 2021

Air India Confirms Data of 4.5M Travelers Compromised

Sophos Research Uncovers Widespread Use of TLS By Cybercriminals

AIs and Fake Comments

Researchers Link CryptoCore Attacks On Cryptocurrency Exchanges to North Korea

As Threat Hunting Matures, Malware Labs Emerge

Romcon: How romance fraud targets older people and how to avoid it

Apple is happy to diss the desktop it knows who's got the most to lose

Air India admits to data breach impacting 4.5m customers, sat on the news for five weeks

What To Do When Your Business Is Hacked

Indonesias national health insurance scheme leaks at least a million citizens' records

Managing Human Risk: Start with the Risks