Port 22

~ 24 May 2021 ~

Why security certifications are crucial

Details Disclosed On Critical Flaws Affecting Nagios IT Monitoring Software

~ 23 May 2021 ~

How to Avoid App Store Scams

~ 22 May 2021 ~

Apple Exec Calls Mac Malware Levels Unacceptable Under Oath

How to Avoid Those Infuriating Cookie Pop-Ups

Goodbye Internet Explorerand Good Riddance

American insurance giant CNA reportedly pays $40m to ransomware crooks

FBI Analyst Charged With Stealing Counterterrorism and Cyber Threats Info

FBI Warns Conti Ransomware Hit 16 U.S. Health and Emergency Services

~ 21 May 2021 ~

Air India Hack Exposes Credit Card and Passport Info of 4.5 Million Passengers

Friday Squid Blogging: Picking up Squid on the Beach

How to Tell a Job Offer from an ID Theft Trap

Week in security with Tony Anscombe

FBI Issues Conti Ransomware Alert as Attacks Target Healthcare

Data in Danger Amid New IT Challenges

UK Computer Misuse Act convictions declined last year despite pandemic explosion in online criminal activity

Double-Encrypting Ransomware

Here's how we got persistent shell access on a Boeing 747 Pen Test Partners

Google's 'Ask me anything' on Privacy Sandbox was more about questions than answers

Doncaster insurance firm One Call hit by not-dead-at-all Darkside ransomware gang

Insurance Firm CNA Financial Reportedly Paid Hackers $40 Million in Ransom

Toyota rear-ended by twin cyber attacks that left ransomware-shaped dents

Microsoft Warns of Data Stealing Malware That Pretends to Be Ransomware

Six Steps to Mobile Validation Working Together for the Common Good

~ 20 May 2021 ~

Lack of Skills, Maturity Hamper Threat Hunting at Many Organizations

Android 12 will give you more control over how much data you share with apps

Phorpiex morphs: How a longstanding botnet persists and thrives in the current threat environment

Maricopa County CISO: Online Misinformation/Disinformation in 2020 Election a 'Gamechanger

SimuLand: Understand adversary tradecraft and improve detection strategies

100M Users' Data Exposed via Third-Party Cloud Misconfigurations

Security Providers Describe New Solutions (& Growing Threats) at RSAC

Cost Savings, Better Security Drive Adoption of Emerging Technologies

Bizarro Banking Trojan

UK data regulator fines American Express 0.14p per email after opted-out folk spammed 50 million times

3 Ways Anti-Vaxxers Will Undercut Security With Misinformation

The Full Story of the Stunning RSA Hack Can Finally Be Told

23 Android Apps Expose Over 100,000,000 Users' Personal Data

Is Single Sign-On Enough to Secure Your SaaS Applications?

Watering Hole Attack Was Used to Target Florida Water Utilities

Now Open | SANS 2021 Threat Hunting Survey

~ 19 May 2021 ~

Android Issues Patches for 4 New Zero-Day Bugs Exploited in the Wild

Protecting SAP applications with the new Azure Sentinel SAP threat monitoring solution

Attackers Took 5 Minutes to Start Scanning for Exchange Server Flaws

Forrester names Microsoft a Leader in The Forrester Wave: Cloud Security Gateways, Q2 2021

Recycle Your Phone, Sure, But Maybe Not Your Number

Miscreants started scanning for Exchange Hafnium vulns five minutes after Microsoft told world about zero-days

How to Adapt to Rising Consumer Expectations of Invisible Security

Apple Censorship and Surveillance in China

Im Not a Robot! So Why Wont Captchas Believe Me?

Credential Stuffing Reaches 193 Billion Login Attempts Annually

Uptime funk: Microsoft has lifted availability of Azure Key Vault to 99.99%

How Ransomware Encourages Opportunists to Become Criminals

Colonial Pipeline attack: Hacking the physical world

Australian Police hiring digital evidence retrieval specialists. You need to be a very good boy and have paws to get the gig

DarkSide Ransomware Gang Extorted $90 Million from Several Victims in 9 Months

The Microsoft Authenticator extension in the Chrome store wasn't actually made by Microsoft. Oops, Google

The Microsoft Authenticator extension in the Chrome store wasn't actually made by Microsoft. Oops, Google

Mozilla Begins Rolling Out 'Site Isolation' Security Feature to Firefox Browser

New Zealand hospitals infected by ransomware, cancel some surgeries

A Simple 1-Click Compromised Password Reset Feature Coming to Chrome Browser

~ 18 May 2021 ~

Android 12 Will Let You Fine-Tune Permissions for Apps

Us? Pwn SolarWinds? With our reputation? Russian spy chief makes laughable denial of supply chain attack

How Attackers Weigh the Pros and Cons of BEC Techniques

Business-intelligence-company-turned-Bitcoin-addict MicroStrategy grabs another $10m crypto-coin fix

Scams target families of missing persons, FBI warns

Mitigate OT security threats with these best practices

Adding a Russian Keyboard to Protect against Ransomware

The UK loves cybersecurity so much, it's going to regulate managed service providers' infosec practices in law

Splunk to Acquire TruStar for Data Management

1Password unsheathes Rusty key, hopes to unlock Linux Desktop world

FBI's IC3 Logs 1M Complaints in 14 Months

Researchers Create Covert Channel Over Apple AirTag Network

Emerson Rosemount X-STREAM

Cisco Plans to Create 'Premium' SecureX Offering With Kenna Security Features

Latest phones are great at thwarting Wi-Fi tracking. Other devices, not so much study

How Apple Gave Chinese Government Access to iCloud Data and Censored Apps

Free "vCISO Clinic" offers Resource-Constrained InfoSec Leaders a Helping Hand

Experts Reveal Over 150 Ways to Steal Control of 58 Android Stalkerware Apps

70 European and South American Banks Under Attack By Bizarro Banking Malware

~ 17 May 2021 ~

Eufycam Wi-Fi security cameras streamed video feeds from other people's homes

DarkSide Ransomware Variant Targets Disk Partitions

47% of Criminals Buying Exploits Target Microsoft Products

Ransomware's Dangerous New Trick: Double-Encrypting Your Data

DDoS Attacks Up 31% in Q1 2021: Report

How a positive hybrid work culture can help you to mitigate insider risk

Axa insurance offshoots pwned as Ireland reveals second ransomware hit

Try This One Weird Trick Russian Hackers Hate

Correspondence between the Citizen Lab and NSO Group Regarding The Great iPwn

Take action now FluBot malware may be on its way

Is 85% of US Critical Infrastructure in Private Hands?

We'd love to report on the outcome of the CREST exam cheatsheet probe, but UK infosec body won't publish it

Bizarro banking Trojan expands its attacks to Europe

Android stalkerware threatens victims further and exposes snoopers themselves

Name That Toon: Road Trip

Mammoth grab of GP patient data in the UK set to benefit private-sector market access as rules remain unchanged

Apple sent my data to the FBI, says boss of controversial research paper trove Sci-Hub

Apple's Find My Network Can be Abused to Exfiltrate Data From Nearby Devices

Singapore bolsters Bluetooth contact-tracing as new COVID wave sends students and workers home again

Why Password Hygiene Needs a Reboot

Experts Warn About Ongoing AutoHotkey-Based Malware Attacks