Port 22

~ 26 Jan 2022 ~

Millions of Routers, IoT Devices at Risk as Malware Source Code Surfaces on GitHub

ArmorCode Closes $11 Million Seed Funding Round

Hackers Using New Evasive Technique to Deliver AsyncRAT Malware

OMB Issues Zero-Trust Strategy for Federal Agencies

Alert: Let's Encrypt to revoke about 2 million HTTPS certificates in two days

Apple Releases iOS and macOS Updates to Patch Actively Exploited 0-Day Vulnerability

Experts Urge Firms to Patch Trivial-to-Exploit Flaw in Linux PolicyKit

Cybersecurity Is Broken: How We Got Here & How to Start Fixing It

Evolved phishing: Device registration trick adds to phishers toolbox for victims without MFA

New DeadBolt Ransomware Targets NAT Devices

VPNLab.net Shuttered in Latest Spate of Global Takedowns

Why It's Time to Rethink Incident Response

Infosec big dogs break out the bubbly over UK government's latest cyber strategy emission

Every breath you take, every move you make: Do fitness trackers pose privacy risks?

Fighting Supply Chain Email Attacks With AI

Infosec chap: I found a way to hijack your web accounts, turn on your webcam from Safari and Apple gave me $100k

Webinar: How to See More, But Respond Less with Enhanced Threat Visibility

Initial Access Broker Involved in Log4Shell Attack Against VMware Horizon Servers

Linux distros haunted by Polkit-geist for 12+ years: Bug grants root access to any user

Safari Flaws Exposed Webcams, Online Accounts, and More

Revelstoke Launches With SOAR Platform to Automate SOCs

~ 25 Jan 2022 ~

Google Drops FLoC and Introduces Topics API to Replace Tracking Cookies for Ads

Threat Actors Use Microsoft OneDrive for Command-and-Control in Attack Campaign

How Does Threat Modeling Work in Software Development?

Link11 Sets New Standards in DDoS Protection as Test Winner

GE Gas Power ToolBoxST

12-Year-Old Polkit Flaw Lets Unprivileged Linux Users Gain Root Access

Why the Belarus Railways Hack Marks a First for Ransomware

Scary Fraud Ensues When ID Theft & Usury Collide

8 Security Startups to Watch in 2022

Striking a Balance Between Cybersecurity Awareness and Anxiety

How CISOs are preparing to tackle 2022

As IoT Attacks Increase, Experts Fear More Serious Threats

The 2022 Reset Scholarship in Social Media and Democracy

Merck Wins Insurance Lawsuit re NotPetya Attack

Sophos: Log4Shell would have been a catastrophe without the Y2K-esque mobilisation of engineers

4 Steps Toward Knowing Your Exploitable Attack Surface

Cyber-Physical Security: What It Is and What You Should Do

Watering hole deploys new macOS malware, DazzleSpy, in Asia

UK government opens consultation on medic-style register for Brit infosec pros

Yes, your data is special. But do you know how special?

Hackers Exploited MSHTML Flaw to Spy on Government and Defense Targets

Hackers Infect macOS with New DazzleSpy Backdoor in Watering-Hole Attacks

TrickBot Malware Using New Techniques to Evade Web Injection Attacks

Tales from the Dark Web, Part 2: Ransomware Stacked With Distribution Services Creates the Perfect Storm

Twitter's top security staff out after incoming CEO shakes things up

Test Your Team, Not Just Your Disaster Recovery Plan

Test Your Team, Not Just Your Disaster Recovery Plan

~ 24 Jan 2022 ~

Mobile Banking Trojan BRATA Gains New, Dangerous Capabilities

Trickbot Injections Get Harder to Detect & Analyze

Hackers Using New Malware Packer DTPacker to Avoid Analysis, Detection

Registration for the (ISC) Entry-Level Cybersecurity Certification Exam Pilot Program Is Now Open

DHS Sounds Alarm on Potential for Major Russian Cyberattacks on US

The Case for Backing Up Source Code

Ransomware Operators Are Feeling the Heat

Are You Prepared to Defend Against a USB Attack?

Hive View security camera customers left in the dark as some gear goes TITSUP*

A Level-Set on Russia-Borne Cyber Threats

Linux-Targeted Malware Increased by 35%

How I hacked my friends PayPal account

Myanmar's military junta seeks ban on VPNs and digital currency

ZTNAs Address Requirements VPNs Cannot. Here's Why.

Australian Prime Minister's WeChat Shanghaied by Chinese patriots

Hackers Creating Fraudulent Crypto Tokens as Part of 'Rug Pull' Scams

ICS Cyber Resilience, Active Defense & Safety Series