Port 22

~ 4 May 2021 ~

The UNC2529 Triple Double: A Trifecta Phishing Campaign

They Told Their Therapists Everything. Hackers Leaked It All

Advantech WISE-PaaS RMM

Delta Electronics CNCSoft ScreenEditor

LuckyMouse Hackers Target Banks, Companies and Governments in 2020

Researchers Uncover Iranian State-Sponsored Ransomware Operation

New Pingback Malware Using ICMP Tunneling to Evade C&C Detection

How Should the Service Desk Reset Passwords?

Apple patches iOS, macOS, iPadOS, watchOS, kitchen-sinkOS bugs said to be exploited in the wild

Critical Patch Out for Critical Pulse Secure VPN 0-Day Under Attack

~ 3 May 2021 ~

Dont Buy Into Facebooks Ad-Tracking Pressure on iOS 14.5

A Rust-based Buer Malware Variant Has Been Spotted in the Wild

Researchers Explore Active Directory Attack Vectors

INTERPOL aims to deal a blow to digital piracy

Identifying the Person Behind Bitcoin Fog

Buer Malware Variant Rewritten in Rust Programming Language

Spam and phishing in Q1 2021

Over 40 Apps With More Than 100 Million Installs Found Leaking AWS Keys

New Chinese Malware Targeted Russia's Largest Nuclear Submarine Designer

List of Resource Links from SANS New to Cyber Summit 2021

~ 2 May 2021 ~

Hackers Exploit SonicWall Zero-Day Bug in FiveHands Ransomware Attacks

~ 1 May 2021 ~

A Ransomware Group Hit DC PoliceThen Pivoted to Extortion

~ 30 Apr 2021 ~

Friday Squid Blogging: On Squid Coloration

Ransomware Task Force Publishes Framework to Fight Global Threat

Bill to protect UK against harmful foreign investment becomes law

New Threat Group Carrying Out Aggressive Ransomware Campaign

Happy Friday? Darktrace gets 40 per cent boost on London IPO debut

MITRE Adds MacOS, More Data Types to ATT&CK Framework

Week in security with Tony Anscombe

Serious MacOS Vulnerability Patched

Google's Grand Plan to Eradicate Cookies Is Crumbling

7 Modern-Day Cybersecurity Realities

A New Slack channel for Cybersecurity Leaders Outside of the Fortune 2000

Microsoft Finds 'BadAlloc' Flaws Affecting Wide-Range of IoT and OT Devices

Australia proposes teaching cyber-security to five-year-old kids

More Opportunities to Become a SANS Cloud Ace

Passwordstate Warns of Ongoing Phishing Attacks Following Data Breach

~ 29 Apr 2021 ~

Stealthy Linux backdoor malware spotted after three years of minding your business

BadAlloc: Microsoft looked at memory allocation code in tons of devices and found this one common security flaw

UNC2447 SOMBRAT and FIVEHANDS Ransomware: A Sophisticated Financial Threat

UNC2447 SOMBRAT and FIVEHANDS Ransomware: A Sophisticated Financial Threat

FBI teams up with Have I Been Pwned to alert Emotet victims

'BadAlloc' Flaws Could Threaten IoT and OT Devices: Microsoft

Adobe Open Sources Tool for Anomaly Research

Vivaldi update unleashes the 'Cookie Crumbler' to simply block any services asking for consent (sites may break)

Task Force Seeks to Disrupt Ransomware Payments

Billions in data protection lawsuits rides on Google's last-ditch UK Supreme Court defence for Safari Workaround sueball

Identifying People Through Lack of Cell Phone Use

Texas Instruments SimpleLink

Cassia Networks Access Controller

Johnson Controls Exacq Technologies exacqVision

Multiple RTOS

48 ways you can avoid file-scrambling, data-stealing miscreants or so says the Ransomware Task Force

An Ambitious Plan to Tackle Ransomware Faces Long Odds

Prime targets: Governments shouldnt go it alone on cybersecurity

A New PHP Composer Bug Could Enable Widespread Supply-Chain Attacks

When youre building a cybersecurity pro, you need to get the foundations right

Digital Ocean springs a leak: Miscreant exploits hole to peep on unlucky customers' billing details for two weeks

How to Conduct Vulnerability Assessments: An Essential Guide for 2021

Chinese Hackers Attacking Military Organizations With New Backdoor

Researchers Uncover Stealthy Linux Malware That Went Undetected for 3 Years

Getting Support for Your Human Risk Assessments and Surveys

~ 28 Apr 2021 ~

Experian API Exposed Credit Scores of Most Americans

Ransomware crooks who broke into Merseyrail used director's email address to brag about it report

FluBot Malware's Rapid Spread May Soon Hit US Phones

74% of Financial Institutions See Spike in COVID-Related Threats

Brit MPs and campaigners come together to oppose COVID status certificates as 'divisive and discriminatory'

FBI Works With 'Have I Been Pwned' to Notify Emotet Victims

Ghostwriter Update: Cyber Espionage Group UNC1151 Likely Conducts Ghostwriter Influence Activity

~ 27 Apr 2021 ~

Abusing Replication: Stealing AD FS Secrets Over the Network

~ 22 Apr 2021 ~

Where to find a Good Woman to Marry

What exactly is Mutually Helpful Relationship?

The right way to Protect Your self From Asian Brides On the net

Primary advantages of Foreign Dating Sites

How you can find Legitimate Wedding brides for Sale

How you can find a Good Woman to Get married to

Benefits of Foreign Internet dating sites

Ancient Womannasiums Tips for Online Dating

~ 19 Apr 2021 ~

Grype Vulnerability Scanner For Container Images & Filesystems

Grype Vulnerability Scanner For Container Images & Filesystems

~ 13 Apr 2021 ~

Detecting the "Next" SolarWinds-Style Cyber Attack

~ 4 Mar 2021 ~

APT-Hunter Threat Hunting Tool via Windows Event Log

APT-Hunter Threat Hunting Tool via Windows Event Log

~ 3 Mar 2021 ~

Fuzzing Image Parsing in Windows, Part Two: Uninitialized Memory

~ 26 Jan 2021 ~

Phishing Campaign Leverages WOFF Obfuscation and Telegram Channels for Communication

~ 21 Jan 2021 ~

Training Transformers for Cyber Security Tasks: A Case Study on Malicious URL Prediction

~ 20 Jan 2021 ~

Emulation of Kernel Mode Rootkits With Speakeasy

~ 1 Dec 2020 ~

Using Speakeasy Emulation Framework Programmatically to Unpack Malware

~ 11 Nov 2020 ~

Click Security because "click happens"

~ 31 Aug 2020 ~

Seny Kamara on "Crypto for the People"

~ 25 Aug 2020 ~

Our New Blog

~ 17 Aug 2020 ~

How Unsecure gRPC Implementations Can Compromise APIs, Applications

~ 13 Aug 2020 ~

XCSSET Mac Malware: Infects Xcode Projects, Performs UXSS Attack on Safari, Other Browsers, Leverages Zero-day Exploits

~ 12 Aug 2020 ~

August Patch Tuesday Fixes Critical IE, Important Windows Vulnerabilities Exploited in the Wild

~ 10 Aug 2020 ~

Pen Test Partners: Boeing 747s receive critical software updates over 3.5" floppy disks

~ 6 Aug 2020 ~

Water Nue Phishing Campaign Targets C-Suites Office 365 Accounts

~ 28 Jul 2020 ~

Mirai Botnet Exploit Weaponized to Attack IoT Devices via CVE-2020-5902

~ 27 Jul 2020 ~

Ensiko: A Webshell With Ransomware Capabilities

~ 17 Jul 2020 ~

Updates on ThiefQuest, the Quickly-Evolving macOS Malware

~ 15 Jul 2020 ~

Patch Tuesday: Fixes for Wormable Windows DNS Server RCE, SharePoint Flaws