Port 22

~ 27 May 2021 ~

Ethical Phishing The Slippery Slope With Employee Deception

~ 26 May 2021 ~

Newly Discovered Bugs in VSCode Extensions Could Lead to Supply Chain Attacks

How user experience is shaping verifiable credentials and identity

Bluetooth bugs could allow attackers to impersonate devices

Google Discovers New Rowhammer Attack Technique

Becoming resilient by understanding cybersecurity risks: Part 4navigating current threats

New Disk Wiping Malware Targets Israel

As Chips Shrink, Rowhammer Attacks Get Harder to Stop

Devo: SIEM Continues to Evolve with Tech Trends and Emerging Threats

What to do about open source vulnerabilities? Move fast, says Linux Foundation expert

Kaspersky Security Bulletin 2020-2021. EU statistics

Computer Misuse Act: Tell the Home Office infosec needs a public interest defence in law, says CyberUp campaign

New Iranian Threat Actor Using Ransomware, Wipers in Destructive Attacks

Data Wiper Malware Disguised As Ransomware Targets Israeli Entities

In-person cybersec training? Yes, its back on the agenda this year

Contract killer: Certified PDFs can be secretly tampered with during the signing process, boffins find

VMware reveals critical vCenter hole it says needs to be considered at once

WhatsApp Sues Indian Government Over New Privacy Threatening Internet Law

Not in Cyber Security? No Problem!

Home-schooling for cyber professionals

~ 25 May 2021 ~

Google Researchers Discover A New Variant of Rowhammer Attack

Russian Hydra DarkNet Market Made Over $1.3 Billion in 2020

Critical RCE Vulnerability Found in VMware vCenter Server Patch Now!

Microsoft is a Leader in the 2021 Forrester Endpoint Security Software as a Service Wave

Cloud Compromise Costs Organizations $6.2M Per Year

Russia Profiting from Massive Hydra Cybercrime Marketplace

Rise in Opportunistic Hacks and Info-Sharing Imperil Industrial Networks

Snowden was right, rules human rights court as it declares UK spy laws broke ECHR

Apple fixes macOS zeroday bug that let malware take secret screenshots

MacOS Zero-Day Let Attackers Bypass Privacy Preferences

Brit watchdog shows some teeth over McAfee antivirus auto-renewals

Russian Sentenced to 30 Months for Running Criminal Website

Crimes of Opportunity: Increasing Frequency of Low Sophistication Operational Technology Compromises

Crimes of Opportunity: Increasing Frequency of Low Sophistication Operational Technology Compromises

Your Network's Smallest Cracks Are Now Its Biggest Threats

Datakit Libraries bundled in Luxion KeyShot

Rockwell Automation Micro800 and MicroLogix 1400

South Korea plans large scale quantum cryptography adoption, thanks in part to tech partnership with USA

Businesses Boost Security Budgets. Where Will the Money Go?

Turn the Tables: Supply Chain Defense Needs Some Offense, Fortinet Says

Evolution of JSWorm ransomware

Hard cheese: Stilton snap shared via EncroChat leads to drug dealer's downfall

Chinas Digital Yuan not aimed at challenging US dollar, says former Peoples Bank governor

New High-Severity Vulnerability Reported in Pulse Connect Secure VPN

~ 24 May 2021 ~

New Bluetooth Flaws Let Attackers Impersonate Legitimate Devices

Apple Issues Patches to Combat Ongoing 0-Day Attacks on macOS, tvOS

Apple patches macOS flaw exploited by malware to secretly snap screenshots

Legacy data protection and modern ransomware? The odds are not in your favor

Resources for accelerating your Zero Trust journey

Icarus moment: Mozilla Thunderbird was saving OpenPGP keys in plaintext after encryption snafu

Microsoft recognized as a Leader in The Forrester Wave: Unstructured Data Security Platforms, Q2 2021

Air India Confirms Data of 4.5M Travelers Compromised

Sophos Research Uncovers Widespread Use of TLS By Cybercriminals

AIs and Fake Comments

Researchers Link CryptoCore Attacks On Cryptocurrency Exchanges to North Korea

As Threat Hunting Matures, Malware Labs Emerge

Romcon: How romance fraud targets older people and how to avoid it

Apple is happy to diss the desktop it knows who's got the most to lose

Air India admits to data breach impacting 4.5m customers, sat on the news for five weeks

What To Do When Your Business Is Hacked

Indonesias national health insurance scheme leaks at least a million citizens' records

Why security certifications are crucial

Managing Human Risk: Start with the Risks

Details Disclosed On Critical Flaws Affecting Nagios IT Monitoring Software

~ 23 May 2021 ~

How to Avoid App Store Scams

~ 22 May 2021 ~

Apple Exec Calls Mac Malware Levels Unacceptable Under Oath

How to Avoid Those Infuriating Cookie Pop-Ups

Goodbye Internet Explorerand Good Riddance

American insurance giant CNA reportedly pays $40m to ransomware crooks

FBI Analyst Charged With Stealing Counterterrorism and Cyber Threats Info

FBI Warns Conti Ransomware Hit 16 U.S. Health and Emergency Services

~ 21 May 2021 ~

Air India Hack Exposes Credit Card and Passport Info of 4.5 Million Passengers

Friday Squid Blogging: Picking up Squid on the Beach

How to Tell a Job Offer from an ID Theft Trap

Week in security with Tony Anscombe

FBI Issues Conti Ransomware Alert as Attacks Target Healthcare

Data in Danger Amid New IT Challenges

UK Computer Misuse Act convictions declined last year despite pandemic explosion in online criminal activity

Double-Encrypting Ransomware

Here's how we got persistent shell access on a Boeing 747 Pen Test Partners

Google's 'Ask me anything' on Privacy Sandbox was more about questions than answers

Doncaster insurance firm One Call hit by not-dead-at-all Darkside ransomware gang

Insurance Firm CNA Financial Reportedly Paid Hackers $40 Million in Ransom

Toyota rear-ended by twin cyber attacks that left ransomware-shaped dents

Microsoft Warns of Data Stealing Malware That Pretends to Be Ransomware

Six Steps to Mobile Validation Working Together for the Common Good

~ 20 May 2021 ~

Lack of Skills, Maturity Hamper Threat Hunting at Many Organizations

Android 12 will give you more control over how much data you share with apps

Phorpiex morphs: How a longstanding botnet persists and thrives in the current threat environment

Maricopa County CISO: Online Misinformation/Disinformation in 2020 Election a 'Gamechanger

SimuLand: Understand adversary tradecraft and improve detection strategies

100M Users' Data Exposed via Third-Party Cloud Misconfigurations

Security Providers Describe New Solutions (& Growing Threats) at RSAC

Cost Savings, Better Security Drive Adoption of Emerging Technologies

Bizarro Banking Trojan

UK data regulator fines American Express 0.14p per email after opted-out folk spammed 50 million times

3 Ways Anti-Vaxxers Will Undercut Security With Misinformation

The Full Story of the Stunning RSA Hack Can Finally Be Told

23 Android Apps Expose Over 100,000,000 Users' Personal Data

Is Single Sign-On Enough to Secure Your SaaS Applications?