Port 22

~ 14 Dec 2021 ~

Owowa: the add-on that turns your OWA into a credential stealer and remote access panel

Hackers Exploit Log4j Vulnerability to Infect Computers with Khonsari Ransomware

How Extended Security Posture Management Optimizes Your Security Stack

Inside Irelands Public Healthcare Ransomware Scare

The Log4J Vulnerability Will Haunt the Internet for Years

XDR: What It Is, What It Isn't

SANS Top 10 Most Popular Free Resources

~ 13 Dec 2021 ~

Ransomware Affiliate Arrested in Romania; 51 Stolen Data Brokers Arrested in Ukraine

Tales from the Dark Web: Fingerprinting Access Brokers on Criminal Forums

Why Classifying Ransomware as a National Security Threat Matters

Log4j RCE latest: In case you hadn't noticed, this is Really Very Bad, exploited in the wild, needs urgent patching

How Do I Find My Servers With the Log4j Vulnerability?

Volvo Confirms R&D Data Stolen in Breach

Latest Apple iOS Update Patches Remote Jailbreak Exploit for iPhones

Kronos Suffers Ransomware Attack, Expects Full Restoration to Take 'Weeks'

40% of Corporate Networks Targeted by Attackers Seeking to Exploit Log4j

Bug-Bounty Programs Shift Focus to Most Critical Flaws

Update Google Chrome to Patch New Zero-Day Exploit Detected in the Wild

Log4Shell vulnerability: What we know so far

Name That Toon: Modern-Day Frosty

When disaster strikes, data recovery really is a race against time

Darktrace Reports Information Technology and Communications Sector Most Targeted by Cyberattackers in 2021

Kaspersky Opens Doors to New Transparency Center in North America

Is VPOTUS Bluetooth-phobic or sensible? The answer's pretty clear

2 Website Threats to Address for the Holiday Shopping Rush

Timekeeping biz Kronos hit by ransomware and warns customers to engage biz continuity plans

CVE-2021-44228 vulnerability in Apache Log4j library

NSO Groups Pegasus Spyware Used Against US State Department Officials

Identity Authentication Access Market Set to Hit $28.9B in 2021

Ooh, an update. Let's install it. What could possibly go wro-

Karakurt: A New Emerging Data Theft and Cyber Extortion Hacking Group

Top 3 SaaS Security Threats for 2022

Microsoft Details Building Blocks of Widely Active Qakbot Banking Trojan

What do you need to know about the log4j (Log4Shell) vulnerability?

~ 12 Dec 2021 ~

Apache Log4j Vulnerability Log4Shell Widely Under Active Attack

How to Guard Against Smishing Attacks on Your Phone

Guidance for preventing, detecting, and hunting for CVE-2021-44228 Log4j 2 exploitation

~ 11 Dec 2021 ~

US Wins Appeal to Extradite Julian Assange

What to Do While Waiting for the Log4J Updates

~ 10 Dec 2021 ~

Friday Squid Blogging: The Far Side Squid Comic

Security Experts Sound Alarm on Zero-Day in Widely Used Log4j Tool

NIST Cyber-Resiliency Framework Extended to Include Critical Infrastructure Controls

Irish Health Service ransomware attack happened after one staffer opened malware-ridden email

Russian National Sentenced for Role in Kelihos Botnet

Extremely Critical Log4J Vulnerability Leaves Much of the Internet at Risk

A Log4J Vulnerability Has Set the Internet 'On Fire'

Dark Reading Reflects on a Legacy and Life Well-Written: Tim Wilson

Log4j RCE: Emergency patch issued to plug critical auth-free code execution hole in widely-used logging utility

The Vulnerability Lag: Cut Ransomware Risks Resulting From Digital Transformation

Week in security with Tony Anscombe

Revealed: Remember the Sony rootkit rumpus? It was almost oh so much worse

New Firefox Sandbox Isolates Third-Party Libraries

Law Enforcement Access to Chat Data and Metadata

Russias Internet Censorship Machine Is Going After Tor

BlackCat: A New Rust-based Ransomware Malware Spotted in the Wild

Ransomwared payroll provider leaks data on 38,000 Australian government workers

1.6 Million WordPress Sites Under Cyberattack From Over 16,000 IP Addresses

Russia Blocks Tor Privacy Service in Latest Censorship Move

~ 9 Dec 2021 ~

Broadcom Inc. Announces $10 Billion Share Repurchase Authorization

Emotet Is Back and More Dangerous Than Before

Why Red Teaming While Black Can Be Risky

Researchers Explore Microsoft Outlook Phishing Techniques

Lack of Patching Leaves 300,000 Routers at Risk for Attack

Best practices for AI security risk management

A third of you slackers out there still aren't using HTTPS by default