Port 22

~ 12 Nov 2021 ~

ChaosDB: Infosec bods could pull anyone's plaintext Azure Cosmos DB keys at will from Microsoft admin tools

Follow the Leaders: A Blueprint for Software Security Success

MacOS Zero-Day Used against Hong-Kong Activists

Week in security with Tony Anscombe

How to Hire and Retain Effective Threat Hunters

The Sneaky Way TikTok Is Connecting You to Real-Life Friends

In Appreciation: Alan Paller

Hackers Increasingly Using HTML Smuggling in Malware and Phishing Attacks

AMD reveals an EPYC 50 flaws 23 of them rated High severity. Intel has 25 problems, too

There's no Huawei back now - Biden signs Act that forbids US buyers acquiring kit on naughty list

~ 11 Nov 2021 ~

Philippines gov takes down passport application website amid privacy leak fears

'Lyceum' Threat Group Broadens Focus to ISPs

Abcbot A New Evolving Wormable Botnet Malware Targeting Linux

Google Open Sources ClusterFuzzLite

Hackers Exploit macOS Zero-Day to Hack Hong Kong Users with new Implant

How Do I Know It's Time to Consider a SASE Migration?

Dutch newspaper accuses US spy agencies of orchestrating 2016 Booking.com breach

What Happens If Time Gets Hacked

Hackers Targeted Hong Kong Apple Devices in Widespread Attack

Cloud Attack Analysis Unearths Lessons for Security Pros

How to assess and improve the security culture of your business

If even tech leaders struggle with email encryption, are we all doomed?

Third-Party Software Risks Grow, but So Do Solutions

HTML smuggling surges: Highly evasive loader technique increasingly used in banking malware, targeted attacks

Palo Alto Networks patches 9.8 severity CVE in popular GlobalProtect product

Insider IP Theft Is Surging and Most Can't Stop It

Advice for Personal Digital Security

WECON PLC Editor

Multiple Data Distribution Service (DDS) Implementations

Siemens SIMATIC WinCC

Siemens Mendix

Siemens Mendix Studio Pro

Siemens SCALANCE W1750D

Siemens Nucleus RTOS-based APOGEE and TALON Products

Siemens NX OBJ Translator

When the alarms go off: 10key steps to take after adata breach

Siemens Climatix POL909

Siemens SENTRON powermanager

Researchers Uncover Hacker-for-Hire Group That's Active Since 2015

Malicious Chrome extensions are bad. But what about nice ones that can be hijacked? This new tool spots them

Ransomware: The ones that got away (with it)

USA signs internet freedom and no-hack pact it's ignored since 2018

TrickBot Operators Partner with Shathak Attackers for Conti Ransomware

New Zealand spooks say satellite snooping is obsolete better intel is found elsewhere

Navigating The Threat Landscape 2021 From Ransomware to Botnets

New Application Security Toolkit Uncovers Dependency Confusion Attacks

Iran's Lyceum Hackers Target Telecoms, ISPs in Israel, Saudi Arabia, and Africa

~ 10 Nov 2021 ~

Hacker-for-Hire Group Spied on More Than 3,500 Targets in 18 Months

Palo Alto Warns of Zero-Day Bug in Firewalls Using GlobalProtect Portal VPN

ChaosDB: Researchers Share Technical Details of Azure Flaw

SMS About Bank Fraud as a Pretext for Voice Phishing

Firms Will Struggle to Secure Extended Attack Surface in 2022

SquirrelWaffle Leverages Malspam to Deliver Qakbot, Cobalt Strike

RE:WIRED 2021: Jen Easterly Wants Hackers to Help US Cyber Defense

SolarWinds Vulnerability Exploited in First Stage of Clop Ransomware Attacks

Google scores big win as court blocks iPhone tracking lawsuit

The hunt for NOBELIUM, the most sophisticated nation-state attack in history

Defining the Hierarchy of Value in Cyber Intelligence

CISA and State and Local Partners Test Emergency Response Plans at Chevron Salt Lake Refinery

Boat biz breaches itself: Brittany Ferries 'fesses up to leaks caused by routine website update

4 Tips to Secure the OT Cybersecurity Budget You Require

Securing the Public: Who Should Take Charge?

Researcher Details Vulnerabilities Found in AWS API Gateway

Stor-a-File hit by ransomware after crooks target SolarWinds Serv-U FTP software

Hacking the Sony Playstation 5