Port 22

~ 23 Nov 2021 ~

How Sun Tzu's Wisdom Can Rewrite the Rules of Cybersecurity

UK Ministry of Justice secures HVAC systems 'protected' by passwordless Wi-Fi after Register tipoff

Threats to ICS and industrial enterprises in 2022

The dangers of connected healthcare: predictions for 2022

Privacy predictions 2022

Cyberthreats to financial organizations in 2022

Infosec bods: After more than a year, Sky gets round to squashing hijacking bug in 6m home broadband routers

Don't Help Cybercriminals Dash With Your Customers' Cash This Black Friday

What Avengers Movies Can Teach Us About Cybersecurity

Researchers Detail Privilege Escalation Bugs Reported in Oracle VirtualBox

More Stealthier Version of BrazKing Android Malware Spotted in the Wild

The Importance of IT Security in Your Merger Acquisition

Indian bank smacks down allegation it exposed 180 million customers' accounts

Pentagon Partners With GreyNoise to Investigate Internet Scans

Security Awareness Metrics What to Measure and How

SANS Addresses ICS/OT Cyber Defence

~ 22 Nov 2021 ~

GoDaddy Breach Exposes SSL Keys of Managed WordPress Hosting Customers

GoDaddy Data Breach Exposes Over 1 Million WordPress Customers' Data

CISA Urges Critical Infrastructure to Be Alert for Holiday Threats

Arrest in Ransom Your Employer Email Scheme

Bug Bounties Surge as Firms Compete for Talent

SSL keys, sFTP passwords and more exposed after someone broke into GoDaddy Managed WordPress using 'compromised password'

10 Stocking Stuffers for Security Geeks

Is it OK to Take Your CEO Offline to Protect the Network?

How to investigate service provider trust chains in the cloud

Ecommerce platforms (cough, Magento) need patching before Black Friday, warns UK's National Cyber Security Centre

Devious Tardigrade Malware Hits Biomanufacturing Facilities

Why the 'Basement Hacker' Stereotype Is Wrong and Dangerous

Crypto Means Cryptography, not Cryptocurrency

Turbine maker Vestas Wind Systems admits to cyber incident, refuses to confirm if ransomware is at play

Nigeria's central bank digital currency is 'same Naira, more possibilities' if you count government snooping

What to do if you receive a data breach notice

Black Friday 2021: How to Have a Scam-Free Shopping Day

A tiny typo in an automated email to thousands of customers turns out to be a big problem for legal

After four bans, TikTok finally passes the Pakistan challenge

New Golang-based Linux Malware Targeting eCommerce Websites

Amazon India execs charged after sellers allegedly use site to smuggle marijuana

Hackers Exploiting ProxyLogon and ProxyShell Flaws in Spam Campaigns

Shopping Safely Online over the Holidays

~ 21 Nov 2021 ~

Facebook Postpones Plans for E2E Encryption in Messenger, Instagram Until 2023

~ 20 Nov 2021 ~

A Canadian Teen Was Arrested in a $36.5M SIM-Swap Heist

RedCurl Corporate Espionage Hackers Return With Updated Hacking Tools

North Korean Hackers Found Behind a Range of Credential Theft Campaigns

~ 19 Nov 2021 ~

US Banks Will Be Required to Report Cyberattacks Within 36 Hours

Friday Squid Blogging: Bigfin Squid Captured on Video

The Zelle Fraud Scam: How it Works, How to Fight Back

3 Takeaways from the Gartner Risk Management Summit

Join us at InfoSec Jupyterthon 2021

Week in security with Tony Anscombe

To Beat Ransomware, Apply Zero Trust to Servers Too

Zero Trust: An Answer to the Ransomware Menace?

New Rowhammer Technique

Iranian Hackers Are Going After US Critical Infrastructure

CYBERWARCON Foreign influence operations grow up

Locked Out of God Mode, Runners Hack Their Treadmills

US Indicts Iranian Nationals for Cyber-Enabled Election Interference

Defending critical infrastructure: The status quo isnt working

11 Malicious PyPI Python Libraries Caught Stealing Discord Tokens and Installing Shells

U.S. Charged 2 Iranian Hackers for Threatening Voters During 2020 Presidential Election

Search CT Logs for Misconfigured SSL Certificates

Web trust dies in darkness: Hidden Certificate Authorities undermine public crypto infrastructure

FBI Issues Flash Alert on Actively Exploited FatPipe VPN Zero-Day Bug

A Simple 5-Step Framework to Minimize the Risk of a Data Breach

Consequence-Driven ICS Risk Management

~ 18 Nov 2021 ~

Cloud Security Startup Lacework Gets a Boost With New $1.3B Funding