Port 22

~ 26 Oct 2021 ~

Over 10 Million Android Users Targeted With Premium SMS Scam Apps

Malicious Firefox Add-ons Block Browser From Downloading Security Updates

OpenText Strengthens Ransomware Resilience

Forcepoint Completes Acquisition of Bitglass

Jumio Launches End-to-end Orchestration for its KYX Platform

~ 25 Oct 2021 ~

If you're using this hijacked NPM library anywhere in your software stack, read this

SolarWinds Attacker Targets Cloud Service Providers in New Supply Chain Threat

Industrial Goods & Services Tops Ransomware Targets in 2021

Who's In Your Wallet? Exploring Mobile Wallet Security

5 Ways CMMC Security Requirements May Impact Universities

Conti Ransom Gang Starts Selling Access to Victims

New York Times Journalist Hacked with NSO Spyware

Theres a wave of ransomware coming down the pipeline. What can you do about it?

Ransomware criminals have feelings too: BlackMatter abuse caused crims to shut down negotiation portal

Microsoft Digital Defense Report shares new insights on nation-state attacks

How We Can Narrow the Talent Shortage in Cybersecurity

SolarWinds attacker on the move: Russia's Nobelium crew has trebled attacks targeting MSPs, cloud resellers, says Microsoft

HIV Scotland fined 10,000 for BCC email blunder identifying names of virus-carriers' patient-advocates

Online harms dont need dangerous legislation, they need a spot of naval action

Facebook sues scraper who sold 178 million phone numbers and user IDs

NOBELIUM targeting delegated administrative privileges to facilitate broader attacks

New Attack Let Attacker Collect and Spoof Browser's Digital Fingerprints

Hardware-grade enterprise authentication without hardware: new SIM security solution for IAM

Cleanup on aisle C: Tesco app back online after attack led to shopping app outages

Microsoft Warns of Continued Supply-Chain Attacks by the Nobelium Hacker Group

Hackers Exploited Popular BillQuick Billing Software to Deploy Ransomware

Ultimate Guide to Leveraging AWS Security Hub and AWS Cong to meet SOC 2 Requirements

~ 24 Oct 2021 ~

NYT Journalist Repeatedly Hacked with Pegasus after Reporting on Saudi Arabia

New York Times: I Was Hacked. The Spyware Used Against Me Makes Us All Vulnerable.

11 Security Settings You Should Know About in Windows 11

Breaking the News: New York Times Journalist Ben Hubbard Hacked with Pegasus after Reporting on Previous Hacking Attempts

~ 23 Oct 2021 ~

Ransomware Rise Pushes Organizations to Prepare for Attack

International Operation Knocks Notorious REvil Group Offline

Microsoft Warns of TodayZoo Phishing Kit Used in Extensive Credential Stealing Attacks

Feds Reportedly Hacked REvil Ransomware Group and Forced it Offline

~ 22 Oct 2021 ~

Popular NPM Package Hijacked to Publish Crypto-mining Malware

Friday Squid Blogging: Squid Eating Maine Shrimp

aDolus Raises $2.5M to Secure Critical Infrastructure and Grow Sales and Marketing Team

'TodayZoo' Phishing Kit Cobbled Together From Other Malware

Better late than never: Microsoft rolls out a public preview of E2EE in Teams calls

7 Ways to Lock Down Enterprise Printers

What Does Better Insider Risk Management Look Like?

Recycled Cobalt Strike key pairs show many crooks are using same cloned installation

Consultation on Draft Guidance for Police Services Privacy Obligations on the Use of Facial Recognition Technology

Week in security with Tony Anscombe

Week in security with Tony Anscombe

What Squid Game Teaches Us About Cybersecurity

Nation-State Attacker of Telecommunications Networks

New Sex Toy Standards Let Some Sensitive Details Slide

Unhappy customers and their own tricks used against them, REvil ransomware gang reportedly pulled offline by 'multi-country' operations

Whats lurking in the shadows? How to manage the security risks of shadowIT

Whats lurking in the shadows? How to manage the security risks of shadowIT

'Lone Wolf' Hacker Group Targeting Afghanistan and India with Commodity RATs

How your phone, laptop, or watch can be tracked by their Bluetooth transmissions

Hackers Set Up Fake Company to Get IT Experts to Launch Ransomware Attacks

YouTubers fell for shady 'sponsors' who seized, then sold, accounts

Researchers Discover Microsoft-Signed FiveSys Rootkit in the Wild

~ 21 Oct 2021 ~

Google Buckles Down on Android Enterprise Security

Malware Abuses Core Features of Discord

Cybrary Launches New Partnership with Check Point Software to Make Cybersecurity Training Accessible to All

Security Teams Still Favor Prevention Over Detection

Akamai Technologies Completes Acquisition of Guardicore to Extend Its Zero Trust Solutions to Help Stop Ransomware

Plurilock to Acquire Assets of CloudCodes Software

Invicti Security Announces $625 Million Growth Investment Led by Summit Partners

Nearly Three-Quarters of Organizations Victimized by DNS Attacks in Past 12 Months