Port 22

~ 25 Oct 2021 ~

Facebook sues scraper who sold 178 million phone numbers and user IDs

NOBELIUM targeting delegated administrative privileges to facilitate broader attacks

New Attack Let Attacker Collect and Spoof Browser's Digital Fingerprints

Hardware-grade enterprise authentication without hardware: new SIM security solution for IAM

Cleanup on aisle C: Tesco app back online after attack led to shopping app outages

Microsoft Warns of Continued Supply-Chain Attacks by the Nobelium Hacker Group

Hackers Exploited Popular BillQuick Billing Software to Deploy Ransomware

Ultimate Guide to Leveraging AWS Security Hub and AWS Cong to meet SOC 2 Requirements

~ 24 Oct 2021 ~

NYT Journalist Repeatedly Hacked with Pegasus after Reporting on Saudi Arabia

New York Times: I Was Hacked. The Spyware Used Against Me Makes Us All Vulnerable.

11 Security Settings You Should Know About in Windows 11

Breaking the News: New York Times Journalist Ben Hubbard Hacked with Pegasus after Reporting on Previous Hacking Attempts

~ 23 Oct 2021 ~

Ransomware Rise Pushes Organizations to Prepare for Attack

International Operation Knocks Notorious REvil Group Offline

Microsoft Warns of TodayZoo Phishing Kit Used in Extensive Credential Stealing Attacks

Feds Reportedly Hacked REvil Ransomware Group and Forced it Offline

~ 22 Oct 2021 ~

Popular NPM Package Hijacked to Publish Crypto-mining Malware

Friday Squid Blogging: Squid Eating Maine Shrimp

aDolus Raises $2.5M to Secure Critical Infrastructure and Grow Sales and Marketing Team

'TodayZoo' Phishing Kit Cobbled Together From Other Malware

Better late than never: Microsoft rolls out a public preview of E2EE in Teams calls

7 Ways to Lock Down Enterprise Printers

What Does Better Insider Risk Management Look Like?

Recycled Cobalt Strike key pairs show many crooks are using same cloned installation

Consultation on Draft Guidance for Police Services Privacy Obligations on the Use of Facial Recognition Technology

Week in security with Tony Anscombe

Week in security with Tony Anscombe

What Squid Game Teaches Us About Cybersecurity

Nation-State Attacker of Telecommunications Networks

New Sex Toy Standards Let Some Sensitive Details Slide

Unhappy customers and their own tricks used against them, REvil ransomware gang reportedly pulled offline by 'multi-country' operations

Whats lurking in the shadows? How to manage the security risks of shadowIT

Whats lurking in the shadows? How to manage the security risks of shadowIT

'Lone Wolf' Hacker Group Targeting Afghanistan and India with Commodity RATs

How your phone, laptop, or watch can be tracked by their Bluetooth transmissions

Hackers Set Up Fake Company to Get IT Experts to Launch Ransomware Attacks

YouTubers fell for shady 'sponsors' who seized, then sold, accounts

Researchers Discover Microsoft-Signed FiveSys Rootkit in the Wild

~ 21 Oct 2021 ~

Google Buckles Down on Android Enterprise Security

Malware Abuses Core Features of Discord

Cybrary Launches New Partnership with Check Point Software to Make Cybersecurity Training Accessible to All

Security Teams Still Favor Prevention Over Detection

Akamai Technologies Completes Acquisition of Guardicore to Extend Its Zero Trust Solutions to Help Stop Ransomware

Plurilock to Acquire Assets of CloudCodes Software

Invicti Security Announces $625 Million Growth Investment Led by Summit Partners

Nearly Three-Quarters of Organizations Victimized by DNS Attacks in Past 12 Months

Cohesity Announces Disaster Recovery as a Service, Providing Automated Disaster Recovery

Cohesity Announces Disaster Recovery as a Service, Providing Automated Disaster Recovery

Why Should My Organization Consider XDR?

Microsoft Launches Security Program for Nonprofits

How Microsoft is partnering with vendors to provide Zero Trust solutions

Defenders wantedbuilding the new cybersecurity professionals

Macs Still Targeted Mostly With Adware, Less With Malware

We regret to inform you there's an RCE vuln in old version of WinRAR. Yes, the file decompression utility

Franken-phish: TodayZoo built from other phishing kits

How Psychology Can Save Your Cybersecurity Awareness Training Program

Problems with Multifactor Authentication

Before and After a Pen Test: Steps to Get Through It

B. Braun Infusomat Space Large Volume Pump

ICONICS GENESIS64 and Mitsubishi Electric MC Works64

Delta Electronics DIALink

ICONICS GENESIS64 and Mitsubishi Electric MC Works64 OPC UA

Cybersecurity careers: What to know and how to get started

Cybersecurity careers: What to know and how to get started

Research finds consumer-grade IoT devices showing up... on corporate networks