Port 22

~ 1 Jul 2020 ~

Its happened again: AT&T sued for allegedly transferring victim's number to thieves in $1.9m cryptocoin heist

Becoming an All-Around Defender: Beware of Flying Baby Syndrome

~ 30 Jun 2020 ~

Living on a prayer? Netgear not quite halfway there with patches for 28 out of 79 vulnerable router models

Ripple20 Threatens Increasingly Connected Medical Devices

NEC insists its face-recog training dataset isn't biased, but refuses to share details of Neoface system with UK court

DDoS Attacks Jump 542% from Q4 2019 to Q1 2020

Android Apps Stealing Facebook Credentials

COVID-19 Breach Bubble Waiting to Pop?

DDoS and dingoes: Australia to bolster cyber-defences with 500 hackers amid China spat

Delta Industrial Automation DOPSoft

Delta Industrial Automation DOPSoft

Mitsubishi Electric Factory Automation Engineering Software Products

Mitsubishi Electric Factory Automation Engineering Software Products

3 Years After NotPetya, Many Organizations Still in Danger of Similar Attacks

COVID19 contact tracing technology panacea or privacy nightmare?

Remember when we warned in February Apple will crackdown on long-life HTTPS certs? It's happening Chrome, Firefox ready to join in, too

Advanced StrongPity Hackers Target Syria and Turkey with Retooled Spyware

NewsBites Drilldown for the Week Ending 26 June 2020

~ 29 Jun 2020 ~

University of California SF Pays Ransom After Medical Servers Hit

Russian Cybercriminal Behind CardPlanet Sentenced to 9 Years

University of California San Francisco pays ransomware gang $1.14m as BBC publishes 'dark web negotiations'

iPhone Apps Stealing Clipboard Data

Files Stolen from 945 Websites Discovered on Dark Web

Yes, Prime Minister, rewrite the Computer Misuse Act: Brit infosec outfits urge reform

Remote access at risk: Pandemic pulls more cybercrooks into the bruteforcing game

CyberX, CyberX, does whatever a CyberX does. Locks IoT, machines too, Microsoft got it so you will to

Russian Hacker Gets 9-Year Jail for Running Online Shop of Stolen Credit Cards

e-Commerce Site Hackers Now Hiding Credit Card Stealer Inside Image Metadata

~ 28 Jun 2020 ~

How to Get Safari's New Privacy Features in Chrome and Firefox

~ 27 Jun 2020 ~

Russian Cybercrime Boss Burkov Gets 9 Years

Is It Legal for Cops to Force You to Unlock Your Phone?

Julian Assange Faces New Conspiracy Allegations

Macs, iPhones, iPads to get encrypted DNS how'd you like them Apples?

~ 26 Jun 2020 ~

Let's roll the 3d6 dice on today's security drama: Ah, 15, that's LG allegedly hacked, source code stolen by Maze ransomware gang

Friday Squid Blogging: Fishing for Jumbo Squid

Citizen Lab Fellowship: Surveillance, Digital Security, and Race

Tune in and watch live: Email encryption doesnt have to be an all-or-nothing deal

UK police use of facial-recognition tech is lawful, no need to question us, cops' lawyer tells Court of Appeal

Week in security with Tony Anscombe

The Unintended Harms of Cybersecurity

US Local Government Services Targeted by New Magecart Credit Card Skimming Attack

An Embattled Group of Leakers Picks Up the WikiLeaks Mantle

SOC Wins & Losses

What is a password manager and why is it useful?

When one open-source package riddled with vulns pulls in dozens of others, what's a dev to do?

'Satori' IoT DDoS Botnet Operator Sentenced to 13 Months in Prison

Talk about the fox guarding the hen house. Comcast to handle DNS-over-HTTPS for Firefox-using subscribers

~ 25 Jun 2020 ~

New Charges, Sentencing in Satori IoT Botnet Conspiracy

US govt: Julian Assange tried to recruit hacker to steal hush-hush dirt and we should know the hacker was an informant

7 Tips for Effective Deception

Honeypot behind sold-off IP subnet shows Cyberbunker biz hosted all kinds of filth, says SANS Institute

Facial recognition technology banned in another US city

Contact Tracing & Threat Intel: Broken Tools & Processes

Analyzing IoT Security Best Practices

How Thousands of Misplaced Emails Took Over This Engineer's Inbox

Philips Ultrasound Systems

Philips Ultrasound Systems

ENTTEC Lighting Controllers

ENTTEC Lighting Controllers

Rockwell FactoryTalk Services Platform XXE

Rockwell FactoryTalk Services Platform XXE

There are DDoS attacks, then there's this 809 million packet-per-second tsunami Akamai says it just caught

Rockwell FactoryTalk View SE

Rockwell FactoryTalk View SE

Lucifer Malware Aims to Become Broad Platform for Attacks