Port 22

~ 23 Nov 2021 ~

Security Awareness Metrics What to Measure and How

~ 22 Nov 2021 ~

GoDaddy Breach Exposes SSL Keys of Managed WordPress Hosting Customers

GoDaddy Data Breach Exposes Over 1 Million WordPress Customers' Data

CISA Urges Critical Infrastructure to Be Alert for Holiday Threats

Arrest in Ransom Your Employer Email Scheme

Bug Bounties Surge as Firms Compete for Talent

SSL keys, sFTP passwords and more exposed after someone broke into GoDaddy Managed WordPress using 'compromised password'

10 Stocking Stuffers for Security Geeks

Is it OK to Take Your CEO Offline to Protect the Network?

How to investigate service provider trust chains in the cloud

Ecommerce platforms (cough, Magento) need patching before Black Friday, warns UK's National Cyber Security Centre

Devious Tardigrade Malware Hits Biomanufacturing Facilities

Why the 'Basement Hacker' Stereotype Is Wrong and Dangerous

Crypto Means Cryptography, not Cryptocurrency

Turbine maker Vestas Wind Systems admits to cyber incident, refuses to confirm if ransomware is at play

Nigeria's central bank digital currency is 'same Naira, more possibilities' if you count government snooping

What to do if you receive a data breach notice

Black Friday 2021: How to Have a Scam-Free Shopping Day

A tiny typo in an automated email to thousands of customers turns out to be a big problem for legal

After four bans, TikTok finally passes the Pakistan challenge

New Golang-based Linux Malware Targeting eCommerce Websites

Amazon India execs charged after sellers allegedly use site to smuggle marijuana

Hackers Exploiting ProxyLogon and ProxyShell Flaws in Spam Campaigns

Shopping Safely Online over the Holidays

~ 21 Nov 2021 ~

Facebook Postpones Plans for E2E Encryption in Messenger, Instagram Until 2023

~ 20 Nov 2021 ~

A Canadian Teen Was Arrested in a $36.5M SIM-Swap Heist

RedCurl Corporate Espionage Hackers Return With Updated Hacking Tools

North Korean Hackers Found Behind a Range of Credential Theft Campaigns

~ 19 Nov 2021 ~

US Banks Will Be Required to Report Cyberattacks Within 36 Hours

Friday Squid Blogging: Bigfin Squid Captured on Video

The Zelle Fraud Scam: How it Works, How to Fight Back

3 Takeaways from the Gartner Risk Management Summit

Join us at InfoSec Jupyterthon 2021

Week in security with Tony Anscombe

To Beat Ransomware, Apply Zero Trust to Servers Too

Zero Trust: An Answer to the Ransomware Menace?

New Rowhammer Technique

Iranian Hackers Are Going After US Critical Infrastructure

CYBERWARCON Foreign influence operations grow up

Locked Out of God Mode, Runners Hack Their Treadmills

US Indicts Iranian Nationals for Cyber-Enabled Election Interference

Defending critical infrastructure: The status quo isnt working

11 Malicious PyPI Python Libraries Caught Stealing Discord Tokens and Installing Shells

U.S. Charged 2 Iranian Hackers for Threatening Voters During 2020 Presidential Election

Search CT Logs for Misconfigured SSL Certificates

Web trust dies in darkness: Hidden Certificate Authorities undermine public crypto infrastructure

FBI Issues Flash Alert on Actively Exploited FatPipe VPN Zero-Day Bug

A Simple 5-Step Framework to Minimize the Risk of a Data Breach

Consequence-Driven ICS Risk Management

~ 18 Nov 2021 ~

Cloud Security Startup Lacework Gets a Boost With New $1.3B Funding

Canadian teen nabbed in $36.5M crypto heist possibly the biggest haul yet by a single individual

Microsoft Exchange Server Flaws Now Exploited for BEC Attacks

Experts Expose Secrets of Conti Ransomware Group That Made 25 Million from Victims

Boffins find way to use a standard smartphone to find hidden spy cams

Two Iranian Nationals Charged for Cyber-Enabled Disinformation and Threat Campaign Designed to Influence the 2020 US Presidential Election

How Iran Tried to Undermine the 2020 US Presidential Election

New Side Channel Attacks Re-Enable Serious DNS Cache Poisoning Attacks

North Korean Hacking Group Targets Diplomats, Forgoes Malware

California Pizza Kitchen Suffers Data Breach

Thousands of Firefox users accidentally commit login cookies on GitHub

Addressing the Low-Code Security Elephant in the Room

Microsoft named a Leader in IDC MarketScape for Modern Endpoint Security for Enterprise and Small and Midsize Businesses

Microsoft unpacks comprehensive security at Gartner and Forrester virtual events

US Government declassifies data to foster wouldbe defenders

Iranian targeting of IT sector on the rise