Port 22

~ 5 Jul 2021 ~

Stealing Xbox Codes

Getting Started with Security Testing: A Practical Guide for Startups

DiDi, Chinas Uber analog, booted from local app stores for data naughtiness

IT for service providers biz Kaseya defers decision about SaaS restoration following supply chain attack

TrickBot Botnet Found Deploying A New Ransomware Called Diavol

~ 4 Jul 2021 ~

Microsoft Urges Azure Users to Update PowerShell to Patch RCE Flaw

How REvil Ransomware Took Out Thousands of Business at Once

REvil Used 0-Day in Kaseya Ransomware Attack, Demands $70 Million Ransom

~ 3 Jul 2021 ~

Kaseya supplychain attack: What we know so far

IT management biz Kaseya pwned by miscreants to infect businesses with ransomware

Do Not Stare Into the Crypto Orb

Android Apps with 5.8 million Installs Caught Stealing Users' Facebook Passwords

Kaseya Supply-Chain Attack Hits Nearly 40 Service Providers With REvil Ransomware

Learn to Code Get 2021 Master Bundle of 13 Online Courses @ 99% OFF

~ 2 Jul 2021 ~

A New Kind of Ransomware Tsunami Hits Hundreds of Companies

Friday Squid Blogging: Best Squid-Related Headline

Digital rights org claims cyberattacks against Filipino media outlets come from government and army

Microsoft tells US lawmakers cloud has changed the game on data privacy, gets 10 info demands <i>a day</i> from cops

Another 0-Day Looms for Many Western Digital Users

Week in security with Tony Anscombe

Twitter now lets users set security keys as the only 2FA method

The PrintNightmare continues: Microsoft confirms presence of vulnerable code in all versions of Windows

SOC Investment Improves Detection and Response Times, Data Shows

More Russian Hacking

Brit firm fined 200k for banging on about missold PPI in 11.4 million nuisance calls

New Mirai-Inspired Botnet Could Be Using Your KGUARD DVRs in Cyber Attacks

Mongolian Certificate Authority Hacked to Distribute Backdoored CA Software

New Google Scorecards Tool Scans Open-Source Software for More Security Risks

Recommended Sources for Ransomware Information

~ 1 Jul 2021 ~

PrintNightmare: Kicking users from Pre-Windows 2000 legacy group may thwart domain controller exploitation

NSA, FBI Reveal Hacking Methods Used by Russian Military Hackers

Microsoft and Eclypsium lock horns over Dell SupportAssist flaws on secured-core PCs

Intuit to Share Payroll Data from 1.4M Small Businesses With Equifax

Microsoft warns of serious vulnerabilities in Netgear's DGN2200v1 router

Microsoft warns of serious vulnerabilities in Netgear's DGN220)v1 router

Fancy Bear Is Trying to Brute-Force Hundreds of Networks

Insurance and Ransomware

Cyber insurance model is broken, consider banning ransomware payments, think tank suggests

Cyber insurance model is broken and ransomware payments should be banned, says think tank

WhiteHat Security Rebrands as NTT Application Security

Do cybercriminals play cyber games in quarantine? A look one year later

Windows 11's Security Push Leaves Scores of PCs Behind

Johnson Controls Facility Explorer

Sensormatic Electronics C-CURE 9000

Delta Electronics DOPSoft

Mitsubishi Electric Air Conditioning System

Mitsubishi Electric Air Conditioning Systems

All Bachmann M1 System Processor Modules

Stop Playing Catchup: Move From Reactive to Proactive to Defeat Cyber Threats

IndigoZebra APT Hacking Campaign Targets the Afghan Government

Rethinking Application Security in the API-First Era

Facebook Sues 4 Vietnamese for Hacking Accounts and $36 Million Ad Fraud

3 Steps to Strengthen Your Ransomware Defenses

The Summit for You on Managing Human Risk SANS 2021 Security Awareness Summit

~ 30 Jun 2021 ~

Microsoft Discloses Critical Bugs Allowing Takeover of NETGEAR Routers

Hackers Wanted in the U.S. for Spreading Gozi Virus Arrested in Colombia

Microsoft hooks up with MITRE to map Azure's ATT&amp;CK surface for 'proactive security'

We Infiltrated a Counterfeit Check Ring! Now What?

Global police shut down VPN service favored by cybercriminals

International law enforcement op nukes Russian-language DoubleVPN service allegedly favoured by cybercriminals

Microsoft faces up to an old foe with out-of-band patch for PDF weirdness

Microsoft finds new NETGEAR firmware vulnerabilities that could lead to identity theft and full system compromise

Leaked print spooler exploit lets Windows users remotely execute code as system on your domain controller

Intl. Law Enforcement Operation Takes Down DoubleVPN

8-month suspended sentence for script kiddie who DDoS'd Labour candidate in runup to 2019 UK general election