Port 22

~ 25 Jun 2021 ~

Week in security with Tony Anscombe

High-Level FIN7 Member Sentenced to 7 Years in Prison

What are the odds someone will find and exploit this? Nice one you just released an insecure app

Who would cross the Bridge of Death? Answer me these questions three! Oh and you'll need two-factor authentication

Google Extends Support for Tracking Party Cookies Until 2023

Watch Out! Zyxel Firewalls and VPNs Under Active Cyberattack

Crackonosh virus mined $2 million of Monero from 222,000 hacked computers

FIN7 Supervisor Gets 7-Year Jail Term for Stealing Millions of Credit Cards

~ 24 Jun 2021 ~

Clop Gang Partners Laundered $500 Million in Ransomware Payments

You won't want that Linux bling if it comes from Pling: Marketplace platform has critical vulnerabilities

Would-be password-killer FIDO Alliance aims to boost uptake with new UX guidelines

NFC Flaws Let Researchers Hack ATMs by Waving a Phone

D3FEND Framework Seeks to Lay Foundation for Cyber Defense

Romance in 2021: Using creepware to keep tabs on your partner or ex. Aww

Gaming industry under siege from cyberattacks during pandemic

Report picks holes in the Linux kernel release signing process

Tulsa Officials Warn Ransomware Attackers Leaked City Files

Banning Surveillance-Based Advertising

Google pushes bug databases to get on the same page for open-source security

UK watchdog fines biz 130k for 90,000+ direct marketing calls to folk who had opted out

Philips Interoperability Solution XDS

Malicious spam campaigns delivering banking Trojans

FATEK WinProladder

A Well-Meaning Feature Leaves Millions of Dell PCs Vulnerable

Fashion firm French Connection says 'FCUK' as REvil-linked breach sees company data stolen

BIOS Disconnect: New High-Severity Bugs Affect 128 Dell PC and Tablet Models

Reduce Business Risk By Fixing 3 Critical Endpoint-to-Cloud Security Requirements

One-Click Exploit Could Have Let Attackers Hijack Any Atlassian Account

Critical Auth Bypass Bug Affects VMware Carbon Black App Control

NEW DFIR COURSE - FOR608: Enterprise-Class Incident Response & Threat Hunting Coming in August

6 Reasons You Dont Want to Miss SANS DFIR Summit & Training 2021

~ 23 Jun 2021 ~

Three things that have vanished: $3.6bn in Bitcoin, a crypto investment biz, and the two brothers who ran it

Antivirus Pioneer John McAfee Found Dead in Spanish Jail

John McAfee Dies in Spanish Prison After Extradition Order

John McAfee dead: Antivirus tycoon killed himself in prison after court OK'd extradition, says lawyer

John McAfee dead: Antivirus tycoon found lifeless in prison after court OKs extradition

French Spyware Executives Are Indicted for Aiding Torture

VMs Help Ransomware Attackers Evade Detection, But It's Uncommon

Brave launches its own, privacyfocused search engine

Microsoft Tracks New BazaCall Malware Campaign

Boffins promise protection and perfect performance with new ZeR, No-FAT memory safety techniques

When Will Cybersecurity Operations Adopt the Peter Parker Principle?

How Cyber Sleuths Cracked an ATM Shimmer Gang

How to confuse antimalware neural networks. Adversarial attacks and protection

Mollitiam Industries is the Newest Cyberweapons Arms Manufacturer

How to tell if a website is safe

Pakistan-linked hackers targeted Indian power company with ReverseRat

[Whitepaper] Automate Your Security with Cynet to Protect from Ransomware

Patch Tor Browser Bug to Prevent Tracking of Your Online Activities

Sure looks like someone's pirating the REvil ransomware, tweaking the binary in a hex editor for their own crimes

~ 22 Jun 2021 ~

SEC still digging into SolarWinds fallout, nudges undeclared victims

SonicWall Left a VPN Flaw Partially Unpatched Amidst 0-Day Attacks

'Set it and forget it' attitude to open-source software has become a major security problem, says Veracode

There's no 'Skype' in Teams: Microsoft lets signing key for its Debian Skype repository slip gently into the night

Despite Heightened Cyber-Risks, Few Security Leaders Report to CEO

Strategies, tools, and frameworks for building an effective threat intelligence team

Identity Eclipses Malware Detection at RSAC Startup Competition

All the Ways Amazon Tracks Youand How to Stop It

Zephyr OS Bluetooth vulnerabilities left smart devices open to attack

Unpatched Supply-Chain Flaw Affects 'Pling Store' Platforms for Linux Users

Apple Will Offer Onion Routing for iCloud/Safari Users

MI5 still risks breaking the law on surveillance data through poor controls years after it was first warned

Advantech WebAccess HMI Designer

CODESYS V2 web server

CODESYS Control V2 communication