Port 22

~ 8 Jun 2021 ~

Phished Account Credentials Mostly Verified in Hours

Microsoft Patches 6 Zero-Days Under Active Attack

PuzzleMaker attacks with Chrome zero-day exploit chain

How an Obscure Company Took Down Big Chunks of the Internet

Hundreds of suspected criminals arrested after being tricked into using FBIrun chat app

Cryptography whizz Phil Zimmermann looks back at 30 years of Pretty Good Privacy

FBI Issues Encrypted Devices to Capture Criminals

FBI Issued Encrypted Devices to Capture Criminals

Optimize security with Azure Firewall solution for Azure Sentinel

Microsoft CISO Shares Remote Work Obstacles & Lessons Learned

Siloscape malware targets Windows containers, breaks through to the underlying Kubernetes cluster

How to Turn Off Amazon Sidewalk

DoS vulns in 3 open-source MQTT message brokers could leave users literally locked out of their homes or offices

Johnson Controls Metasys

Open Design Alliance Drawings SDK

AVEVA InTouch

Schneider Electric IGSS

Schneider Electric Modicon X80

Thales Sentinel LDK Run-Time Environment

Siemens Mendix SAML Module

Siemens TIM 1531 IRC

Siemens Solid Edge

Siemens SIMATIC TIM libcurl

Vulnerabilities in Weapons Systems

Feds Secretly Ran a Fake Encrypted Chat App and Busted Over 800 Criminals

I think therefore IAM: It's not cool, it's not sexy, but it's one of the most important and difficult areas in modern IT

New UAF Vulnerability Affecting Microsoft Office to be Patched Today

Uncle Sam recovers 63.7 of 75 Bitcoins Colonial Pipeline paid to ransomware crew

Top 10 Privacy and Security Features Apple Announced at WWDC 2021

Australian cops, FBI created backdoored chat app, told crims it was secure then listened to 9,000 users' plots

U.S. Recovers $2.3 Million Ransom Paid to Colonial Pipeline Hackers

FBI drops subpoena to identify readers of USA Today article about shootout with agents

Everything Apple announced: Tor-like Safari anonymization. Cloaked iCloud addresses. Cloud CI/CD. And more

~ 7 Jun 2021 ~

Justice Dept. Claws Back $2.3M Paid by Colonial Pipeline to Ransomware Gang

Google, Facebook, Chaos Computer Club join forces to oppose German state spyware

US House Rep on cyber committees tweets Gmail password, PIN in Capitol riot lawsuit outrage

Ransomware Hit Another Pipeline Firmand 70GB of Data Leaked

First Known Malware Surfaces Targeting Windows Containers

DoJ Seizes $2.3M in Bitcoin Paid to Colonial Pipeline Attackers

Latvian Woman Charged for Role In Crafting Trickbot Malware

CISA Warns Criminals Seek to Exploit Critical VMware Bug

Cartoon Caption Winner: Road Trip

Remember Anonymous? It/they might be back, and it/they are angry with Elon Musk

Adventures in Contacting the Russian FSB

Cyber Athletes Compete to Form US Cyber Team

Gootkit: the cautious Trojan

We're right behind Computer Misuse Act reforms for busting ransomware gangs, says UK infosec industry

The Supreme Court Narrowed the CFAA

NortonLifeLock Criticized for New Cryptomining Feature

Hacking space: How to pwn a satellite

Shifting the focus from reactive to proactive, with human-led secure coding

Military infosec SNAFUs: What WhatsApp and bears in the woods can teach us

Researchers Discover First Known Malware Targeting Windows Containers

Hackers Breached Colonial Pipeline Using Compromised VPN Password

SANS 2021 Visibility Report

Latvian Woman Charged for Her Role in Creating Trickbot Banking Malware

~ 6 Jun 2021 ~

How to Protect Your Files From Ransomware

~ 5 Jun 2021 ~

The Safest Way to Store and Share Your Nudes

The FBIs Director Compares Ransomware Threat to 9/11

GitHub Updates Policy to Remove Exploit Code When Used in Active Attacks

Break Into Ethical Hacking With 18 Training Courses For Just $42.99

TikTok Quietly Updated Its Privacy Policy to Collect Users' Biometric Data

ALERT: Critical RCE Bug in VMware vCenter Server Under Active Attack

~ 4 Jun 2021 ~

Friday Squid Blogging: Squids in Space

Biden expands Chinese tech and military blocklist to 59 companies