Port 22

~ 3 Aug 2021 ~

Shopping for execs: ID management biz Okta poaches Google's veep of engineering to run product dev activities

Swisslog Healthcare Translogic PTS

Chinese Hackers Target Major Southeast Asian Telecom Companies

Research finds attack groups working for 'Chinese state interests' lurking in SE Asian telco networks since 2017

~ 2 Aug 2021 ~

Credit-card-stealing, backdoored packages found in Python's PyPI library hub

Nuisance call-blocking firm fined 170,000 for making almost 200,000 nuisance calls

New Normal Demands New Security Leadership Structure

The European Space Agency Launches Hackable Satellite

PwnedPiper vulns have potential to turn Swisslog's PTS hospital products into Swiss cheese, says Armis

Hospitals Still Use Pneumatic Tubesand They Can Be Hacked

On course for a good hacking

Huawei to America: You're not taking cyber-security seriously until you let China vouch for us

Zoom agrees to pay subscribers $25 to put its security SNAFUs behind it

PwnedPiper PTS Security Flaws Threaten 80% of Hospitals in the U.S.

New APT Hacking Group Targets Microsoft IIS Servers with ASP.NET Exploits

PyPI Python Package Repository Patches Critical Supply Chain Flaw

Solarmarker InfoStealer Malware Once Again Making its Way Into the Wild

~ 1 Aug 2021 ~

A Guide to RCS, and Why It Makes Texting So Much Better

~ 31 Jul 2021 ~

The Top 30 Cybersecurity Bugs Include Plenty of Usual Suspects

Sysadmins: Why not simply verify there's no backdoor in every program you install, and thus avoid any cyber-drama?

~ 30 Jul 2021 ~

Friday Squid Blogging: Squid Skin Is Naturally Anti-microbial

I Am Parting With My Crypto Library

Here's 30 servers Russian intelligence uses to fling malware at the West, beams RiskIQ

Week in security with Tony Anscombe

The Privacy Battle That Apple Isnt Fighting

Storing Encrypted Photos in Googles Cloud

Watch out for these scams, targeting Amazons customers

Malware and Trojans, but there's only one horse the boss man wants to hear about

We can't believe people use browsers to manage their passwords, says maker of password management tools

Experts Uncover Several C&C Servers Linked to WellMess Malware

Several Malicious Typosquatted Python Libraries Found On PyPI Repository

A New Wiper Malware Was Behind Recent Cyberattack On Iranian Train System

~ 29 Jul 2021 ~

Phony Call Centers Tricking Users Into Installing Ransomware and Data-Stealers

When coin miners evolve, Part 2: Hunting down LemonDuck and LemonCat attacks

Leading cybersecurity agencies reveal list of most exploited vulnerabilities of the past 2 years

The Life Cycle of a Breached Database

Attack AI systems in Machine Learning Evasion Competition

Microsoft at Black Hat 2021: Sessions, bug bounty updates, product news, and more

Spam is Chipotle's secret ingredient: Marketing email hijacked to dish up malware

Upcoming Android privacy changes include ability to blank advertising ID, and 'safety section' in Play store

BazaCall: Phony call centers lead to exfiltration and ransomware

AirDropped Gun Photo Causes Terrorist Scare

Phantom Warships Are Courting Chaos in Conflict Zones

Hitachi ABB Power Grids eSOMS

Wibu-Systems CodeMeter Runtime

APT trends report Q2 2021

Tackling the insider threat to the new hybrid workplace

Hackers Exploit Microsoft Browser Bug to Deploy VBA Malware on Targeted PCs

Israeli authorities investigate NSO Group over Pegasus spyware abuse claims

Here's a list of the flaws Russia, China, Iran and pals exploit most often, say Five Eyes infosec agencies

'Woefully insufficient': Biden administration's assessment of critical infrastructure protection

Over 100 Taiwanese political figures' messages leaked outta LINE app

New Ransomware Gangs Haron and BlackMatter Emerge on Cybercrime Forums

Best Practices to Thwart Business Email Compromise (BEC) Attacks

New Android Malware Uses VNC to Spy and Steal Passwords from Victims

Top 30 Critical Security Vulnerabilities Most Exploited by Hackers

~ 28 Jul 2021 ~

Security breaches where working from home is involved are costlier, claims IBM report

Most Twitter users havent enabled 2FA yet, report reveals

Iranian state-backed hackers posed as flirty Scouser called Marcy to target workers in defence and aerospace

Zero Trust Adoption Report: How does your organization compare?

8 Security Tools to be Unveiled at Black Hat USA

Booking your next holiday? Watch out for these Airbnb scams

De-anonymization Story

DDoS attacks in Q2 2021

UK's National Cyber Security Centre needs its posh Westminster digs, says Cabinet Office, because of WannaCry