Port 22

~ 5 Aug 2021 ~

Incident Responders Explore Microsoft 365 Attacks in the Wild

Sharing the first SimuLand dataset to expedite research and learn about adversary tradecraft

Is your personal information being abused?

Got a cheap Cisco router in your home office? If it's one of these, there's an exposed RCE hole you need to plug

Ransomware Gangs and the Name Game Distraction

A New Approach to Securing Authentication Systems' Core Secrets

Zoom Lied about End-to-End Encryption

Das tut mir leid! Germany's ruling party sorry for calling cops on researcher after she outed canvassing app flaws

HCC Embedded InterNiche TCP/IP stack, NicheLite

FATEK Automation FvDesigner

mySCADA myPRO

Spam and phishing in Q2 2021

Advantech WebAccess SCADA

Why cloud security is the key to unlocking value from hybrid working

Not all authentication is created equal and thats a good thing

Salesforce Release Updates A Cautionary Tale for Security Teams

A Wide Range of Cyber Attacks Leveraging Prometheus TDS Malware Service

Unpatched Security Flaws Expose Mitsubishi Safety PLCs to Remote Attacks

A Visual Summary of SANS Security Awareness Summit 2021

~ 4 Aug 2021 ~

Cisco Issues Critical Security Patches to Fix Small Business VPN Router Bugs

Spotting brand impersonation with Swin transformers and Siamese neural networks

Watch a Hacker Hijack a Hotel Room's Lights, Fans, and Beds

Worried your data protection strategy is dated? Dont let a ransomware infection prove you right

SolarWinds urges US judge to toss out crap infosec sueball: We got pwned by actual Russia, give us a break

Black Hat 2021 nonvirtual edition

Several Malware Families Targeting IIS Web Servers With Malicious Modules

Google: Linux kernel and its toolchains are underinvested by at least 100 engineers

UK data watchdog sees its approach to government health tech during COVID-19 outbreak as 'pragmatic'

Legacy EDR. Yes, its a thing

Russian Federal Agencies Were Attacked With Chinese Webdav-O Virus

New Chinese Spyware Being Used in Widespread Cyber Espionage Attacks

~ 3 Aug 2021 ~

Critical Flaws Affect Embedded TCP/IP Stack Widely Used in Industrial Control Devices

Citizen's New Service Helps Paying Users Summon the Cops

Russia tells UN it wants vast expansion of cybercrime offenses, plus network backdoors, online censorship

Do you have a grip on the lifecycle security of your AWS-deployed applications?

How to manage a side-by-side transition from your traditional SIEM to Azure Sentinel

UK's Ministry of Defence coughs up bug bounties for public-facing web pentesting

France Cracked Down on Googles Ad Tech. Whats Next?

Paragon: Yet Another Cyberweapons Arms Manufacturer

Shopping for execs: ID management biz Okta poaches Google's veep of engineering to run product dev activities

Swisslog Healthcare Translogic PTS

Chinese Hackers Target Major Southeast Asian Telecom Companies

Research finds attack groups working for 'Chinese state interests' lurking in SE Asian telco networks since 2017

~ 2 Aug 2021 ~

Credit-card-stealing, backdoored packages found in Python's PyPI library hub

Nuisance call-blocking firm fined 170,000 for making almost 200,000 nuisance calls

New Normal Demands New Security Leadership Structure

The European Space Agency Launches Hackable Satellite

PwnedPiper vulns have potential to turn Swisslog's PTS hospital products into Swiss cheese, says Armis

Hospitals Still Use Pneumatic Tubesand They Can Be Hacked

On course for a good hacking

Huawei to America: You're not taking cyber-security seriously until you let China vouch for us

Zoom agrees to pay subscribers $25 to put its security SNAFUs behind it

PwnedPiper PTS Security Flaws Threaten 80% of Hospitals in the U.S.

New APT Hacking Group Targets Microsoft IIS Servers with ASP.NET Exploits

PyPI Python Package Repository Patches Critical Supply Chain Flaw

Solarmarker InfoStealer Malware Once Again Making its Way Into the Wild

~ 1 Aug 2021 ~

A Guide to RCS, and Why It Makes Texting So Much Better

~ 31 Jul 2021 ~

The Top 30 Cybersecurity Bugs Include Plenty of Usual Suspects

Sysadmins: Why not simply verify there's no backdoor in every program you install, and thus avoid any cyber-drama?

~ 30 Jul 2021 ~

Friday Squid Blogging: Squid Skin Is Naturally Anti-microbial

I Am Parting With My Crypto Library

Here's 30 servers Russian intelligence uses to fling malware at the West, beams RiskIQ

Week in security with Tony Anscombe

The Privacy Battle That Apple Isnt Fighting

Storing Encrypted Photos in Googles Cloud