Port 22

~ 6 Aug 2021 ~

IIStealer: A serverside threat to ecommerce transactions

Anatomy of native IIS malware

Using Master Faces to Bypass Face-Recognition Authenticating Systems

Researchers Call for 'CVE' Approach for Cloud Vulnerabilities

Apple to Scan Every Device for Child Abuse Content But Experts Fear for Privacy

South Korea to test grenade-launching drones

Microsoft wonders if disabling just-in-time compilation of JavaScript improves browser security

New Amazon Kindle Bug Could've Let Attackers Hijack Your eBook Reader

USA enlists Big Tech to help it develop and execute cyber security plans

India's Koo, a Twitter-like Service, Found Vulnerable to Critical Worm Attacks

US 'dropped the ball' on security by going it alone claims Huawei US CSO

VMware Issues Patches to Fix Critical Bugs Affecting Multiple Products

~ 5 Aug 2021 ~

Apple is about to start scanning iPhone users' devices for banned content, warns professor

Messaging Apps Have an Eavesdropping Problem

Apple Walks a Privacy Tightrope to Spot Child Abuse in iCloud

CISA Launches JCDC, the Joint Cyber Defense Collaborative

Incident Responders Explore Microsoft 365 Attacks in the Wild

Sharing the first SimuLand dataset to expedite research and learn about adversary tradecraft

Is your personal information being abused?

Got a cheap Cisco router in your home office? If it's one of these, there's an exposed RCE hole you need to plug

Ransomware Gangs and the Name Game Distraction

A New Approach to Securing Authentication Systems' Core Secrets

Zoom Lied about End-to-End Encryption

Das tut mir leid! Germany's ruling party sorry for calling cops on researcher after she outed canvassing app flaws

HCC Embedded InterNiche TCP/IP stack, NicheLite

FATEK Automation FvDesigner

mySCADA myPRO

Spam and phishing in Q2 2021

Advantech WebAccess SCADA

Why cloud security is the key to unlocking value from hybrid working

Not all authentication is created equal and thats a good thing

Salesforce Release Updates A Cautionary Tale for Security Teams

A Wide Range of Cyber Attacks Leveraging Prometheus TDS Malware Service

Unpatched Security Flaws Expose Mitsubishi Safety PLCs to Remote Attacks

A Visual Summary of SANS Security Awareness Summit 2021

~ 4 Aug 2021 ~

Cisco Issues Critical Security Patches to Fix Small Business VPN Router Bugs

Spotting brand impersonation with Swin transformers and Siamese neural networks

Watch a Hacker Hijack a Hotel Room's Lights, Fans, and Beds

Worried your data protection strategy is dated? Dont let a ransomware infection prove you right

SolarWinds urges US judge to toss out crap infosec sueball: We got pwned by actual Russia, give us a break

Black Hat 2021 nonvirtual edition

Several Malware Families Targeting IIS Web Servers With Malicious Modules

Google: Linux kernel and its toolchains are underinvested by at least 100 engineers

UK data watchdog sees its approach to government health tech during COVID-19 outbreak as 'pragmatic'

Legacy EDR. Yes, its a thing

Russian Federal Agencies Were Attacked With Chinese Webdav-O Virus

New Chinese Spyware Being Used in Widespread Cyber Espionage Attacks

~ 3 Aug 2021 ~

Critical Flaws Affect Embedded TCP/IP Stack Widely Used in Industrial Control Devices

Citizen's New Service Helps Paying Users Summon the Cops

Russia tells UN it wants vast expansion of cybercrime offenses, plus network backdoors, online censorship

Do you have a grip on the lifecycle security of your AWS-deployed applications?

How to manage a side-by-side transition from your traditional SIEM to Azure Sentinel

UK's Ministry of Defence coughs up bug bounties for public-facing web pentesting

France Cracked Down on Googles Ad Tech. Whats Next?

Paragon: Yet Another Cyberweapons Arms Manufacturer

Shopping for execs: ID management biz Okta poaches Google's veep of engineering to run product dev activities

Swisslog Healthcare Translogic PTS

Chinese Hackers Target Major Southeast Asian Telecom Companies

Research finds attack groups working for 'Chinese state interests' lurking in SE Asian telco networks since 2017

~ 2 Aug 2021 ~

Credit-card-stealing, backdoored packages found in Python's PyPI library hub

Nuisance call-blocking firm fined 170,000 for making almost 200,000 nuisance calls

New Normal Demands New Security Leadership Structure

The European Space Agency Launches Hackable Satellite

PwnedPiper vulns have potential to turn Swisslog's PTS hospital products into Swiss cheese, says Armis

Hospitals Still Use Pneumatic Tubesand They Can Be Hacked