Port 22

~ 10 Jun 2021 ~

WannaCry / WannaCrypt Ransomware Resources

ALPACA gnaws through TLS protection to snarf cookies and steal data

~ 9 Jun 2021 ~

Huawei flings open the doors of its third privacy and security transparency centre

Beef Supplier JBS Paid Hackers $11 Million Ransom After Cyberattack

New Chrome 0-Day Bug Under Active Attacks Update Your Browser ASAP!

Risk and reward: Nefilim ransomware gang mainly targets fewer, richer companies and that strategy is paying off, warns Trend Micro

Required MFA Is Not Sufficient for Strong Security: Report

PrivacyMic looks to keep your home smart without Google, Alexa, Siri and pals listening in

2021 Information Controls Fellowship Program

CISA Addresses Rise in Ransomware Threatening OT Assets

'I put the interests of the country first': Colonial Pipeline CEO on why oil biz paid off ransomware crooks

CRSP: The emergency team fighting cyber attacks beside customers

Mysterious Gelsemium APT was behind February compromise of NoxPlayer, says ESET

Intel's latest patch set plugs some serious holes in CPU, Bluetooth, server, and ironically security lines

Gelsemium: When threat actors go gardening

Information Flows and Democracy

Ransomware Is Not the Problem

New TLS Attack Lets Attackers Launch Cross-Protocol Attacks Against Secure Sites

Security researcher says attacks on Russian government have Chinese fingerprints and typos, too

Crypto-Mining Attacks Targeting Kubernetes Clusters via Kubeflow Instances

EBook Creating a Large Company Security Stack on a Lean Company Budget

Critical Vulnerability Recaps

Extra urgency in June's Patch Tuesday: Microsoft warns six bugs are being exploited

~ 8 Jun 2021 ~

Update Your Windows Computers to Patch 6 New In-the-Wind Zero-Day Bugs

FBI paid renegade developer $180k for backdoored AN0M chat app that brought down drug underworld

Microsoft Patches Six Zero-Day Security Holes

Phished Account Credentials Mostly Verified in Hours

Microsoft Patches 6 Zero-Days Under Active Attack

PuzzleMaker attacks with Chrome zero-day exploit chain

How an Obscure Company Took Down Big Chunks of the Internet

Hundreds of suspected criminals arrested after being tricked into using FBIrun chat app

Cryptography whizz Phil Zimmermann looks back at 30 years of Pretty Good Privacy

FBI Issues Encrypted Devices to Capture Criminals

FBI Issued Encrypted Devices to Capture Criminals

Optimize security with Azure Firewall solution for Azure Sentinel

Microsoft CISO Shares Remote Work Obstacles & Lessons Learned

Siloscape malware targets Windows containers, breaks through to the underlying Kubernetes cluster

How to Turn Off Amazon Sidewalk

DoS vulns in 3 open-source MQTT message brokers could leave users literally locked out of their homes or offices

Johnson Controls Metasys

Open Design Alliance Drawings SDK

AVEVA InTouch

Schneider Electric IGSS

Schneider Electric Modicon X80

Thales Sentinel LDK Run-Time Environment

Siemens Mendix SAML Module

Siemens TIM 1531 IRC

Siemens Solid Edge

Siemens SIMATIC TIM libcurl

Vulnerabilities in Weapons Systems

Feds Secretly Ran a Fake Encrypted Chat App and Busted Over 800 Criminals

I think therefore IAM: It's not cool, it's not sexy, but it's one of the most important and difficult areas in modern IT

New UAF Vulnerability Affecting Microsoft Office to be Patched Today

Uncle Sam recovers 63.7 of 75 Bitcoins Colonial Pipeline paid to ransomware crew

Top 10 Privacy and Security Features Apple Announced at WWDC 2021

Australian cops, FBI created backdoored chat app, told crims it was secure then listened to 9,000 users' plots

U.S. Recovers $2.3 Million Ransom Paid to Colonial Pipeline Hackers

FBI drops subpoena to identify readers of USA Today article about shootout with agents

Everything Apple announced: Tor-like Safari anonymization. Cloaked iCloud addresses. Cloud CI/CD. And more

~ 7 Jun 2021 ~

Justice Dept. Claws Back $2.3M Paid by Colonial Pipeline to Ransomware Gang

Google, Facebook, Chaos Computer Club join forces to oppose German state spyware

US House Rep on cyber committees tweets Gmail password, PIN in Capitol riot lawsuit outrage

Ransomware Hit Another Pipeline Firmand 70GB of Data Leaked

First Known Malware Surfaces Targeting Windows Containers

DoJ Seizes $2.3M in Bitcoin Paid to Colonial Pipeline Attackers