Port 22

~ 10 May 2021 ~

Over 25% Of Tor Exit Relays Spied On Users' Dark Web Activities

Is it still a good idea to require users to change their passwords?

SANS ICS Site Visit Plan

Cut Through the Noise: Are Password Managers Still Safe and Secure?

Ransomware shuts US oil pipeline that pumps 100 million gallons a day

~ 9 May 2021 ~

Four Plead Guilty to Aiding Cyber Criminals with Bulletproof Hosting

What's Google Floc? And How Does It Affect Your Privacy?

Google Gets Serious About Two-Factor Authentication. Good!

Ransomware Cyber Attack Forced the Largest U.S. Fuel Pipeline to Shut Down

~ 8 May 2021 ~

The Colonial Pipeline Hack Is a New Extreme for Ransomware

Microsoft Will Soon Kill Flash on Windows 10 for Good

ISPs Funded 8.5 Million Fake Comments Opposing Net Neutrality

Facebook Will Limit Your WhatsApp Features For Not Accepting Privacy Policy

Top 11 Security Flaws Russian Spy Hackers Are Exploiting in the Wild

~ 7 May 2021 ~

Friday Squid Blogging: COVID Relief Funds

Twitter's Tip Jar Privacy Fiasco Was Entirely Avoidable

Russian cyber-spies changed tactics after the UK and US outed their techniques so here's a list of those changes

How North Korean APT Kimsuky Is Evolving Its Tactics

Privacy activist Max Schrems on Microsoft's EU data move: It won't keep the NSA away

LibInjection Detect SQL Injection (SQLi) and Cross-Site Scripting (XSS)

LibInjection Detect SQL Injection (SQLi) and Cross-Site Scripting (XSS)

LibInjection Detect SQL Injection (SQLi) and Cross-Site Scripting (XSS)

Week in security with Tony Anscombe

Teaching Cybersecurity to Children

FBI, NSA, CISA & NCSC Issue Joint Advisory on Russian SVR Activity

Investment Scammer John Davies Reinvents Himself?

4 Major Privacy and Security Updates From Google You Should Know About

6 Unpatched Flaws Disclosed in Remote Mouse App for Android and iOS

Cisco HyperFlex web interface has critical flaw that lets attackers get <code>root</code> and execute arbitrary commands

Kids in Hong Kong and other highly surveilled states worry infosec careers are just asking for trouble

New TsuNAME Flaw Could Let Attackers Take Down Authoritative DNS Servers

Google Play to require privacy labels on apps in 2022, almost two years after Apple

New Stealthy Rootkit Infiltrated Networks of High-Profile Organizations

SANS DFIR Stay Sharp Courses - Same quality, less time, targeted skill training

Google will make you use two-step verification to login

~ 6 May 2021 ~

Popular routers found vulnerable to hacker attacks

Troy Hunt: Organizations Make Security Choices Tough for Users

New Techniques Emerge for Abusing Windows Services to Gain System Control

Vulnerability in Snapdragon 855 SoCs could pwn Android modems, allow baddies to snoop on conversations

CISA Publishes Analysis on New 'FiveHands' Ransomware

Cloud-Native Businesses Struggle with Security

The Story of Colossus

Operation TunnelSnake

Fantastic passwords and where your children can find them

Crane horror <i>Reg</i> reader uses his severed finger to unlock Samsung Galaxy phone

CISO Challenge: Check Your Cybersecurity Skills On This New Competition Site

Chrome on Windows turns on Intel, AMD chip-level defenses against malicious websites

Critical Flaws Hit Cisco SD-WAN vManage and HyperFlex Software

JET engine flaws can crash Microsoft's IIS, SQL Server, say Palo Alto researchers

New Qualcomm Chip Bug Could Let Hackers Spy On Android Devices

New Spectre Flaws in Intel and AMD CPUs Affect Billions of Computers

SANS ICS Hot Take: Cloud Security Transcript

~ 5 May 2021 ~

How a Former Netflix Exec Built a Brazen Bribery Scheme

Attackers Seek New Strategies to Improve Macros' Effectiveness

21 nails in Exim mail server: Vulnerabilities enable 'full remote unauthenticated code execution', millions of boxes at risk

DDoS attack knocks Belgian government websites offline

DoD Lets Researchers Target All Publicly Accessible Info Systems

New Spectre-Like Attacks

Wanted: The (Elusive) Cybersecurity 'All-Star'

East London council blurts thousands of residents' email addresses in To field blunder

Malicious Office 365 Apps Are the Ultimate Insiders

Twilio's private GitHub repositories cloned by Codecov attacker, cloud comms platform confirms

Ousaban: Private photo collection hidden in a CABinet

What not to expect when you're expecting: Fertility apps may be selling intimate health secrets

New Study Warns of Security Threats Linked to Recycled Phone Numbers