Port 22

~ 7 May 2021 ~

Week in security with Tony Anscombe

Teaching Cybersecurity to Children

FBI, NSA, CISA & NCSC Issue Joint Advisory on Russian SVR Activity

Investment Scammer John Davies Reinvents Himself?

4 Major Privacy and Security Updates From Google You Should Know About

6 Unpatched Flaws Disclosed in Remote Mouse App for Android and iOS

Cisco HyperFlex web interface has critical flaw that lets attackers get <code>root</code> and execute arbitrary commands

Kids in Hong Kong and other highly surveilled states worry infosec careers are just asking for trouble

New TsuNAME Flaw Could Let Attackers Take Down Authoritative DNS Servers

Google Play to require privacy labels on apps in 2022, almost two years after Apple

New Stealthy Rootkit Infiltrated Networks of High-Profile Organizations

SANS DFIR Stay Sharp Courses - Same quality, less time, targeted skill training

Google will make you use two-step verification to login

~ 6 May 2021 ~

Popular routers found vulnerable to hacker attacks

Troy Hunt: Organizations Make Security Choices Tough for Users

New Techniques Emerge for Abusing Windows Services to Gain System Control

Vulnerability in Snapdragon 855 SoCs could pwn Android modems, allow baddies to snoop on conversations

CISA Publishes Analysis on New 'FiveHands' Ransomware

Cloud-Native Businesses Struggle with Security

The Story of Colossus

Operation TunnelSnake

Fantastic passwords and where your children can find them

Crane horror <i>Reg</i> reader uses his severed finger to unlock Samsung Galaxy phone

CISO Challenge: Check Your Cybersecurity Skills On This New Competition Site

Chrome on Windows turns on Intel, AMD chip-level defenses against malicious websites

Critical Flaws Hit Cisco SD-WAN vManage and HyperFlex Software

JET engine flaws can crash Microsoft's IIS, SQL Server, say Palo Alto researchers

New Qualcomm Chip Bug Could Let Hackers Spy On Android Devices

New Spectre Flaws in Intel and AMD CPUs Affect Billions of Computers

SANS ICS Hot Take: Cloud Security Transcript

~ 5 May 2021 ~

How a Former Netflix Exec Built a Brazen Bribery Scheme

Attackers Seek New Strategies to Improve Macros' Effectiveness

21 nails in Exim mail server: Vulnerabilities enable 'full remote unauthenticated code execution', millions of boxes at risk

DDoS attack knocks Belgian government websites offline

DoD Lets Researchers Target All Publicly Accessible Info Systems

New Spectre-Like Attacks

Wanted: The (Elusive) Cybersecurity 'All-Star'

East London council blurts thousands of residents' email addresses in To field blunder

Malicious Office 365 Apps Are the Ultimate Insiders

Twilio's private GitHub repositories cloned by Codecov attacker, cloud comms platform confirms

Ousaban: Private photo collection hidden in a CABinet

What not to expect when you're expecting: Fertility apps may be selling intimate health secrets

New Study Warns of Security Threats Linked to Recycled Phone Numbers

BIOS PrivEsc Bugs Affect Hundreds of Millions of Dell PCs Worldwide

ALERT New 21Nails Exim Bugs Expose Millions of Email Servers to Hacking

Strong, Secure Passwords Are Key to Helping Reduce Risk to Your Organization

~ 4 May 2021 ~

Apple Releases Urgent Security Patches For ZeroDay Bugs Under Active Attacks

'Millions' of Dell PCs will grant malware, rogue users admin-level access if asked nicely

Newer Generic Top-Level Domains a Security 'Nuisance'

Red Hat open-sources StackRox Kubernetes security product

The Wages of Password Re-use: Your Money or Your Life

Apple Issues Patches for Webkit Security Flaws

Microsoft will soon remove Flash Player from Windows 10 devices

Hundreds of Millions of Dell Computers Potentially Vulnerable to Attack

Raytheon: Supply Chain, Ransomware, Zero Trust Biggest Security Priorities

Tesla Remotely Hacked from a Drone

The UNC2529 Triple Double: A Trifecta Phishing Campaign

The UNC2529 Triple Double: A Trifecta Phishing Campaign

They Told Their Therapists Everything. Hackers Leaked It All

Advantech WISE-PaaS RMM

Delta Electronics CNCSoft ScreenEditor

LuckyMouse Hackers Target Banks, Companies and Governments in 2020

Researchers Uncover Iranian State-Sponsored Ransomware Operation

New Pingback Malware Using ICMP Tunneling to Evade C&C Detection

How Should the Service Desk Reset Passwords?