Port 22

~ 16 Oct 2023 ~

Why Zero Trust Is the Cloud Security Imperative

3 Essential Steps to Strengthen SaaS Security

Binance's Smart Chain Exploited in New 'EtherHiding' Malware Campaign

Regulator, insurers and customers all coming for Progress after MOVEit breach

A Visual Summary of SANS CloudSecNext Summit 2023

~ 14 Oct 2023 ~

The US Congress Was Targeted With Predator Spyware

Microsoft to Phase Out NTLM in Favor of Kerberos for Stronger Authentication

~ 13 Oct 2023 ~

Friday Squid Blogging: On Squid Intelligence

How MOVEit Is Likely to Shift Cyber Insurance Calculus

Feds: Beware AvosLocker Ransomware Attacks on Critical Infrastructure

Security Pros Warn that EU's Vulnerability Disclosure Rule is Risky

530K people's info feared stolen from cloud PC gaming biz Shadow

Bungled ransomware raid targeting WS_FTP servers demanded just 0.018 BTC

ShellBot Cracks Linux SSH Servers, Debuts New Evasion Tactic

Microsoft Debuts AI Bug-Bounty Program, Offers $15K

Rumors of a Global Day of Jihad Have Unleashed a Dangerous Wave of Disinformation

Gaza Conflict Paves Way for Pro-Hamas Information Operations

Passkeys Are Cool, But They Aren't Enterprise-Ready

Calls for Visual Studio security tweak fall on deaf ears despite one-click RCE exploit

Staying on top of security updates Week in security with Tony Anscombe

Can open source be saved from the EU's Cyber Resilience Act?

New PEAPOD Cyberattack Campaign Targeting Women Political Leaders

What the Hollywood Writers Strike Resolution Means for Cybersecurity

US House Republicans Had Their Phones Confiscated to Stop Leaks

Equifax scores 11.1M slap on wrist over 2017 mega breach

ChatGPT at work: how chatbots help employees, but threaten business

Researchers Unveil ToddyCat's New Set of Tools for Data Exfiltration

Hacking the High School Grading System

Ransomware attacks doubled year on year. Are organizations equipped to handle the evolution of Ransomware in 2023?

HTTP/2 Rapid Reset: A New Protocol Vulnerability Will Haunt the Web for Years

DarkGate Malware Spreading via Messaging Services Posing as PDF Files

FBI, CISA Warn of Rising AvosLocker Ransomware Attacks Against Critical Infrastructure

Squid games: 35 security holes still unpatched in proxy after 2 years, now public

~ 12 Oct 2023 ~

Making the Case for Cryptographic Agility and Orchestration

How to Scan Your Environment for Vulnerable Versions of Curl

DigiCert Announces Comprehensive Discovery of Cryptographic Assets

Appdome Announces Attack Evaluation Tools in Digital Economy's Mobile XDR

DarkGate Operator Uses Skype, Teams Messages to Distribute Malware

Brands Beware: X's New Badge System Is a Ripe Cyber-Target

Microsoft Set to Retire Grunge-Era VBScript, to Cybercrime's Chagrin

BlackBerry Unveils Next-Generation UEM Redefining the Endpoint Management Market

Simpson Manufacturing Launches Investigation After Cyberattack

The Cyberwar Between the East and the West Goes Through Africa

Backdoor Lurks Behind WordPress Caching Plugin to Hijack Websites

Protect Critical Infrastructure With Same Rigor as Classified Networks

Malicious NuGet Package Targeting .NET Developers with SeroXen RAT

Uber's Ex-CISO Appeals Conviction Over 2016 Data Breach

New California Delete Act Tightens Rules for Data Brokers

Everest cybercriminals offer corporate insiders cold, hard cash for remote access

Building cyber resilience with data vaults

How the FTX Thieves Have Tried to Launder Their $400 Million Haul

ShellBot Uses Hex IPs to Evade Detection in Attacks on Linux SSH Servers

Bounty to Recover NISTs Elliptic Curve Seeds

US construction giant unearths concrete evidence of cyberattack

How to Guard Your Data from Exposure in ChatGPT

Microsoft Defender Thwarts Large-Scale Akira Ransomware Attack

ToddyCat: Keep calm and check logs

Pan-African Financial Apps Leak Encryption, Authentication Keys

Researchers Uncover Malware Posing as WordPress Caching Plugin

HM Government has partnered with SANS to train cyber security experts

Researchers Uncover Ongoing Attacks Targeting Asian Governments and Telecom Giants

Two High-Risk Security Flaws Discovered in Curl Library - New Patches Released

Leveraging AI to Manage Human Risk (Part 1)

~ 11 Oct 2023 ~

Chinese 'Stayin' Alive' Attacks Dance Onto Targets With Dumb Malware

Curl Bug Hype Fizzles After Patching Reveal