Port 22

~ 23 May 2023 ~

TikTok to let Oracle view source code, algorithm, and content moderation

Bridgestone CISO: Lessons From Ransomware Attack Include Acting, Not Thinking

Enterprises Must Prepare Now for Shorter TLS Certificate Lifespans

North Korean Kimsuky Hackers Strike Again with Advanced Reconnaissance Malware

The Rising Threat of Secrets Sprawl and the Need for Action

Credible Handwriting Machine

New WinTapix.sys Malware Engages in Multi-Stage Attack Across Middle East

Android app breaking bad: From legitimate screen recording to file exfiltration within a year

Meet the GoldenJackal APT group. Dont expect any howls

Ads for lucrative jobs in Asia fail to mention chance of slavery as crypto-scammer

China hasn't told Micron why it failed security review, or what its ban means

Top 5 Reasons to Attend SANS Blue Team Summit 2023

A Visual Summary of SANS Cybersecurity Leadership Summit 2023

Interview With a Crypto Scam Investment Spammer

Uncle Sam strangles criminals' cashflow by reining in money mules

~ 22 May 2023 ~

Improving Cybersecurity Requires Building Better Public-Private Cooperation

PyPI Shuts Down Over the Weekend, Says Incident Was Overblown

Meta Hit With $1.3B Record-Breaking Fine for GDPR Violations

A Leaked Document Shows Spain Wants to Ban End-to-End Encryption

EU Regulators Hit Meta with Record $1.3 Billion Fine for Data Transfer Violations

Indonesian Cybercriminals Exploit AWS for Profitable Crypto Mining Operations

IBM's Polar Buy Creates Focus on a New 'Shadow Data' Cloud Security Area

Google settles location tracking lawsuit for only $39.9M

Metas $1.3 Billion Fine Is a Strike Against Surveillance Capitalism

Cyber Warfare Lessons From the Russia-Ukraine Conflict

Bad Magic's Extended Reign in Cyber Espionage Goes Back Over a Decade

More UK councils caught by Capita's open AWS bucket blunder

Google Is Not Deleting Old YouTube Videos

Are Your APIs Leaking Sensitive Data?

Fighting the five

Diligent developer courageously lied about exec's NSFW printouts - and survived long enough to quit with dignity

U.K. Fraudster Behind iSpoof Scam Receives 13-Year Jail Term for Cyber Crimes

KeePass Exploit Allows Attackers to Recover Master Passwords from Memory

what-is-CVSS

Finding Evil WMI Event Consumers with Disk Forensics

~ 21 May 2023 ~

The Real Risks in Googles New .Zip and .Mov Domains

PyPI Repository Under Attack: User Sign-Ups and Package Uploads Temporarily Halted

~ 20 May 2023 ~

A TikTok Car Theft Challenge Is Costing Hyundai $200 Million

Meet 'Jack' from Romania! Mastermind Behind Golden Chickens Malware

The Underground History of Turla, Russia's Most Ingenious Hacker Group

Notorious Cyber Gang FIN7 Returns Cl0p Ransomware in New Wave of Attacks

Samsung Devices Under Active Exploitation! CISA Warns of Critical Flaw

~ 19 May 2023 ~

Teen in court after '$600K swiped from DraftKings gamblers'

CommonMagic APT Campaign Broadens Target Scope to Central and Western Ukraine

Friday Squid Blogging: Peruvian Squid-Fishing Regulation Drives Chinese Fleets Away

Russian IT guy sent to labor camp for DDoSing Kremlin websites

Apple Patches 3 Zero-Days Possibly Already Exploited

Data Siloes: Overcoming the Greatest Challenge in SecOps

3 Common Initial Attack Vectors Account for Most Ransomware Campaigns

How You, or Anyone, Can Dodge Montanas TikTok Ban

Keep Your Friends Close and Your Identity Closer

Google Debuts Quality Ratings for Security Bug Disclosures

The real cost of a free lunch Week in security with Tony Anscombe

Privacy Sandbox Initiative: Google to Phase Out Third-Party Cookies Starting 2024

Security Risks of New .zip and .mov Domains

Dr. Active Directory vs. Mr. Exposed Attack Surface: Who'll Win This Fight?

Developer Alert: NPM Packages for Node.js Hiding Dangerous TurkoRat Malware

CloudWizard APT: the bad magic story goes on

Cyber Signals: Shifting tactics fuel surge in business email compromise

A Mysterious Group Has Ties to 15 Years of Ukraine-Russia Hacks

UK's GDPR replacement could wipe out oversight of live facial recognition

AppSec Teams Stuck in Catch-Up Cycle Due to Massive Cloud-Native Enablement Gap

Searching for AI Tools? Watch Out for Rogue Sites Distributing RedLine Malware

WebKit Under Attack: Apple Issues Emergency Patches for 3 New Zero-Day Vulnerabilities

Apple warns of three WebKit vulns under active exploitation, dozens more CVEs across its range