[ News | Blogs | Reddits | Lists | Media | ? ] HoneyDB

Dark Reading
Chatbot Army Deployed in Latest DHL Shipping Phish
Partial Patching Still Provides Strong Protection Against APTs
Quantum Key Distribution for a Post-Quantum World
Microsoft Rushes a Fix After May Patch Tuesday Breaks Authentication
Authentication Is Static, Yet Attackers Are Dynamic: Filling the Critical Gap
New Open Source Project Brings Consistent Identity Access to Multicloud
More Than 1,000 Cybersecurity Career Pursuers Complete the (ISC)² Entry-Level Cybersecurity Certification Pilot Exam
Deadbolt Ransomware Targeting QNAP NAS Devices
Pro-Russian Information Operations Escalate in Ukraine War
DoJ Won't Charge 'Good Faith' Security Researchers
Threatpost
Closing the Gap Between Application Security and Observability
380K Kubernetes API Servers Exposed to Public Internet
Critical Vulnerability in Premium WordPress Themes Allows for Site Takeover
DOJ Says Doctor is Malware Mastermind
APTs Overwhelmingly Share Known Vulnerabilities Rather Than Attack O-Days
April VMware Bugs Abused to Deliver Mirai Malware, Exploit Log4Shell
Sysrv-K Botnet Targets Windows, Linux
iPhones Vulnerable to Attack Even When Turned Off
Microsoft’s May Patch Tuesday Updates Cause Windows AD Authentication Errors
Threat Actors Use Telegram to Spread ‘Eternity’ Malware-as-a-Service
CyberScoop
A year after report, task force urges U.S. to keep ransomware on front burner
FTC warns it will go after ed tech companies misusing children's data
DOJ revises computer fraud prosecution standards to ease off 'good-faith' research
FinCEN associate director says his agency has its eyes on DeFi projects
Mandiant: Belarusian disinformation operation pushes phony organ harvesting tale
FSB's Fronton DDoS tool was actually designed for 'massive' fake info campaigns, researchers say
DHS halts Disinformation Governance Board amid strong backlash
Water companies are increasingly uninsurable due to ransomware, industry execs say
New research identifies poor IAM policies as the greatest cloud vulnerability
Senators ask FTC to investigate ID.me for deceptive business practices
HITBSecNews - Keeping Knowledge Free for Over a Decade
New Bluetooth hack can unlock your Tesla—and all kinds of other devices
2 vulnerabilities with 9.8 severity ratings are under exploit. A 3rd looms
Twitter deal leaves Elon Musk with no easy way out
Majority of Kubernetes API Servers Exposed to the Public Internet
Angry IT admin wipes employer’s databases, gets 7 years in prison
Musk says Twitter must show data behind spam estimate or he’ll kill the deal
Your iPhone Is Vulnerable to a Malware Attack Even When It’s Off
NVIDIA fixes ten vulnerabilities in Windows GPU display drivers
US links Thanos and Jigsaw ransomware to 55-year-old doctor
iOS 15.5 and macOS 12.4 bring updates to Podcasts, digital payments, and more
BleepingComputer
Ransomware attack exposes data of 500,000 Chicago students
Malicious PyPI package opens backdoors on Windows, Linux, and Macs
Windows 11 hacked three more times on last day of Pwn2Own contest
The Week in Ransomware - May 20th 2022 - Another one bites the dust
Cisco urges admins to patch IOS XR zero-day exploited in attacks
Microsoft disables telemetry in Windows 11 Subsystem for Android by default
Backdoor baked into premium school management plugin for WordPress
Emergency Windows 10 updates fix Microsoft Store app issues
Windows 11 hacked again at Pwn2Own, Telsa Model 3 also falls
Russian Sberbank says it’s facing massive waves of DDoS attacks
CPO Magazine
Data Breach on DEA Law Enforcement System Grants Cyber Criminals Access to 16 Databases
VPN Providers Ordered by Indian Government To Hold All Customer Data for Five Years, Hand Over to Government Upon Request
Could a Cyber Attack Overthrow a Government? Conti Ransomware Group Now Threatening To Topple Costa Rican Government if Ransom Not Paid
Data Privacy Conundrum: When Different States Play by Different Rules. . .
Double Blow of Ransomware Attack and Covid-19 Pandemic Shutters 157-Year-Old Lincoln College
Five Eyes Alliance Warns of Cyber Attacks on MSPs and Potential Espionage and Ransomware Deployment
Proposed EU Law Requiring CSAM Scanning Could Put an End To Encrypted Messages
DX 2.0 Demands a Sustainable and Secure Data Strategy
Report Says Text Messages Indicate Binance Shared User Data With Russian FSB
How the Modern Data Ecosystem Broke Data Governance
GBHackers On Security
Tesla Model 3, Ubuntu Desktop & Windows 11 Hacked – Pwn2Own Day 2
Pwn2Own – Windows 11, Microsoft Teams Hacked & Exploiting 16 Zero-day Bugs
Microsoft Warns of Malware Campaign Targeting SQL Servers Using Brute Force
Kali Linux 2022.2 Release With New Hacking Tools & Updates
KurayStealer – Tool Sold to Criminals that Have Password Stealing and Screenshot Capabilities
Some Top 100,000 Websites Placing Keylogger to Collect Everything You Type
Hackers Exploiting a Critical Vulnerability in Zyxel Firewall & VPN Devices
Frustrated IT Admin Gets 7 Years in Prison for Wiping Employer’s Databases
Iranian Hackers Using BitLocker & DiskCryptor to Conduct Ransomware Attacks in U.S.
Sysrv botnet Attack Windows, Linux Servers with New Exploits – Microsoft
The Register - Security
Conti: Russian-backed rulers of Costa Rican hacktocracy?
China-linked Twisted Panda caught spying on Russian defense R&D
Microsoft patches the patch that broke Windows authentication
Microsoft Bing censors politically sensitive Chinese terms
Protecting data now as the quantum era approaches
Canada bans Huawei and ZTE from 5G networks, citing national security risks
India slightly softens infosec incident reporting and data retention rules
US won’t prosecute ‘good faith’ security researchers under CFAA
US recovers a record $15m from the 3ve ad-fraud crew
Iran, China-linked gangs join Putin's disinformation war online
The Hacker News
Researchers Find Backdoor in School Management Plugin for WordPress
Cisco Issues Patch for New IOS XR Zero-Day Vulnerability Exploited in the Wild
Hackers Gain Fileless Persistence on Targeted SQL Servers Using a Built-in Utility
Web Trackers Caught Intercepting Online Forms Even Before Users Hit Submit
Hackers Trick Users with Fake Windows 11 Downloads to Distribute Vidar Malware
Researchers Uncover Rust Supply Chain Attack Targeting Cloud CI Pipelines
Cytrox's Predator Spyware Targeted Android Users with Zero-Day Exploits
Microsoft Warns Rise in XorDdos Malware Targeting Linux Devices
Hackers Exploiting VMware Horizon to Target South Korea with NukeSped Backdoor
QNAP Urges Users to Update NAS Devices to Prevent Deadbolt Ransomware Attacks
Network World Security
What is Nmap and why do you need it on your network?
CISA issues emergency warning over two new VMware vulnerabilities
8 questions to ask vendors about Zero Trust Network Access (ZTNA)
Google Cloud boosts open-source security, simplifies zero-trust rollouts
6 top network security threats and how to beat them
Intel details IPU roadmap to free up CPUs
Cohesity launches FortKnox to protect data from ransomware attacks
Cisco warns of critical vulnerability in virtualized network software
Dell offers data, app recovery support for multicloud assets
4 networking best practices learned from the Atlassian network outage