InfoSec / Cyber Security News thehackernews.com Attackers Behind Trickbot Expanding Malware Distribution ChannelsAd-Blocking Chrome Extension Caught Injecting Ads in Google Search PagesCISA Issues Warning On Cyber Threats Targeting Water and Wastewater SystemsGoogle: We're Tracking 270 State-Sponsored Hacker Groups From Over 50 CountriesThe Ultimate SaaS Security Posture Management (SSPM) ChecklistCritical Remote Hacking Flaws Disclosed in Linphone and MicroSIP Softphones bleepingcomputer.com Windows 11 build 22000.282 fixes CPU performance issues, taskbar bugCanon sued for disabling scanner when printers run out of inkThe Week in Ransomware - October 15th 2021 - Disrupting ransomsUS links $5.2 billion worth of Bitcoin transactions to ransomwareNew Windows 10 KB5006670 update breaks network printingTwitch downplays this month's hack, says it had minimal impact wired.com Hackers Keep Targeting the US Water SupplyMissouri Threatens to Sue a Reporter Over a Security FlawA Telegram Bot Told Iranian Hackers When They Got a HitTelegram Is Becoming a Cesspool of Anti-Semitic ContentHow to Permanently Delete Your Facebook AccountCloudflare Isn't Liable for Sites That Hawk Counterfeits krebsonsecurity.com Missouri Governor Vows to Prosecute St. Louis Post-Dispatch for Reporting Security VulnerabilityHow Coinbase Phishers Steal One-Time PasswordsPatch Tuesday, October 2021 EditionWhat Happened to Facebook, Instagram, & WhatsApp?FCC Proposal Targets SIM Swapping, Port-Out FraudThe Rise of One-Time Password Interception Bots zerodayinitiative.com Adding a Beta NAS Device to Pwn2Own AustinThe October 2021 Security Update ReviewCVE-2021-26420: Remote Code Execution in SharePoint via Workflow CompilationCVE-2021-26084: Details on the Recently Exploited Atlassian Confluence OGNL Injection BugThe September 2021 Security Update ReviewAnalysis of a Parallels Desktop Stack Clash Vulnerability and Variant Hunting using Binary Ninja reddit.com/r/InfoSecNews Accenture discloses data breach after LockBit ransomware attackRussia-Linked TA505 targets financial institutions in a new malspam campaignUS Treasury FinCEN linked $5.2 billion in BTC transactions to ransomware paymentsJuniper Networks released +40 security advisories to fix +70 vulnerabilitiesBoffins devise a new side-channel attack affecting all AMD CPUsThingiverse Data Leaked — Check Your Passwords threatpost.com TrickBot Gang Enters Cybercrime Elite with Fresh AffiliatesMissouri Vows to Prosecute ‘Hacker’ Who Informed State About Data LeakRickroll Grad Prank Exposes Exterity IPTV BugVerizon’s Visible Wireless Carrier Confirms Credential-Stuffing AttackCryptoRom Scam Rakes in $1.4M by Exploiting Apple Enterprise FeaturesPodcast: 67% of Orgs Have Been Hit by Ransomware at Least Once reddit.com/r/cybersecurity Mentorship MondayQ4 All-Hands: Happy 300k (again)! We <3 this community, we're turning up our transparency even further, and we have some improvements for you to vote for!A step-by-step analysis of the new malware used by APT28/Sofacy called SkinnyBoyICS Honeypots - do they exist?Hi All, I have made a detailed video on CISSP Endorsement process and different type of fee . Lots of aspirants ask me about the endorsement process after passing the exam. I have answered all the questions in this video . please go through it.New BlackByte ransomware strain is "clumsy" and "amateurish" - reusing the same encryption key for every victim reddit.com/r/netsec /r/netsec's Q4 2021 Information Security Hiring ThreadCompromising a Domain With the Help of a SpoolerA step-by-step analysis of the new malware used by APT28/Sofacy called SkinnyBoyCreating a Basic Python Reverse Shell ListenerThis edition (Part 2 of the 4-part SAST primer) focuses on how SAST tools work. This one was interesting to write. There's so much detail that it's hard to abstract some (to keep it readable) and leave out the rest.GitHub - Arinerron/heaptrace - helps visualize heap operations for pwn and debugging reddit.com/r/websec LinkedIn profile visit restrictions[1 Minute] Cool Tool Friday: How to Bypass ANY Paywall!Pentest network python toolSolving WeCTF Include (GET/POST Requests)Cisco Hyperflex: How We Got Remote Code Execution Through Login Form and Other FindingsBug reporting and blog writing workshop! Plus it's Pokémon themed 🙂 reddit.com/r/pwned Twitch hit by massive hack that reveals its entire source code and moreGeico data breach exposed customers' driver's license numbersCodecov.io: "Unauthorized access and alterations to our Bash Uploader since Jan 31, 2021, which enabled them to potentially export information stored in our users' continuous integration (CI) environments"Mobikwik (India) KYC data leaked$5.7 Million Crypto Stolen Due To A Security Breach at Cryptocurrency platform Roll embracethered.com Video: Understanding Image Scaling AttacksSniffing Firefox traffic with bpftraceVideo: What is Tabnabbing?What's in the bpfcc-tools box?Offensive BPF: Detection IdeasOffensive BPF: Using bpftrace to host backdoors darkreading.com China's Hackers Crack Devices at Tianfu Cup for $1.5M in PrizesCisco Duo Trusted Access Report: More Than 50% of Companies Plan Passwordless MoveHow Attackers Hack Humans'Clumsy' BlackByte Malware Reuses Crypto Keys, Worms Into NetworksEvolution Equity Partners Close $400M for Cybersecurity InvestmentsFrom Help Desk to Head of SOC: Building a Cybersecurity Career on Empathy and Candor trendmicro.com This Week in Security News – October 15, 2021Security Risks with Private 5G in Manufacturing Companies Part. 2Ransomware Operators Found Using New "Franchise" Business ModelDemo: How to Build a Container Registry from a ContainerAnalyzing Email Services Abused for Business Email Compromise welivesecurity.com Week in security with Tony AnscombeVirus Bulletin: Old malware never dies – it just gets more targetedEmployee offboarding: Why companies must close a crucial gap in their security strategyDon’t get phished! How to be the one that got awayMicrosoft thwarts record‑breaking DDoS attackRansomware cost US companies almost $21 billion in downtime in 2020 helpnetsecurity.com Week in review: Strengthening firmware security, Help Net Security: XDR Report releasedTD SYNNEX expands cloud and cybersecurity offerings with Elisity’s zero trust platformElastic acquires Optimyze to deliver visibility into cloud native environmentsVeritas InfoScale 8 provides storage optimization for stateful Kubernetes critical workloadsZimperium partners with PCI SSC to help secure payment data on mobile apps and devices nakedsecurity.sophos.com LANtenna hack spies on your data from across the room! (Sort of)S3 Ep54: Another 0-day, double Apache patch, and Fight The Phish [Podcast]Romance scams with a cryptocurrency twist – new research from SophosLabsApple quietly patches yet another iPhone 0-day – check you have 15.0.2Cybersecurity awareness month: Fight the phish! insights.infosec-jobs.com A first update on our salary surveyShare your salary and see what everyone else is making in InfoSec / the Cyber Security spaceThe 10 most in-demand roles in the Information Security domain2021 so far – A few UpdatesWe launched “jobmarks”We now have “Dark Mode” securityweek.com Cyberattack Disrupts Services at Ecuador's Largest BankTwitch Says Hack Impacted 'Small Fraction of Users'Russia-Linked TA505 Back at Targeting Financial InstitutionsNations Vow to Combat Ransomware at US-Led SummitRansomware Hit SCADA Systems at 3 Water Facilities in U.S. securityboulevard.com How to write good risk scenarios and statementsDEF CON 29 ICS Village – Javier Perez’ & Juan Escobar’s ‘ICS Intrusion KillChain Explained’XKCD ‘Flag Map Sabotage’DEF CON 29 ICS Village – Mary Brooks’ ‘ICS Jeopardy’Farid’s Clear Explanation of Apple’s Client Side Scanning siliconrepublic.com One in 10 Irish workers would not report malware to boss, survey finds‘I believe zero trust is a big game changer’BT launches AI security platform to help firms prevent cyberattacksKilkenny cybersecurity company BITS to create 20 new jobsNew 1Password feature lets you share passwords with a link csoonline.com BrandPost: Your Employees Aren’t the Problem—It’s Your TechnologyTop cybersecurity M&A deals for 2021How shape-shifting threat actors complicate attack attributionREvil ransomware explained: A widespread extortion operationChinese APT group IronHusky exploits zero-day Windows Server privilege escalationBrandPost: Fighting Video Piracy Is Strengthened by Collaboration kitploit.com Domain-Protect - Protect Against Subdomain TakeoverPacket-Sniffer - A pure-Python Network Packet Sniffing ToolCrawlergo - A Powerful Browser Crawler For Web Vulnerability ScannersNetworkit - A Growing Open-Source Toolkit For Large-Scale Network AnalysisForgeCert - "Golden" Certificates grahamcluley.com Acer hacked (for the second time this year)Disrupt adversaries and prevent identity fraud with Recorded Future Identity IntelligenceAnalysis of 80 million ransomware samples reveals a world under attackSmashing Security podcast #247: Rickrolling submarine secretsBank of America employee indicted for email scam that targeted businesses