GitHub: Stolen OAuth Tokens Used to Breach Private Repositories, Dozens of Organizations Impacted

Threat actors that compromised two OAuth integrators could potentially penetrate cloud systems

https://www.darkreading.com/attacks-breaches/nation-state-backed-actors-ramp-up-ukraine-war-themed-attacks

https://www.thestreet.com/technology/cybersecurity/hackers-are-targeting-your-march-madness-bracket

SEC Proposal Would Impose Stricter Timeline for Public Companies Reporting Cyberattacks

https://www.channelfutures.com/mssp-insider/sec-proposal-would-impose-stricter-timeline-for-public-companies-reporting-cyberattacks

https://venturebeat.com/2022/03/31/dont-ignore-spring4shell-but-theres-still-no-sign-its-widespread/

https://www.darkreading.com/attacks-breaches/nation-state-backed-actors-ramp-up-ukraine-war-themed-attacks

https://www.darkreading.com/edge-articles/accelerating-onto-the-on-ramp-for-cybersecurity-jobs

https://www.thestreet.com/technology/cybersecurity/hackers-are-targeting-your-march-madness-bracket

SEC Proposal Would Impose Stricter Timeline for Public Companies Reporting Cyberattacks

https://www.channelfutures.com/mssp-insider/sec-proposal-would-impose-stricter-timeline-for-public-companies-reporting-cyberattacks

https://www.bankinfosecurity.com/sanctions-halt-rewards-for-bug-hunters-in-belarus-russia-a-18724

https://venturebeat.com/2022/03/04/ukraine-deserves-an-it-army-we-have-to-live-with-the-fallout/

https://www.zdnet.com/article/palo-alto-more-than-100000-infusion-pumps-vulnerable-to-2-vulnerabilities/

https://www.arnnet.com.au/article/696817/upstart-crime-site-woos-raid-forumsorphans/?fp=2&fpid=1

https://insights.dice.com/2022/04/05/pen-testing-which-skills-can-help-cybersecurity-job-seekers/

Google releases emergency security update for Chrome users after second 0-day of 2022

https://therecord.media/google-releases-emergency-security-update-for-chrome-users-after-second-0-day-of-2022-discovered/

More on President Biden’s digital assets Executive Order. Reaction to the Strengthening American Cybersecurity Act. Response to SEC’s incident reporting proposal.

https://www.linuxinsider.com/story/new-platform-pushes-data-dirty-pipe-and-dns-tunnel-pollute-linux-plumbing-87468.html

https://www.zdnet.com/article/microsoft-win32k-bug-added-to-cisas-exploited-vulnerabilities-list/

https://insights.dice.com/2022/01/26/why-ransomware-remains-top-priority-for-it-and-security-pros/

https://www.nbcbayarea.com/news/local/what-you-can-do-to-protect-yourself-from-a-cyberattack/2820447/

https://securityboulevard.com/2022/01/vulnerability-disclosures-rise-to-meet-federal-requirements/

https://www.csoonline.com/article/3649778/skyrocketing-cryptocurrency-bug-bounties-expected-to-lure-top-hacking-talent.html

New Zealand government mandates bug reporting process for federal agencies

https://portswigger.net/daily-swig/new-zealand-government-mandates-bug-reporting-process-for-federal-agencies

https://securityboulevard.com/2022/02/cybercriminals-have-yet-to-exploit-russia-ukraine-tensions/

https://www.scmagazine.com/news/cloud-security/vulnerabilities-in-42-gears-suremdm-platform-was-potentially-open-to-supply-chain-attack

Supply chain integration issues costing 38% of companies $500,000 or more a year

https://www.scmagazine.com/news/cloud-security/supply-chain-integration-issues-costing-38-of-companies-500000-or-more-a-year

https://www.thestreet.com/technology/cybersecurity/how-to-avoid-being-hacked-by-the-russians

Bugcrowd Reports 185% Increase in High-Risk Vulnerabilities within Financial Sector

https://pressreleases.responsesource.com/news/102301/bugcrowd-reports-185-increase-in-high-risk-vulnerabilities-within-financial-sector/

https://www.darkreading.com/vulnerabilities-threats/us-search-for-vulnerabilities-drives-10x-increase-in-bug-reports

Bugcrowd: Financial services companies saw 185% increases in serious attacks

https://siliconangle.com/2022/01/18/bugcrowd-financial-services-companies-experienced-185-increases-serious-attacks/

https://www.scmagazine.com/analysis/application-security/log4j-again-needs-patching-as-new-bug-is-found-and-squashed

https://portswigger.net/daily-swig/bug-bounty-platforms-handling-thousands-of-log4j-vulnerability-reports

https://www.datacenterknowledge.com/open-source/log4shell-vulnerability-highlights-software-supply-chain-issues

https://www.scmagazine.com/news/cryptocurrency/cryptomining-campaign-launched-125-attacks-in-the-wild-in-q3-2021

https://www.scmagazine.com/news/mobile/la-county-metro-offers-free-mobile-security-app-for-citizens-using-public-wi-fi

https://www.bankinfosecurity.com/researchers-discover-h2-database-flaw-similar-to-log4shell-a-18270

JFrog researchers find JNDI vulnerability in H2 database consoles similar to Log4Shell

https://www.zdnet.com/article/jfrog-researchers-find-jndi-vulnerability-in-h2-database-consoles-similar-to-log4shell/

https://venturebeat.com/2021/12/28/microsoft-launches-new-defender-capabilities-for-fixing-log4j/

https://www.zdnet.com/article/bugcrowd-reports-increase-in-critical-vulnerabilities-found-in-financial-sector-for-2021/

https://www.zdnet.com/article/beware-of-cryptominers-when-downloading-spider-man-no-way-home-torrents/

https://www.livemint.com/news/world/white-house-convenes-open-source-security-summit-amid-log4j-risks-11642146646359.html

https://www.scmagazine.com/perspective/cybercrime/log4shell-the-perfect-storm-of-being-easy-to-exploit-and-go-viral-in-a-hurry

With 18,378 vulnerabilities reported in 2021, NIST records fifth straight year of record numbers

https://www.zdnet.com/article/with-18376-vulnerabilities-found-in-2021-nist-reports-fifth-straight-year-of-record-numbers/

https://www.securitymagazine.com/articles/96612-300-000-banking-trojan-infections-from-google-play-in-4-months

https://www.securitymagazine.com/articles/96926-185-increase-in-high-risk-vulnerabilities-within-financial-sector

https://www.prnewswire.com/news-releases/bugcrowd-reports-185-increase-in-high-risk-vulnerabilities-within-financial-sector-301461765.html

https://www.scmagazine.com/analysis/cloud-security/log4j-exploit-takes-down-ministry-of-defense-email-servers-in-belgium

https://wraltechwire.com/2021/12/15/bug-hunt-bounty-feds-to-offer-up-to-5000-to-identify-cyber-weak-spots/

https://www.darkreading.com/application-security/bug-bounty-programs-shift-focus-to-most-critical-flaws

https://www.techrepublic.com/article/2021-marks-another-record-year-for-security-vulnerabilities/

Log4Shell Malware Vulnerability Vaccine Helps Protect Users that Could Not Update Yet

https://www.techtimes.com/articles/269328/20211214/log4shell-%E2%80%8Bmalware-vulnerability-vaccine-log4shell-malware.htm

CISA releases advisory on five Apache HTTP server vulnerabilities affecting Cisco products

https://www.zdnet.com/article/cisa-releases-advisory-on-five-apache-http-server-vulnerabilities/

Chinese Researchers Discover EwDoor Botnet Affecting up to 100,000 AT&T VoIP Servers

https://www.cpomagazine.com/cyber-security/chinese-researchers-discover-ewdoor-botnet-affecting-up-to-100000-att-voip-servers/

https://www.forbes.com/sites/martingiles/2021/11/19/digital-bounty-hunters-track-down-ai-bias-and-discrimination/?sh=45b89c3f2f2d

https://www.scmagazine.com/news/cybercrime/malicious-golang-program-attacks-e-commerce-servers