Port 22

~ 18 Apr 2024 ~

OfflRouter Malware Evades Detection in Ukraine for Almost a Decade

185K people's sensitive data in the pits after ransomware raid on Cherry Health

FIN7 Cybercrime Group Targeting U.S. Auto Industry with Carbanak Backdoor

EU tells Meta it can't paywall privacy

Recover from Ransomware in 5 MinutesWe will Teach You How!

Other Attempts to Take Over Open Source Projects

The Real-Time Deepfake Romance Scams Have Arrived

New Android Trojan 'SoumniBot' Evades Detection with Clever Tricks

How to Conduct Advanced Static Analysis in a Malware Sandbox

Global Police Operation Disrupts 'LabHost' Phishing Service, Over 30 Arrested Worldwide

Prolific phishing-made-easy emporium LabHost knocked offline in cyber-cop op

DuneQuixote campaign targets Middle Eastern entities with CR4T malware

The many faces of impersonation fraud: Spot an imposter before its too late

Cisco creates architecture to improve security and sell you new switches

Hackers Exploit OpenMetadata Flaws to Mine Crypto on Kubernetes

Singapore infosec boss warns China/West tech split will be bad for interoperability

Malicious Google Ads Pushing Fake IP Scanner Software with Hidden Backdoor

Taiwanese film studio snaps up Chinese surveillance camera specialist Dahua

~ 17 Apr 2024 ~

Hugely expanded Section 702 surveillance powers set for US Senate vote

Kremlin's Sandworm blamed for cyberattacks on US, European water utilities

Big Tech Squares Off Against US Spies

Attackers exploiting new critical OpenMetadata vulnerabilities on Kubernetes clusters

Russian APT Deploys New 'Kapeka' Backdoor in Eastern European Attacks

Exploit code for Palo Alto Networks zero-day now public

Using AI-Generated Legislative Amendments as a Delaying Technique

GenAI: A New Headache for SaaS Security Teams

Critical Atlassian Flaw Exploited to Deploy Linux Variant of Cerber Ransomware

Hackers Exploit Fortinet Flaw, Deploy ScreenConnect, Metasploit in New Campaign

OpenAI's GPT-4 can exploit real vulnerabilities by reading security advisories

SoumniBot: the new Android bankers unique techniques

Hackers Linked to Russias Military Claim Credit for Sabotaging US Water Utilities

Cisco Warns of Global Surge in Brute-Force Attacks Targeting VPN and SSH Services

Japanese government rejects Yahoo<i>!</i> infosec improvement plan

Enhancing Your Cyber Defense: Comparing Simulations and Tabletop Exercises

Fire in the Cisco! Networking giant's Duo MFA leaks message logs

~ 16 Apr 2024 ~

MGM says FTC can't possibly probe its ransomware downfall watchdog chief Lina Khan was a guest at the time

Change Healthcares New Ransomware Nightmare Goes From Bad to Worse

US Senate to Vote on a Wiretap Bill That Critics Call Stasi-Like

Alleged cryptojacker accused of stealing $3.5M from cloud to mine under $1M in crypto

New Microsoft guidance for the DoD Zero Trust Strategy

SIM swap crooks solicit T-Mobile US, Verizon staff via text to do their dirty work

OpenJS Foundation Targeted in Potential JavaScript Project Takeover Attempt

Open sourcerers say suspected xz-style attacks continue to target maintainers

TA558 Hackers Weaponize Images for Wide-Scale Malware Attacks

AWS, Google, and Azure CLI Tools Could Leak Credentials in Build Logs

Change Healthcares ransomware attack costs edge toward $1B so far

Who Stole 3.6M Tax Records from South Carolina?

Widely-Used PuTTY SSH Client Found Vulnerable to Key Recovery Attack

Identity in the Shadows: Shedding Light on Cybersecurity's Unseen Threats

X.com Automatically Changing Link Text but Not URLs

Google location tracking deal could be derailed by politics

The ABCs of how online ads can impact childrens well-being

FTC Fines Mental Health Startup Cerebral $7 Million for Major Privacy Violations

Hive RAT Creators and $3.5M Cryptojacking Mastermind Arrested in Global Crackdown

~ 15 Apr 2024 ~

CISA in a flap as Chirp smart door locks can be trivially unlocked remotely

Intel and Lenovo BMCs Contain Unpatched Lighttpd Server Flaw

Microsoft recognized as a Leader in the Forrester Wave: Workforce Identity Platform, Q1 2024

Roku makes 2FA mandatory for all after nearly 600K accounts pwned

Crickets from Chirp Systems in Smart Lock Key Leak

Delinea Secret Server customers should apply latest patches

AI Copilot: Launching Innovation Rockets, But Beware of the Darkness Ahead

Muddled Libra Shifts Focus to SaaS and Cloud for Extortion and Data Theft Attacks

US senator wants to put the brakes on Chinese EVs

New Lattice Cryptanalytic Technique

The US Government Has a Microsoft Problem