Port 22

~ 26 Jul 2024 ~

Crooks Bypassed Googles Email Verification to Create Workspace Accounts, Access 3rd-Party Services

Friday Squid Blogging: Sunscreen from Squid Pigments

CrowdStrike meets Murphy's Law: Anything that can go wrong will

Compromising the Secure Boot Process

Progress discloses second critical flaw in Telerik Report Server in as many months

This AI-Powered Cybercrime Service Bundles Phishing Kits with Malicious Android Apps

A North Korean Hacker Tricked a US Security Vendor Into Hiring Himand Immediately Tried to Hack Them

Offensive AI: The Sine Qua Non of Cybersecurity

Europe Is Pumping Billions Into New Military Tech

U.S. DoJ Indicts North Korean Hacker for Ransomware Attacks on Hospitals

Ongoing Cyberattack Targets Exposed Selenium Grid Services for Crypto Mining

CrowdStrike Warns of New Phishing Scam Targeting German Customers

Critical Flaw in Telerik Report Server Poses Remote Code Execution Risk

North Korean chap charged for attacks on US hospitals, NASA and even China

Malware crew Stargazers Goblin used 3,000 GitHub accounts to make bank

Join the SANS Cloud Security Exchange 2024!

CrowdStrike update blunder may cost world billions and insurance ain't covering it all

~ 25 Jul 2024 ~

Beware of fake CrowdStrike domains pumping out Lumma infostealing malware

FYI: Data from deleted GitHub repos may not actually be deleted

The CrowdStrike Outage and Market-Driven Brittleness

Uncle Sam accuses telco IT pro of decade-long spying campaign for China

Onyx Sleet uses array of malware to gather intelligence for North Korea

North Korean Hackers Shift from Cyber Espionage to Ransomware Attacks

You should probably fix this 5-year-old critical Docker vuln fairly sharpish

Kaspersky says Uncle Sam snubbed proposal to open up its code for third-party review

At The 2024 Summer Olympics, AI Is Watching You

6 Types of Applications Security Testing You Must Know About

Data Wallets Using the Solid Protocol

Meta Removes 63,000 Instagram Accounts Linked to Nigerian Sextortion Scams

Webinar: Securing the Modern Workspace: What Enterprises MUST Know about Enterprise Browser Security

Researchers Reveal ConfusedFunction Vulnerability in Google Cloud Platform

Patch management still seemingly abysmal because no one wants the job

Critical Docker Engine Flaw Allows Attackers to Bypass Authorization Plugins

CISA Warns of Exploitable Vulnerabilities in Popular BIND 9 DNS Software

New Chrome Feature Scans Password-Protected Files for Malicious Content

How a cheap barcode scanner helped fix CrowdStrike'd Windows PCs in a flash

Fatal timeline of CrowdStrike's week from hell Feb to now

~ 24 Jul 2024 ~

Oops. Apple relied on bad code while flaming Google Chrome's Topics ad tech

Uncle Sam opens probe into CrowdStrike turbulence at Delta Air Lines

Zero Trust in the Age of AI: Join our online event to learn how to strengthen your security posture

Robot Dog Internet Jammer

Windows Patch Tuesday update might send a user to the BitLocker recovery screen

Data pilfered from Pentagon IT supplier Leidos

Telegram App Flaw Exploited to Spread Malware Hidden in Videos

How a Trust Center Solves Your Security Questionnaire Problem

A Hacker Ghost Network Is Quietly Spreading Malware on GitHub

This Machine Exposes Privacy Violations

How to Reduce SaaS Spend and Risk Without Impacting Productivity

Patchwork Hackers Target Bhutan with Advanced Brute Ratel C4 Tool

School gets an F for using facial recognition on kids in canteen

CrowdStrike Explains Friday Incident Crashing Millions of Windows Devices

Forget security Google's reCAPTCHA v2 is exploiting users for profit

Microsoft Defender Flaw Exploited to Deliver ACR, Lumma, and Meduza Stealers

CISA Adds Twilio Authy and IE Flaws to Exploited Vulnerabilities List

CrowdStrike blames a test software bug for that giant global mess it made

CrowdStrike blames a test software bug for that giant global mess it made

Security biz KnowBe4 hired fake North Korean techie, who got straight to work ... on evil

Philippines wipes out its legit online gambling industry to take down scammers

~ 23 Jul 2024 ~

How did a CrowdStrike config file crash millions of Windows computers? We take a closer look

Phish-Friendly Domain Registry .top Put on Notice

Administrators have update lessons to learn from the CrowdStrike outage

Protecting AI systems from cyber threats

Cybercrooks spell trouble with typosquatting domains amid CrowdStrike crisis

Alphabet's reported $23B bet on Wiz fizzles out

Chinese Hackers Target Taiwan and US NGO with MgBot Malware