Port 22

~ 11 Dec 2023 ~

Playbook: Your First 100 Days as a vCISO - 5 Steps to Success

Webinar Psychology of Social Engineering: Decoding the Mind of a Cyber Attacker

Silent but deadly: The rise of zero-click attacks

VictoriaMetrics takes organic growth over investor pressure

Story of the year: the impact of AI on cybersecurity

SpyLoan Scandal: 18 Malicious Loan Apps Defraud Millions of Android Users

New PoolParty Process Injection Techniques Outsmart Top EDR Solutions

Elevating Linux Security: Why Linux is Essential in Mitigating Critical Risks

A Look at the SANS Sponsorship Program

~ 9 Dec 2023 ~

SLAM Attack: New Spectre-based Vulnerability Impacts Intel, AMD, and Arm CPUs

Hollywood plays unwitting Cameo in Kremlin plot to discredit Zelensky

Researchers Unveal GuLoader Malware's Latest Anti-Analysis Techniques

~ 8 Dec 2023 ~

Competing Section 702 surveillance bills on collision path for US House floor

Friday Squid Blogging: Influencer Accidentally Posts Restaurant Table QR Ordering Code

Assistant Professor, Information Security

New 5G Modems Flaws Affect iOS Devices and Android Models from Major Brands

That call center tech scammer could be a human trafficking victim

N. Korean Kimsuky Targeting South Korean Research Institutes with Backdoor Attacks

New Bluetooth Attack

Surge in deceptive loan apps Week in security with Tony Anscombe

Ransomware-as-a-Service: The Growing Threat You Can't Ignore

Black Hat Europe 2023: The past could return to haunt you

Mac Users Beware: New Trojan-Proxy Malware Spreading via Pirated Software

WordPress Releases Update 6.4.2 to Address Critical Remote Attack Vulnerability

Polish train maker denies claims its software bricked rolling stock maintained by competitor

Founder of Bitzlato Cryptocurrency Exchange Pleads Guilty in Money-Laundering Scheme

Five Eyes nations warn Moscow's mates at the Star Blizzard gang have new phishing targets

~ 7 Dec 2023 ~

Attacks abuse Microsoft DHCP to spoof DNS records and steal secrets

US and EU infosec authorities pen intel-sharing pact

New Microsoft Purview features use AI to help secure and govern all your data

Elijah Wood and Mike Tyson Cameo Videos Were Used in a Russian Disinformation Campaign

End-to-End Encrypted Instagram and Messenger Chats: Why It Took Meta 7 Years

Microsoft Warns of COLDRIVER's Evolving Evading and Credential-Stealing Tactics

Yet another UK public sector data blab, this time info of pregnant women, cancer patients

Spying through Push Notifications

Star Blizzard increases sophistication and evasion in ongoing attacks

Sierra Wireless AirLink with ALEOS firmware

Schweitzer Engineering Laboratories SEL-411L

Mitsubishi Electric FA Engineering Software Products

Johnson Controls Metasys and Facility Explorer

ControlbyWeb Relay

New Bluetooth Flaw Let Hackers Take Over Android, Linux, macOS, and iOS Devices

Hacking the Human Mind: Exploiting Vulnerabilities in the 'First Line of Cyber Defense'

Building a Robust Threat Intelligence with Wazuh

To tap or not to tap: Are NFC payments safer?

Governments May Spy on You by Requesting Push Notifications from Apple and Google

Belgian man charged with smuggling sanctioned military tech to Russia and China

New Stealthy 'Krasue' Linux Trojan Targeting Telecom Firms in Thailand

Meta Launches Default End-to-End Encryption for Chats and Calls on Messenger

Australia building 'top secret' cloud to catch up and link with US, UK intel orgs

Zero Trust Blog Series - Blog 4: Operating for Zero Trust

Leveraging Artificial Intelligence (AI) to Manage Human Risk: Part 6 Analyzing Documents, Charts, and Spreadsheets

~ 6 Dec 2023 ~

Apple and some Linux distros are open to Bluetooth attack

The Binance Crackdown Will Be an 'Unprecedented' Bonanza for Crypto Surveillance

Security Analysis of a Thirteenth-Century Venetian Election Protocol

Police Can Spy on Your iOS and Android Push Notifications

Microsoft Security Copilot drives new product integrations at Microsoft Ignite to empower security and IT teams

Locking down the edge

ICANN Launches Service to Help With WHOIS Lookups

A year on, CISA realizes debunked vuln actually a dud and removes it from must-patch list

Alert: Threat Actors Can Leverage AWS STS to Infiltrate Cloud Accounts

New Report: Unveiling the Threat of Malicious Browser Extensions

Sierra:21 - Flaws in Sierra Wireless Routers Expose Critical Sectors to Cyber Attacks

Navigating privacy: Should we put the brakes on car tracking?

Shielding the data that drives AI

Scaling Security Operations with Automation

Hackers Exploited ColdFusion Vulnerability to Breach Federal Agency Servers

New macOS Trojan-Proxy piggybacking on cracked software

Atlassian Releases Critical Software Fixes to Prevent Remote Code Execution

Atlassian security advisory reveals four fresh critical flaws in mail with dead links

Microsoft issues deadline for end of Windows 10 support it's pay to play for security

Qualcomm Releases Details on Chip Vulnerabilities Exploited in Targeted Attacks

Cisco intros AI to find firewall flaws, warns this sort of thing can't be free

Fancy Bear goes phishing in US, European high-value networks

~ 5 Dec 2023 ~

The 23andMe Data Breach Keeps Spiraling

CISA details twin attacks on federal servers via unpatched ColdFusion flaw

Microsoft Incident Response lessons on preventing cloud identity compromise

DSPM deep dive: debunking data security myths

3 reasons why now is the time to go cloud native for device management

Warning for iPhone Users: Experts Warn of Sneaky Fake Lockdown Mode Attack

Russia's AI-Powered Disinformation Operation Targeting Ukraine, US, and Germany

BlackCat ransomware crims threaten to directly extort victim's customers

The Internet Enabled Mass Surveillance. AI Will Enable Mass Spying.

AI and Mass Spying

Zebra ZTC Industrial ZT400 and ZTC Desktop GK420d

Generative AI Security: Preventing Microsoft Copilot Data Exposure

A New Trick Uses AI to Jailbreak AI ModelsIncluding GPT-4

Beware of predatory fin(tech): Loan sharks use Android apps to reach new depths

It's ba-ack... UK watchdog publishes age verification proposals

15,000 Go Module Repositories on GitHub Vulnerable to Repojacking Attack

BlueNoroff: new Trojan attacking macOS users

New Threat Actor 'AeroBlade' Emerges in Espionage Attack on U.S. Aerospace

Microsoft Warns of Kremlin-Backed APT28 Exploiting Critical Outlook Vulnerability

UK government denies China/Russia nuke plant hack claim

ldr521-security-culture-leaders-challenge-coin

~ 4 Dec 2023 ~

US warns Iranian terrorist crew broke into 'multiple' US water facilities

Hershey phishes! - Crooks snarf chocolate lovers' creds

Protecting credentials against social engineering: Cyberattack Series

Two new versions of OpenZFS fix long-hidden corruption bug

US Lawmakers Want to Use a Powerful Spy Tool on Immigrants and Their Families