Port 22

~ 20 Jul 2023 ~

Turla's New DeliveryCheck Backdoor Breaches Ukrainian Defense Sector

8 common work-from-home scams to avoid

Ukraine busts bot farm spreading Russian infowar propaganda and fraud

New P2PInfect Worm Targeting Redis Servers on Linux and Windows Systems

Microsoft Expands Cloud Logging to Counter Rising Nation-State Cyber Threats

Adobe Rolls Out New Patches for Actively Exploited ColdFusion Vulnerability

Microsoft Relents, Offers Free Key Logging to All 365 Customers

Infosec Doesn't Know What AI Tools Orgs Are Using

Black Hat Offers PenTesting Certification Exam

~ 19 Jul 2023 ~

Graylog Acquires Resurface.io's API Security Solution

Cloud Range Appoints Cybersecurity Leader Galina Antova to Board of Directors

Checkmarx Announces CheckAI Plugin for ChatGPT to Detect and Prevent Attacks Against ChatGPT-Generated Code

Netskope Launches Managed Service Provider Program

KnowBe4 Partners With Egress to Enhance Organizations' Inbound and Outbound Email Security Defenses

Netcraft Secures First Funding With Over $100M From Spectrum Equity

HyperSense Fraud Management Now Available on Google Cloud

Study: Africa Cybersecurity Improves But Lacks Cross-Border Frameworks

P2P Self-Replicating Cloud Worm Targets Redis

Tech support scammers go analog, ask victims to mail bundles of cash

SophosEncrypt Ransomware Fools Security Researchers

China's APT41 Linked to WyrmSpy, DragonEgg Mobile Spyware

Seed Group Brings Resecurity Options to UAE Region

Practice Your Security Prompting Skills

3 Ways AI Could Improve Authentication

Reducing Security Debt in the Cloud

Expanding cloud logging to give customers deeper security visibility

Comprehensive analysis of initial attack samples exploiting CVE-2023-23397 vulnerability

How to Manage Your Attack Surface?

Leverage Threat Intelligence, AI, and Data at Scale to Boost Cyber Defenses

CISA and NSA Issue New Guidance to Strengthen 5G Network Slicing Against Threats

Chinese APT41 Hackers Target Mobile Devices with New WyrmSpy and DragonEgg Spyware

Exploring the Dark Side: OSINT Tools and Techniques for Unmasking Dark Web Operations

INTERSECT '23: Network Security Summit unveils cutting-edge strategies to safeguard digital assets

Bad.Build Flaw in Google Cloud Build Raises Concerns of Privilege Escalation

Child identity theft: how do I keep my kids personal data safe?

Child identity theft: how do I keep my kids personal data safe?

U.S. Government Blacklists Cytrox and Intellexa Spyware Vendors for Cyber Espionage

Zero-Day Attacks Exploited Critical Vulnerability in Citrix ADC and Gateway

~ 18 Jul 2023 ~

US adds Euro spyware makers to export naughty list

Google Cloud Build Flaw Enables Privilege Escalation, Code Tampering

Pernicious Rootkits Pose Growing Blight On Threat Landscape

VirusTotal Data Leak Affects 5K+ Users

Hacker Infected & Foiled by Own Infostealer

Name That Toon: Shark Sighting

FIN8 Modifies 'Sardonic' Backdoor to Deliver BlackCat Ransomware

Fourth Amendment Is Not for Sale Act Goes Back to Congress

Attackers Pummel Millions of Websites via Critical WooCommerce Payments Flaw

Microsoft Takes Security Copilot AI Assistant to the Next Level

Microsoft Inspire: Partner resources to prepare for the future of security with AI

LeakedSource Owner Quit Ashley Madison a Month Before 2015 Hack

Sogu, SnowyDrive Malware Spreads, USB-Based Cyberattacks Surge

Linux Ransomware Poses Significant Threat to Critical Infrastructure

Recycling giant TOMRA pulls systems offline following 'extensive cyberattack'

Pakistani Entities Targeted in Sophisticated Attack Deploying ShadowPad Malware

WellinTech KingHistorian

Weintek Weincloud

Rockwell Automation Kinetix 5700 DC Bus Power Supply

Keysight N6845A Geolocation Server

Iagona ScrutisWeb

GeoVision GV-ADR2701

GE Digital CIMPLICITY

VirusTotal Data Leak Exposes Some Registered Customers' Details

Disabling Self-Driving Cars with a Traffic Cone

Go Beyond the Headlines for Deeper Dives into the Cybercriminal Underground

FIN8 Group Using Modified Sardonic Backdoor for BlackCat Ransomware Attacks

Protect yourself from ticketing scams ahead of the Premier League Summer Series USA Tour

Protect yourself from ticketing scams ahead of the Premier League Summer Series USA Tour

Owner of BreachForums Pleads Guilty to Cybercrime and Child Pornography Charges

Cybercriminals Exploiting WooCommerce Payments Plugin Flaw to Hijack Websites

JumpCloud Blames 'Sophisticated Nation-State' Actor for Security Breach

Cybercrime big in Asia Pacific

Startup Spotlight: Binarly Hardens Firmware Security

~ 17 Jul 2023 ~

How AI-Augmented Threat Intelligence Solves Security Shortfalls

Quick: Manually patch this Zimbra bug that's under attack

Microsoft 'Logging Tax' Hinders Incident Response, Experts Warn

5 Major Takeaways From Microsoft's July Patch Tuesday

Beijing wants to make the Great Firewall of China even greater

AWS Cloud Credential Stealing Campaign Spreads to Azure, Google Cloud

UAE and South African Hospitals Fail on DMARC Implementation

If George Washington Had a TikTok, What Would His Password Be?

Hackers Exploit WebAPK to Deceive Android Users into Installing Malicious Apps

Tracking Down a Suspect through Cell Phone Records

These 6 Questions Will Help You Choose the Best Attack Surface Management Platform

Malicious USB Drives Targetinging Global Targets with SOGU and SNOWYDRIVE Malware

Cybercriminals Exploit Microsoft Word Vulnerabilities to Deploy LokiBot Malware

CERT-UA Uncovers Gamaredon's Rapid Data Exfiltration Tactics Following Initial Compromise

Why CFOs & CISOs Must Collaborate to Strengthen and Protect Organizations in a Recession

Insider Risk Management Starts With SaaS Security

Boris Johnson pleads ignorance, which just might work

~ 16 Jul 2023 ~

Azure Log Extraction

~ 15 Jul 2023 ~

Nude Videos of Kids From Hacked Baby Monitors Were Sold on Telegram

WormGPT: New AI Tool Allows Cybercriminals to Launch Sophisticated Cyber Attacks

Infosec watchers: TeamTNT crew may blast holes in Azure, Google Cloud users

Microsoft Bug Allowed Hackers to Breach Over Two Dozen Organizations via Forged Azure AD Tokens

~ 14 Jul 2023 ~

Friday Squid Blogging: Balloon Squid

How Hackers Can Hijack a Satellite

SBOMs Still More Mandate Than Security

Cisco Flags Critical SD-WAN Vulnerability

Rogue Azure AD Guests Can Steal Data via Power Apps

Zimbra Zero-Day Demands Urgent Manual Update