Port 22

~ 26 Sep 2023 ~

ROBOT crypto attack on RSA is back as Marvin arrives

New security features in Windows 11 protect users and empower IT

4 Pillars for Building a Responsible Cybersecurity Disclosure Program

ShadowSyndicate: A New Cybercrime Group Linked to 7 Ransomware Families

Chad Taps Huawei for Digital Modernization Project

Amidst MGM, Caesar's Incidents, Attackers Focus on Luxury Hotels

MOVEit breach delivers bundle of 3.4 million baby records

Proactive Security: What It Means for Enterprise Security Strategy

Essential Guide to Cybersecurity Compliance

Xenomorph Banking Trojan: A New Variant Targeting 35+ U.S. Financial Institutions

Signal Will Leave the UK Rather Than Add a Backdoor

Threat Report: The High Tech Industry Targeted the Most with 46% of NLX-Tagged Attack Traffic

Chinese Hackers TAG-74 Targets South Korean Organizations in a Multi-Year Campaign

Can open-source software be secure?

Ukraine accuses Russian spies of hunting for war-crime info on its servers

Critical JetBrains TeamCity Flaw Could Expose Source Code and Build Pipelines to Attackers

~ 25 Sep 2023 ~

When It Comes to Email Security, The Cloud You Pick Matters

Xenomorph Android Malware Targets Customers of 30 US Banks

MOVEit Flaw Leads to 900 University Data Breaches

UAE-Linked 'Stealth Falcon' APT Mimics Microsoft in Homoglyph Attack

Satellite Images Show the Devastating Cost of Sudans Aerial War

Mixin suspends deposits and withdrawals after $200m cryptocurrency heist

The Hot Seat: CISO Accountability in a New Era of SEC Regulation

Ukrainian Military Targeted in Phishing Campaign Leveraging Drone Manuals

Cyber Hygiene: A First Line of Defense Against Evolving Cyberattacks

Watch the Webinar AI vs. AI: Harnessing AI Defenses Against AI-Powered Risks

Are You Willing to Pay the High Cost of Compromised Credentials?

Your Bosss Spyware Could Train AI to Replace You

A Tricky New Way to Sneak Past Repressive Internet Censorship

From Watering Hole to Spyware: EvilBamboo Targets Tibetans, Uyghurs, and Taiwanese

Don't Get Burned by CAPTCHAs: A Recipe for Accurate Bot Protection

New Report Uncovers Three Distinct Clusters of China-Nexus Attacks on Southeast Asian Government

T-mobile US exposes some customer data but don't call it a breach

Summary of the New SEC Rules and Regulations

~ 23 Sep 2023 ~

The Shocking Data on Kia and Hyundai Thefts in the US

Deadglyph: New Advanced Backdoor with Distinctive Malware Tactics

Apple and Chrome Zero-Days Exploited to Hack Egyptian ex-MP with Predator Spyware

ASPM Is Good, But It's Not a Cure-All for App Security

~ 22 Sep 2023 ~

LastPass: Horse Gone Barn Bolted is Strong Password

ESET's cutting-edge threat research at LABScon Week in security with Tony Anscombe

Friday Squid Blogging: New Squid Species

Stealth Falcon preying over Middle Eastern skies with Deadglyph

Recast Software Acquires Liquit, Consolidating the Endpoint and Application Management Markets

ClassLink Provides Cybersecurity Training Course to Help Schools Protect Public Directory Data

Wing Security Launches Compliance-Grade SaaS Security Solution for Just $1.5K

Latest Acquisition Powers AI-based Network Detection and Response and Open XDR Capabilities for WatchGuard

Apple squashes security bugs after iPhone flaws exploited by Predator spyware

TikTok API Rules Stymie Analysis of US User Data, Academics Say

Hackers Let Loose on Voting Gear Ahead of US Election Season

Akira Ransomware Mutates to Target Linux Systems, Adds TTPs

PREDATOR IN THE WIRES: Ahmed Eltantawy Targeted with Predator Spyware After Announcing Presidential Ambitions

NFL, CISA Look to Intercept Cyber Threats to Super Bowl LVIII

Apple Fixes 3 More Zero-Day Vulnerabilities

MGM, Caesars Cyberattack Responses Required Brutal Choices

Bot Swarm: Attacks From Middle East & Africa Are Notably Up

New Variant of Banking Trojan BBTok Targets Over 40 Latin American Banks

Guardians of the Cyberverse: Building a Resilient Security Culture

Do CISOs Have to Report Security Flaws to the SEC?

How to Interpret the 2023 MITRE ATT&CK Evaluation Results

Iranian Nation-State Actor OilRig Targets Israeli Organizations

High-Severity Flaws Uncovered in Atlassian Products and ISC BIND Server

ESA gets the job of building Europe's secure satcomms network

Apple Rushes to Patch 3 New Zero-Day Flaws: iOS, macOS, Safari, and More Vulnerable

Building the Human Risk Dream Team

A Visual Summary of SANS OSINT Summit 2023