Port 22

~ 15 Jan 2024 ~

Ransomware protection deconstructed

High-Severity Flaws Uncovered in Bosch Thermostats and Smart Nutrunners

Balada Injector Infects Over 7,100 WordPress Sites Using Plugin Vulnerability

DDoS Attacks on the Environmental Services Industry Surge by 61,839% in 2023

China loathes AirDrop so much it's publicized an old flaw in Apple's P2P protocol

Ransomware Cases Increased Greatly in 2023

~ 14 Jan 2024 ~

Upcoming Speaking Engagements

New Findings Challenge Attribution in Denmark's Energy Sector Cyberattacks

~ 13 Jan 2024 ~

A Bloody Pig Mask Is Just Part of a Wild New Criminal Charge Against eBay

Critical RCE Vulnerability Uncovered in Juniper SRX Firewalls and EX Switches

29-Year-Old Ukrainian Cryptojacking Kingpin Arrested for Exploiting Cloud Services

Number of orgs compromised via Ivanti VPN zero-days grows as Mandiant weighs in

~ 12 Jan 2024 ~

Why we update... Data-thief malware exploits SmartScreen on unpatched Windows PCs

Friday Squid Blogging: Giant Squid from Newfoundland in the 1800s

Mobile security vulnerabilities threaten millions in Latin America: ICFP and Citizen Lab fellow Beau Kujath finds security vulnerabilities in mobile applications in Latin America region.

Exploit for under-siege SharePoint vuln reportedly in hands of ransomware crew

How to Stop Your X Account From Getting Hacked Like the SEC's

Secret multimillion-dollar cryptojacker snared by Ukrainian police

Microsoft is named a Leader in the 2023 Gartner Magic Quadrant for Endpoint Protection Platforms

Secure network operations for hybrid working

Lessons from SEC's X account hack Week in security with Tony Anscombe

Nation-State Actors Weaponize Ivanti VPN Zero-Days, Deploying 5 Malware Families

Medusa Ransomware on the Rise: From Data Leaks to Multi-Extortion

So, are we going to talk about how GitHub is an absolute boon for malware, or nah?

Urgent: GitLab Releases Patch for Critical Vulnerabilities - Update ASAP

Applying the Tyson Principle to Cybersecurity: Why Attack Simulation is Key to Avoiding a KO

On IoT Devices and Software Liability

Data regulator fines HelloFresh 140k for sending 80M+ spams

While we fire the boss, can you lock him out of the network?

Cryptominers Targeting Misconfigured Apache Hadoop and Flink with Rootkit in New Attacks

Drivers: We'll take that plain dumb car over a flashy data-spilling internet one, thanks

Act Now: CISA Flags Active Exploitation of Microsoft SharePoint Vulnerability

~ 11 Jan 2024 ~

eBay to cough up $3M after cyber-stalking couple who dared criticize the souk

Mandiant's brute-forced X account exposes perils of skimping on 2FA

Threat Actors Increasingly Abusing GitHub for Malicious Purposes

Infoseccers think attackers backed by China are behind Ivanti zero-day exploits

New PoC Exploit for Apache OfBiz Vulnerability Poses Risk to ERP Systems

New Python-based FBot Hacking Toolkit Aims at Cloud and SaaS Platforms

Child Abusers Are Getting Better at Using Crypto to Cover Their Tracks

Pharmacies Giving Patient Records to Police without Warrants

US School Shooter Emergency Plans Exposed in a Highly Sensitive Database Leak

Siemens Teamcenter Visualization and JT2Go

Siemens Spectrum Power 7

Siemens Solid Edge

Siemens SIMATIC CN 4100

Siemens SIMATIC

Siemens SICAM A8000

Schneider Electric Easergy Studio

Rapid Software LLC Rapid SCADA

Horner Automation Cscape

There is a Ransomware Armageddon Coming for Us All

Atomic Stealer Gets an Upgrade - Targeting Mac Users with Encrypted Payload

A peek behind the curtain: How are sock puppet accounts used in OSINT?

Mandiant's X Account Was Hacked Using Brute-Force Attack

Chinese Hackers Exploit Zero-Day Flaws in Ivanti Connect Secure and Policy Secure

Cisco Fixes High-Risk Vulnerability Impacting Unity Connection Software

~ 10 Jan 2024 ~

Fidelity National now says 1.3M customers had data stolen by cyber-crooks

US government tells hospitals: Meet security standards or no federal dollars for you

Be honest. Would you pay off a ransomware crew?

Cybercrooks play dress-up as 'helpful' researchers in latest ransomware ruse

5 ways to secure identity and access for 2024

Lawmakers Are Out for Blood After a Hack of the SECs X Account Causes Bitcoin Chaos

ShinyHunters chief phisherman gets 3 years, must cough up $5M

NoaBot: Latest Mirai-Based Botnet Targeting SSH Servers for Crypto Mining

Heres Some Bitcoin: Oh, and Youve Been Served!

Facial Scanning by Burger King in Brazil

Getting off the Attack Surface Hamster Wheel: Identity Can Help

Free Decryptor Released for Black Basta and Babuk's Tortilla Ransomware Victims

Attack of the copycats: How fake messaging apps and app mods could bite you

FTC Bans Outlogic (X-Mode) From Selling Sensitive Location Data

Microsoft's January 2024 Windows Update Patches 48 New Vulnerabilities

CISA Flags 6 Vulnerabilities - Apple, Apache, Adobe , D-Link, Joomla Under Attack

~ 9 Jan 2024 ~

New year, new bugs in Windows, Adobe, Android, more to be fixed

The SEC's Official X Account Was Compromised and Used to Post Fake Bitcoin News

SEC Twitter hijacked to push fake news of hotly anticipated Bitcoin ETF approval

US Navy sailor swaps sea for cell after accepting bribes from Chinese snoops

Alert: Water Curupira Hackers Actively Distributing PikaBot Loader Malware

Turkish Hackers Exploiting Poorly Secured MS SQL Servers Across the Globe

And that's a wrap for Babuk Tortilla ransomware as free decryptor released

PIN-Stealing Android Malware

Why Public Links Expose Your SaaS Attack Surface

Love is in the AI: Finding love online takes on a whole new meaning

Alert: New Vulnerabilities Discovered in QNAP and Kyocera Device Manager

Beware! YouTube Videos Promoting Cracked Software Distribute Lumma Stealer

Cloud Attacks: Whats New is New Part 2

~ 8 Jan 2024 ~

Meet Ika & Sal: The Bulletproof Hosting Duo from Hell

Apache OFBiz zero-day pummeled by exploit attempts after disclosure

Syrian Hackers Distributing Stealthy C#-Based Silver RAT to Cybercriminals

British Library: Finances remain healthy as ransomware recovery continues

Second Interdisciplinary Workshop on Reimagining Democracy

Unifying Security Tech Beyond the Stack: Integrating SecOps with Managed Risk and Strategy

Webinar Leverage Zero Trust Security to Minimize Your Attack Surface

NIST Warns of Security and Privacy Risks from Rapid AI System Deployment

Facebook, Instagram now mine web links you visit to fuel targeted ads

DoJ Charges 19 Worldwide in $68 Million xDedic Dark Web Marketplace Fraud

North Korea's Cyber Heist: DPRK Hackers Stole $600 Million in Cryptocurrency in 2023

~ 6 Jan 2024 ~

23andMe Blames Users for Recent Data Breach as It's Hit With Dozens of Lawsuits

Ransomware payment ban: Wrong idea at the wrong time

Cracking the 2023 SANS Holiday Hack Challenge

Sea Turtle Cyber Espionage Campaign Targets Dutch IT and Telecom Companies