Port 22

~ 4 Dec 2023 ~

Two new versions of OpenZFS fix long-hidden corruption bug

US Lawmakers Want to Use a Powerful Spy Tool on Immigrants and Their Families

Exposed Hugging Face API tokens offered full access to Meta's Llama 2

New BLUFFS Bluetooth Attack Expose Devices to Adversary-in-the-Middle Attacks

AI and Trust

Make a Fresh Start for 2024: Clean Out Your User Inventory to Reduce SaaS Risk

New P2PInfect Botnet MIPS Variant Targeting Routers and IoT Devices

Kaspersky Security Bulletin 2023. Statistics

Inside America's School Internet Censorship Machine

LogoFAIL: UEFI Vulnerabilities Expose Devices to Stealth Malware Attacks

EU lawmakers finalize cyber security rules that panicked open source devs

New Relic's cyber-something revealed as attack on staging systems, some users

Microsoft Warns of Malvertising Scheme Spreading CACTUS Ransomware

MITREs Updated ATT&CK Framework: What Cloud Defenders Need to Know

~ 3 Dec 2023 ~

How to Not Get Hacked by a QR Code

~ 2 Dec 2023 ~

ChatGPT Spit Out Sensitive Data When Told to Repeat Poem Forever

Agent Racoon Backdoor Targets Organizations in Middle East, Africa, and U.S.

Russian Hacker Vladimir Dunaev Convicted for Creating TrickBot Malware

60 US credit unions offline after ransomware infects backend cloud outfit

~ 1 Dec 2023 ~

Friday Squid Blogging: Strawberry Squid in the Galpagos

Apple slaps patch on WebKit holes in iPhones and Macs amid fears of active attacks

When It Comes to January 6 Lawsuits, a Court Splits Donald Trump in Two

UEFI flaws allow bootkits to pwn potentially hundreds of devices using images

US readies prison cell for another Russian Trickbot developer

New FjordPhantom Android Malware Targets Banking Apps in Southeast Asia

Teaching appropriate use of AI tech Week in security with Tony Anscombe

AI Decides to Engage in Insider Trading

Qakbot Takedown Aftermath: Mitigations and Protecting Against Future Threats

Chinese Hackers Using SugarGh0st RAT to Target South Korea and Uzbekistan

Discover How Gcore Thwarted Powerful 1.1Tbps and 1.6Tbps DDoS Attacks

Regulator says stranger entered hospital, treated a patient, took a document ... then vanished

WhatsApp's New Secret Code Feature Lets Users Protect Private Chats with Password

IT threat evolution in Q3 2023. Mobile statistics

IT threat evolution Q3 2023

IT threat evolution in Q3 2023. Non-mobile statistics

U.S. Treasury Sanctions North Korean Kimsuky Hackers and 8 Foreign Agents

Interpol makes first border arrest using Biometric Hub to ID suspect

Zyxel Releases Patches to Fix 15 Flaws in NAS, Firewall, and AP Devices

Andurils New Drone Killer Is Locked on to AI-Powered Warfare

Zero-Day Alert: Apple Rolls Out iOS, macOS, and Safari Patches for 2 Actively Exploited Flaws

Today's 'China is misbehaving online' allegations come from Google, Meta

~ 30 Nov 2023 ~

Uh-oh, update Google Chrome exploit already out there for one of these 6 security holes

Admin of $19M marketplace that sold social security numbers gets 8 years in jail

Extracting GPTs Training Data

Google Fixes a Seventh Zero-Day Flaw in ChromeUpdate Now

Black Basta ransomware operation nets over $100M from victims in less than two years

Google Unveils RETVec - Gmail's New Defense Against Spam and Malicious Emails

Yokogawa STARDOM

The CDC's Gun Violence Research Is in Danger

PTC KEPServerEx

Mitsubishi Electric FA Engineering Software Products

Delta Electronics DOPSoft

This Free Solution Provides Essential Third-Party Risk Management for SaaS

North Korea's Lazarus Group Rakes in $3 Billion from Cryptocurrency Hacks

7 Uses for Generative AI to Enhance Security Operations

CACTUS Ransomware Exploits Qlik Sense Vulnerabilities in Targeted Attacks

Executives behaving badly: 5 ways to manage the executive cyberthreat

Locking down Industrial Control Systems

Weak session keys let snoops take a byte out of your Bluetooth traffic

U.S. Treasury Sanctions Sinbad Cryptocurrency Mixer Used by North Korean Hackers

US lawmakers have Chinese LiDAR on their threat-detection radar

Rogue ex-Motorola techie admits cyberattack on former employer, passport fraud

~ 29 Nov 2023 ~

Uncle Sam probes cyberattack on Pennsylvania water system by suspected Iranian crew

Okta: Breach Affected All Customer Support Users

Okta data breach dilemma dwarfs earlier estimates

Okta Breach Impacted All Customer Support UsersNot 1 Percent

Iranian Hackers Exploit PLCs in Attack on Water Authority in U.S.

British Library begins contacting customers as Rhysida leaks data dump

Breaking Laptop Fingerprint Sensors

OpenAIs Custom Chatbots Are Leaking Their Secrets

UK government rings the death knell for SIM farms

Very precisely lost GPS jamming

200+ Malicious Android Apps Targeting Iranian Banks: Experts Warn

Brit borough council apologizes for telling website users to disable HTTPS

Discover Why Proactive Web Security Outsmarts Traditional Antivirus Solutions

Japan's space agency suffers cyber attack, points finger at Active Directory

Okta Discloses Broader Impact Linked to October 2023 Support System Breach

DJVU Ransomware's Latest Variant 'Xaro' Disguised as Cracked Software

GoTitan Botnet Spotted Exploiting Recent Apache ActiveMQ Vulnerability

Zero-Day Alert: Google Chrome Under Active Attack, Exploiting New Vulnerability

~ 28 Nov 2023 ~

Plex sharing streaming habits raises privacy hackles

Digital Car Keys Are Coming

A Civil Rights Firestorm Erupts Around a Looming Surveillance Power Grab

Forrester names Microsoft Intune a Leader in the 2023 Forrester Wave for Unified Endpoint Management

ID Theft Service Resold Access to USInfoSearch Data

Elon Musk Is Giving QAnon Believers Hope Just in Time for the 2024 Elections

Helping companies defend what attackers want most - their data

The Hundred-Year Battle for Indias Radio Airwaves

Europol shutters ransomware operation with kingpin arrests

Transform Your Data Security Posture Learn from SoFi's DSPM Success

Design Flaw in Google Workspace Could Let Attackers Gain Unauthorized Access

Mitsubishi Electric GX Works2

Franklin Electric Fueling Systems Colibri

Delta Electronics InfraSuite Device Master

Spyware Targeting Against Serbian Civil Society

How Hackers Phish for Your Users' Credentials and Sell Them

Telegrams Bans on Extremist Channels Aren't Really Bans

Key Cybercriminals Behind Notorious Ransomware Families Arrested in Ukraine

Retail at risk: Top threats facing retailers this holiday season

Submission to the Standing Committee on Public Safety and National Security: Charter analysis concerning cybersecurity and telecommunications reform in Bill C-26