Port 22

~ 22 Aug 2023 ~

Apple's defense against apps vandalizing other apps still broken, developer claims

New Variant of XLoader macOS Malware Disguised as 'OfficeNote' Productivity App

Ivanti Warns of Critical Zero-Day Flaw Being Actively Exploited in Sentry Software

Critical Adobe ColdFusion Flaw Added to CISA's Exploited Vulnerability Catalog

Ivanti Issues Fix for Critical Vuln In Its Sentry Gateway Technology

Ivanti Sentry exploited in the wild, patches emitted

New NCUA Rule Requires Credit Unions to Report Cyberattacks Within 3 Days

~ 21 Aug 2023 ~

Uncle Sam: Rest of the world would love to steal our space blueprints don't let 'em

Tesla Data Breach Investigation Reveals Inside Job

Fed Warning: US Space Industry Subject To Foreign Spying, Disruptions

Energy One Investigates Cyberattack

Leak of 75k employee records was insiders' fault, claims Tesla

Generative AI Is Scraping Your Data. So, Now What?

New WinRAR Vulnerability Could Allow Hackers to Take Control of Your PC

High severity vuln in WinRAR could allow code to run when files are opened

DEF CON's AI Village Pits Hackers Against LLMs to Find Flaws

The Most Popular Digital Abortion Clinics, Ranked by Data Privacy

How to Investigate an OAuth Grant for Suspicious Activity or Overly Permissive Scopes

White House Announces AI Cybersecurity Challenge

This Malware Turned Thousands of Hacked Windows and macOS PCs into Proxy Servers

A Bards Tale how fake AI bots try to install malware

Last rites for the UK's Online Safety Bill, an idea too stupid to notice it's dead

Visibility Is Just Not Enough to Secure Operational Technology Systems

HiatusRAT Malware Resurfaces: Taiwan Firms and U.S. Military Under Attack

Microsoft DNS boo-boo breaks Hotmail for users around the globe

~ 20 Aug 2023 ~

Google's New Feature Ensures Your Pixel Phone Hasn't Been Hacked. Heres How It Works

Interpol arrests 14 who allegedly scammed $40m from victims in 'cyber surge'

~ 19 Aug 2023 ~

Security News This Week: US Energy Firm Targeted With Malicious QR Codes in Mass Phishing Attack

WoofLocker Toolkit Hides Malicious Codes in Images to Run Tech Support Scams

New Juniper Junos OS Flaws Expose Devices to Remote Attacks - Patch Now

Thousands of Android Malware Apps Using Stealthy APK Compression to Evade Detection

Hope for the Best, Prepare for the Worst: How to prepare for cloud DFIR

~ 18 Aug 2023 ~

FYI: There's another BlackCat ransomware variant on the prowl

Friday Squid Blogging: Squid Brand Fish Sauce

CyCognito Finds Large Volume of Personal Identifiable Information in Vulnerable Cloud and Web Applications

ProjectDiscovery Announces $25M Series A Financing and Launch of Cloud Platform

Phishing Attack Targets Hundreds of Zimbra Customers in Four Continents

CISA Committee Tackles Remote Monitoring and Management Protections

Securonix: Making Sense of AIs Rapid Acceleration in Cybersecurity

Hubble Urges Customers, Security Pros to Return to Infosec Basics

Fortra Joins With Microsoft, Health-ISAC to Combat Cobalt Blue Fraud

Cyderes Dives In On Working Safely With AI and Upping Your IAM Game

Comcast: How to Wrap Enterprise Cybersecurity In the Data Fabric

Bugcrowd Unleashes Hacker Ingenuity for Proactive, Crowdsourced Security

AT&T: How Secure Edge Computing Is Poised to Reshape Healthcare

App Security Posture Management Improves Software Security, Synopsys Says

Tel Aviv Stock Exchange CISO: Making Better Use Of Your SIEM

Time To Address Whats Undermining SaaS Security, AppOmni Says

Expand Your Definition of Endpoint, Get a Better Handle On Cloud Threats

PKI Maturity Model Aims to Improve Crypto Infrastructure

African Cybercrime Operations Shut Down in Law Enforcement Operation

Unveiling the Hidden Risks of Routing Protocols

14 Suspected Cybercriminals Arrested Across Africa in Coordinated Crackdown

The Vulnerability of Zero Trust: Lessons from the Storm 0558 Hack

New Wave of Attack Campaign Targeting Zimbra Email Users for Credential Theft

Bots Are Better than Humans at Solving CAPTCHAs

New BlackCat Ransomware Variant Adopts Advanced Impacket and RemCom Tools

Evacuation of 30,000 hackers Week in security with Tony Anscombe

DEF CON 31: US DoD urges hackers to go and hack AI

Google Chrome's New Feature Alerts Users About Auto-Removal of Malicious Extensions

Fastly Launches Certainly CA

A Visual Summary of SANS Cloud Security Exchange 2023

Add 'writing malware' to the list of things generative AI is not very good at doing

Confusion Surrounds SEC's New Cybersecurity Material Rule

~ 17 Aug 2023 ~

Don't just patch your Citrix gear, check for intrusion: Two bugs exploited in wild

Sophos: Royal Is Trying to Make Itself the King of Ransomware

Israel-US Binational Industrial R&D Foundation to Invest $3.85M in Critical Infrastructure Cybersecurity Projects

Intelligent Vigilance: Empowering Security with Threat Intel's CoPilot AI

Cisco: Bringing More Intelligence to Bear on the Threat Landscape

ISC2 Announces Milestone As Community Grows to Half a Million

Foretrace Announces Launch of "Tim," Generative AI Analyst for Assessing and Responding to Data Leaks

How To Protect Against Nation-State APT Attackers Leveraging Mobile Users

Securing Critical Infrastructure in the Face of Evolving Cyber Threats

CrowdSec: What the Network Effect Brings to the Cybersecurity Table

Bitsight Leverages SPM To Bolster External Attack Surface Security

TXOne: How to Improve Your Operational Technology Security Posture

Infoblox Blows Whistle On Decoy Dog, Advocates For Better DNS Monitoring

Cribl, Exabeam Partner on Threat Detection, Investigation, and Response

Qualys Offers Threat Forecast For Cloud, and Tips For Reducing Cloud Risks

Interpres: Getting the Most Out of Threat Intelligence Resources

Normalyze: How Focusing On Data Can Improve Cloud Security

Karma Catches Up to Global Phishing Service 16Shop

White House Orders Federal Agencies to Bolster Cyber Safeguards

Researchers Trick an iPhone Into Faking Airplane Mode

An Overview of Dubai's First and Second Cybersecurity Strategy

LinkedIn Suffers 'Significant' Wave of Account Hacks

NoFilter Attack: Sneaky Privilege Escalation Method Bypasses Windows Security

China-Linked Bronze Starlight Group Targeting Gambling Sector with Cobalt Strike Beacons

'Play' Ransomware Group Targeting MSPs Worldwide in New Campaign

New LABRAT Campaign Exploits GitLab Flaw for Cryptojacking and Proxyjacking Activities

New Apple iOS 16 Exploit Enables Stealthy Cellular Access Under Fake Airplane Mode

How Innovation Accelerators Are at Work on the Dark Side

Cyber Defenders Lead the AI Arms Race for Now

Cyber Defenders Lead the AI Arms Race for Now

Man arrested in Northern Ireland police data leak as more incidents come to light

Walchem Intuition 9

Schneider Electric PowerLogic ION7400 / PM8000 / ION8650 / ION8800 / ION9000 Power Meters

ICONICS and Mitsubishi Electric Products

Why You Need Continuous Network Monitoring?

Detecting Violations of Social Norms in Text with AI