Port 22

~ 10 Nov 2023 ~

Ducktail fashion week

ICBC hit by ransomware impacting global trades

This New Tool Aims to Keep Terrorism Content Off the Internet

Iran-Linked Imperial Kitten Cyber Group Targeting Middle East's Tech Sectors

Stealthy Kamran Spyware Targeting Urdu-speaking Users in Gilgit-Baltistan

~ 9 Nov 2023 ~

'BlazeStealer' Python Malware Allows Complete Takeover of Developer Machines

MOVEit Hackers Pivot to SysAid Zero-Day in Ransomware Attacks

Heres How Violent Extremists Are Exploiting Generative AI Tools

Treasury Markets Disrupted by ICBC Ransomware Attack

Downfall fallout: Intel knew AVX chips were insecure and did nothing, lawsuit claims

What We Can Learn from Major Cloud Cyberattacks

Omegle Was Forced to Shut Down by a Lawsuit From a Sexual Abuse Survivor

When Good Security Awareness Programs Go Wrong

How to Outsmart Malware Attacks That Can Fool Antivirus Protection

First Wave of Vulnerability-Fixing AIs Available for Developers

SolarWinds: SEC 'lacks the competence' to regulate cybersecurity

Zero-Day Alert: Lace Tempest Exploits SysAid IT Support Software Vulnerability

Imperial Kitten APT Claws at Israeli Industry with Multiyear Spy Effort

How to Get Facebook Without Adsif Its Available for You

Worldwide Hacktivists Take Sides Over Gaza, With Little to Show for It

There's Only One Way to Solve the Cybersecurity Skills Gap

New Malvertising Campaign Uses Fake Windows News Portal to Distribute Malicious Installers

MOVEit cybercriminals unearth fresh zero-day to exploit on-prem SysAid hosts

Online Retail Hack

Microsoft shares threat intelligence at CYBERWARCON 2023

Johnson Controls Quantum HD Unity

Hitachi Energy eSOMS

When Email Security Meets SaaS Security: Uncovering Risky Auto-Forwarding Rules

MuddyC2Go: New C2 Framework Iranian Hackers Using Against Israel

Unlucky Kamran: Android malware spying on Urdu-speaking residents of Gilgit-Baltistan

Modern Asian APT groups tactics, techniques and procedures (TTPs)

Russia's Sandworm not just missile strikes to blame for Ukrainian power blackouts

Sandworm Hackers Caused Another Blackout in UkraineDuring a Missile Strike

Sandworm Cyberattackers Down Ukrainian Power Grid During Missile Strikes

Police Use of Face Recognition Is Sweeping the UK

What to do with a cloud intrusion toolkit in 2023? Slap a chat assistant on it, duh

CISA Alerts: High-Severity SLP Vulnerability Now Under Active Exploitation

Leveraging Artificial Intelligence (AI) to Manage Human Risk: Part 5 Generating Images

Introducing the GX-PT: Redefining Penetration Testing Excellence

~ 8 Nov 2023 ~

Evasive Jupyter Infostealer Campaign Showcases Dangerous Variant

Ransomware Mastermind Uncovered After Oversharing on Dark Web

Microsoft, Meta detail plans to fight election disinformation in 2024

The GOP Presidential Debate Is Livestreaming on Rumble, Home to White Nationalist Nick Fuentes

MGM and Caesars Attacks Highlight Social Engineering Risks

Insights from Microsoft Security Copilot early adopters

CISOs Beware: SEC's SolarWinds Action Shows They're Scapegoating Us

Researchers Uncover Undetectable Crypto Mining Technique on Azure Automation

Atlassian cranks up the threat meter to max for Confluence authorization flaw

WhatsApp Introduces New Privacy Feature to Protect IP Address in Calls

Beware, Developers: BlazeStealer Malware Discovered in Python Packages on PyPI

Decoupling for Security

Monero Project admits thieves stole 6-figure sum from a wallet in mystery breach

This Is the Ops Manual for the Most Tech-Savvy Animal Liberation Group in the US

Guide: How vCISOs, MSPs and MSSPs Can Keep their Customers Safe from Gen AI Risks

Webinar: Kickstarting Your SaaS Security Strategy & Program

Preventing data theft with ADX technology

Bad eIDAS: Europe ready to intercept, spy on your encrypted HTTPS connections

Experts Expose Farnetwork's Ransomware-as-a-Service Business Model

Software Complexity Bedevils Mainframe Security

~ 7 Nov 2023 ~

Risk Ledger Secures 6.25M to Prevent Cyberattacks on the Supply Chains of Nation's Largest Enterprises

Myrror Security Emerges From Stealth With $6M Seed Round to Prevent Attacks on the Software Development Process

Securing Remote Workers Through Zero Trust

Malwarebytes Launches ThreatDown to Empower Resource Constrained IT Organizations

Marina Bay Sands Becomes Latest Hospitality Cyber Victim

Government Surveillance Reform Act of 2023 Seeks to End Warrantless Police and FBI Spying

CVSS 4.0 Offers Significantly More Patching Context

North Korea's BlueNoroff APT Debuts 'Dumbed Down' macOS Malware

Atlassian Bug Escalated to 10, All Unpatched Instances Vulnerable

Internet Blackouts in Gaza Are a New Weapon in the Israel-Hamas War

Crafting an AI Policy That Safeguards Data Without Stifling Productivity

Microsoft likens MFA to 1960s seatbelts, buckles admins in yet keeps eject button

Iran-Linked Agrius APT Group Targets Israeli Education, Tech Sectors

Digital security sessions at Microsoft Ignite to prepare you for the era of AI

YouTube's Ad Blocker Detection Believed to Break EU Privacy Law

UK may demand tech world tell it about upcoming security features

Identity Alone Won't Save Us: The TSA Paradigm and MGM's Hack

Fresh find shines new light on North Koreas latest macOS malware

N. Korean BlueNoroff Blamed for Hacking macOS Machines with ObjCShellz Malware

New GootLoader Malware Variant Evades Detection and Spreads Rapidly

Spaf on the Morris Worm

GE MiCOM S1 Agile

GE MiCOM S1 Agile

Confidence in File Upload Security is Alarmingly Low. Why?

What a Bloody San Francisco Street Brawl Tells Us About the Age of Citizen Surveillance

Offensive and Defensive AI: Lets Chat(GPT) About It

SideCopy Exploiting WinRAR Flaw in Attacks Targeting Indian Government Entities

Experts Warn of Ransomware Hackers Exploiting Atlassian and Apache Flaws

Intensified Israeli Surveillance Has Put the West Bank on Lockdown

Critical Flaws Discovered in Veeam ONE IT Monitoring Software Patch Now

Woman jailed after Rentahitman.com assassin turned out to be surprise FBI

~ 6 Nov 2023 ~

Steps to Follow to Comply With the SEC Cybersecurity Disclosure Rule

Kinsing Cyberattackers Debut 'Looney Tunables' Cloud Exploits

ICE faces heat after agents install thousands of personal apps, VPNs on official phones

Gootloader Aims Malicious, Custom Bot Army at Enterprise Networks

Virtual Kidnapping: AI Tools Are Enabling IRL Extortion Scams

Novel Google Cloud RAT Uses Calendar Events for C2

Aqua Security Introduces Industry-First Kubernetes Vulnerability Scanning With Trivy KBOM

Excelsior University Contends for National Cyber League Competition Title

US Sanctions Ryuk Ransomwares Russian Money Launderer

Name That Edge Toon: Out for the Count