Port 22

~ 6 Nov 2023 ~

Middle East's 5G Acceleration May Pose Serious Security Issues

New Jupyter Infostealer Version Emerges with Sophisticated Stealth Tactics

Automatic Conditional Access policies in Microsoft Entra streamline identity protection

QNAP Releases Patch for 2 Critical Flaws Threatening Your NAS Devices

US slaps sanctions on accused fave go-to money launderer of Russia's rich

Meet Your New Cybersecurity Auditor: Your Insurer

Crashing iPhones with a Flipper Zero

SecuriDropper: New Android Dropper-as-a-Service Bypasses Google's Defenses

Okta breach affected 134 orgs, 'or less than 1%' of customers, company admits

Whos Behind the SWAT USA Reshipping Service?

Securing frontline Operational Technology environments

Iranian Hackers Launches Destructive Cyberattacks on Israeli Tech and Education Sectors

Navigating the security and privacy challenges of large language models

Gaming-related cyberthreats in 2023: Minecrafters targeted the most

Google Warns How Hackers Could Abuse Calendar Service as a Covert C2 Channel

Sky's the Limit, but What About API Security? Challenges in the Cloud-First Era

Keep Your Organization's APIs Protected This Holiday Season

U.S. Treasury Targets Russian Money Launderer in Cybercrime Crackdown

Next Generation FOR572: Advanced Network Forensics: Threat Hunting, Analysis, and Incident Response

~ 4 Nov 2023 ~

This Cheap Hacking Device Can Crash Your iPhone With Pop-Ups

StripedFly Malware Operated Unnoticed for 5 Years, Infecting 1 Million Devices

'Corrupt' cop jailed for tipping off pal to EncroChat dragnet

Okta's Recent Customer Support Data Breach Impacted 134 Customers

Google Play Store Introduces 'Independent Security Review' Badge for Apps

~ 3 Nov 2023 ~

To Improve Cyber Defenses, Practice for Disaster

Critical Atlassian Bug Exploit Now Available; Immediate Patching Needed

Friday Squid Blogging: Eating Dancing Squid

Ace Hardware Still Reeling From Weeklong Cyberattack

81K people's sensitive info feared stolen from Hilb after email inboxes ransacked

Okta Customer Support Breach Exposed Data on 134 Companies

Ex-GCHQ software dev jailed for stabbing NSA staffer

'KandyKorn' macOS Malware Lures Crypto Engineers

Somebody Just Killed the Mozi Botnet

Microsoft pins hopes on AI once again this time to patch up Swiss cheese security

Spyware Designed for Telegram Mods Also Targets WhatsApp Add-Ons

Ransomware Readiness Assessments: One Size Doesn't Fit All

The mysterious demise of the Mozi botnet Week in security with Tony Anscombe

Kinsing Actors Exploiting Recent Linux Flaw to Breach Cloud Environments

Considerations for Managing Digital Sovereignty: The Executive Perspective

NodeStealer Malware Hijacking Facebook Business Accounts for Malicious Ads

Predictive AI in Cybersecurity: Outcomes Demonstrate All AI is Not Created Equally

UK data watchdog fines three text spammers for flouting electronic marketing rules

New York Increases Cybersecurity Rules for Financial Companies

CanesSpy Spyware Discovered in Modified WhatsApp Versions

48 Malicious npm Packages Found Deploying Reverse Shells on Developer Systems

Oracle Enables MFA by Default on Oracle Cloud

FTX crypto-villain Sam Bankman-Fried convicted on all charges

~ 2 Nov 2023 ~

Okta Data Compromised Through Third-Party Vendor

Attackers Target Max-Severity Apache ActiveMQ Bug to Drop Ransomware

How Do We Truly Make Security 'Everyone's Responsibility'?

Russian Reshipping Service SWAT USA Drop Exposed

Upgraded Kazuar Backdoor Offers Stealthy Power

Infosec pros can secure IT, but have harder time securing job satisfaction

Saudi Aramco CEO Warns of New Threat of Generative AI

Critical Apache ActiveMQ flaw under attack by 'clumsy' ransomware crims

Okta tells 5,000 of its own staff that their data was accessed in third-party breach

Microsoft Does Damage Control With Its New 'Secure Future Initiative'

Announcing Microsoft Secure Future Initiative to advance security engineering

'Scarred Manticore' Unleashes the Most Advanced Iranian Cyber Espionage Yet

Threat Prevention Begins With IT & Security Team Collaboration

Mysterious Kill Switch Disrupts Mozi IoT Botnet Operations

Weintek EasyBuilder Pro

Schneider Electric SpaceLogic C-Bus Toolkit

Red Lion Crimson

Mitsubishi Electric MELSEC Series

Mitsubishi Electric MELSEC iQ-F Series CPU Module

Franklin Fueling System TS-550

Spyware in India

The UN Hired an AI Company to Untangle the Israeli-Palestinian Crisis

WhatsApp spy mod spreads through Telegram, attacks Arabic-speaking users

Middle East Advances in Generative AI Hold Promise

SaaS Security is Now Accessible and Affordable to All

Iran's MuddyWater Targets Israel in New Spear-Phishing Cyber Campaign

Researchers Find 34 Windows Drivers Vulnerable to Full Device Takeover

FIRST Announces CVSS 4.0 - New Vulnerability Scoring System

HelloKitty Ransomware Group Exploiting Apache ActiveMQ Vulnerability

Boeing acknowledges cyberattack on parts and distribution biz

Dirty dancing grabs the attention of China's cyberspace regulators

FBI boss: Taking away our Section 702 spying powers could be 'devastating'

Boeing Confirms Cyberattack, System Compromise

Leveraging Artificial Intelligence (AI) to Manage Human Risk: Part 4 Advanced Prompt Engineering

Leveraging Artificial Intelligence (AI) to Manage Human Risk: Part 4 Advanced Prompt Engineering

~ 1 Nov 2023 ~

More Than 100 Vulns in Microsoft 365 Tied to SketchUp 3D Library

Ransomware crooks SIM swap medical research biz exec, threaten to leak stolen data

ISC2 Study: Economic Conditions Continue to Sandbag Cyber Hiring

British, Toronto Libraries Struggle After Cyber Incidents

Global AI Cybersecurity Agreement Signed At Turing's Bletchley Park

The New Era of Social Media Looks as Bad for Privacy as the Last One

Mozi botnet murder mystery: China or criminal operators behind the kill switch?

ReasonLabs Unveils RAV VPN for Apple iOS

Proofpoint Signs Definitive Agreement to Acquire Tessian

Graylog Secures $39 Million Investment to Accelerate Growth and Security Product Line Expansion

One Ukraine Company Shares Lessons in Prepping for Wartime Cyber Resilience

A Ukrainian Company Shares Lessons in Wartime Resilience

Doing It Together: Detection and Incident Response with Your Cloud Provider

Feds collar suspected sanctions-busting Russian smugglers of US tech

Atlassian Customers Should Patch Latest Critical Vuln Immediately

3 Ways to Close the Cybersecurity Skills Gap Now

FBI Director Warns of Increased Iranian Attacks

Critical vulnerability in F5 BIG-IP under active exploitation