Port 22

~ 12 Aug 2023 ~

Google Chrome to shield encryption keys from promised quantum computers

Lolek Bulletproof Hosting Servers Seized, 5 Key Operators Arrested

New Python URL Parsing Flaw Enables Command Injection Attacks

~ 11 Aug 2023 ~

FTX crypto-clown Sam Bankman-Fried couldn't even do house arrest. Now he's in jail

Friday Squid Blogging: NIWA Annual Squid Survey

Security Pressures Mount Around AI's Promises & Peril

DARPA Taps RTX to Attune AI Decisions to Human Values

Fortinet Announces Free Security Awareness Curriculum for K-12 Students Tied to White House's Cyber Initiatives

Microsoft: Codesys PLC bugs could be exploited to 'shut down power plants'

As Phishing Gets Even Sneakier, Browser Security Needs to Step Up

Threat Intelligence Efforts, Investment Lagging, Says Opswat

(Sogou Keyboard)

Maker of Chrome extension with 300,000+ users tells of constant pressure to sell out

XWorm, Remcos RAT Evade EDRs to Infect Critical Infrastructure

GitHubs Hardcore Plan to Roll Out Two-Factor Authentication (2FA)

Researchers Uncover Decade-Long Cyber Espionage on Foreign Embassies in Belarus

What CISA and NSA Guidance Means for Critical Infrastructure Security

Enhancing TLS Security: Google Adds Quantum-Resistant Encryption in Chrome 116

Mobb Wins Black Hat Startup Spotlight Competition

Electoral Commission had internet-facing server with unpatched vuln

20k security folks in the desert Week in security with Tony Anscombe

The Inability to Simultaneously Verify Sentience, Location, and Identity

Magento shopping cart attack targets critical vulnerability revealed in early 2022

Researchers Shed Light on APT31's Advanced Backdoors and Data Exfiltration Tactics

New SystemBC Malware Variant Targets South African Power Company

Black Hat 2023: Cyberwar fire-and-forget-me-not

US Cyber Command boss says China's spooky cyber-skills trail America's

15 New CODESYS SDK Flaws Expose OT Environments to Remote Attacks

CISA Adds Microsoft .NET Vulnerability to KEV Catalog Due to Active Exploitation

Microsoft Expands Cloud Security Posture Management to Google Cloud

What's in New York's 'First Ever' Cyber Strategy?

Brand-New Course LDR521: Security Culture for Leaders

NSA: Codebreaker Challenge Helps Drive Cybersecurity Education

Multiple high severity vulnerabilities in CODESYS V3 SDK could lead to RCE or DoS

~ 10 Aug 2023 ~

Rhysida Ransomware Trains Its Sights on Healthcare Operations

CISA: 'Whirlpool' Backdoor Sends Barracuda ESG Security Down the Drain

Dell Credentials Bug Opens VMWare Environments to Takeover

Cyber Insurance Experts Make a Case for Coverage, Protection

There's a good chance your VPN is vulnerable to privacy-menacing TunnelCrack attack

ESET Research Podcast: Unmasking MoustachedBouncer

Teens Hacked Boston Subways CharlieCard to Get Infinite Free Ridesand This Time Nobody Got Sued

EvilProxy Cyberattack Flood Targets Execs via Microsoft 365

The Hard Realities of Setting AI Risk Policy

SecurityGen Study Highlights Hidden Threat to 5G Mobile Networks From GTP-Based Cyberattacks

Rootly Raises $12M to Help Enterprise IT Teams Resolve Incidents 80 Percent Faster

Osano Secures $25M Series B to Advance Data Privacy Platform

Cybersecurity: It's Time to Trust the Machines

New Attack Alert: Freeze[.]rs Injector Weaponized for XWorm Malware Attacks

New Statc Stealer Malware Emerges: Your Sensitive Data at Risk

Navigating Cybersecurity's Seas: Environmental Regulations, OT & the Maritime Industry's New Challenges

Siemens Solid Edge, JT2Go, and Teamcenter Visualization

Siemens Solid Edge SE2023

Siemens Software Center

Siemens RUGGEDCOM CROSSBOW

Siemens Parasolid Installer

Siemens Parasolid and Teamcenter Visualization

Siemens OpenSSL RSA Decryption in SIMATIC

Siemens JT Open, JT Utilities, and Parasolid

Resource Allocation in Siemens RUGGEDCOM

Network Mirroring in Siemens RUGGEDCOM

Encryption Flaws in Popular Chinese Language App Put Users' Typed Data at Risk

Emerging Attacker Exploit: Microsoft Cross-Tenant Synchronization

Cryptographic Flaw in Libbitcoin Explorer Cryptocurrency Wallet

Focus on DroxiDat/SystemBC

Get your staff's consent before you monitor them, tech inquiry warns

Leaked Yandex Code Breaks Open the Creepy Black Box of Online Advertising

Cybercriminals Increasingly Using EvilProxy Phishing Kit to Target Executives

'MoustachedBouncer' APT Spies on Embassies, Likely via ISPs

MoustachedBouncer: Espionage against foreign diplomats in Belarus

Common TTPs of attacks against industrial organizations

Interpol Busts Phishing-as-a-Service Platform '16Shop,' Leading to 3 Arrests

Zero Trust Blog Series - Blog 2: Architecting for Zero Trust

~ 9 Aug 2023 ~

Nearly every AMD CPU since 2017 vulnerable to Inception data-leak attacks

Panasonic Warns That IoT Malware Attack Cycles Are Accelerating

Hackers Rig Casino Card-Shuffling Machines for Full Control Cheating

DARPA Launches Two-Year Contest to Build AI Tools to Fix Vulnerabilities

LastPass Announces Availability of FIDO2 Authenticators for Passwordless Login

Sweet Security Lands $12M in Seed Funding to Shift Cloud Security Right

Symmetry Systems Closes $17.7M To Scale its AI-Powered Data Security Platform

Checkmarx CISO Study Finds 96% of CISOs Say Their Business Prospects Consider Their Organizations' AppSec Maturity When Making Deal Decisions

Blockchain Signing Bug Cracks Open Crypto Investors' Wallets Worldwide

Black Hat Opens With Call to Steer AI from Predictions to Policy

Windows Defender-Pretender Attack Dismantles Flagship Microsoft EDR

Disposed-of Gadgets Can Lead to Wi-Fi Network Hacks, Kaspersky Says

New LLM Tool Seeks and Remediates Vulnerabilities

It's Time for Cybersecurity to Talk About Climate Change

A Clever Honeypot Tricked Hackers Into Revealing Their Secrets

'Downfall' Bug in Billions of Intel CPUs Reveals Major Design Flaw

Safety of Officers & Civilians of PSNI Compromised in Major Data Breach

Rapid7 prepares to toss 18% of workforce to cut costs

Top 3 Insights I Learned at Recent Cybersecurity Events

C-Suite Cybersecurity Sign-off Hinges on Customer Trust, Digital Opps

OWASP Lead Flags Gaping Hole in Software Supply Chain Security

Sweet Security Debuts Runtime Management for Cloud

Interpol Shuts Down African Cybercrime Group, Seizes $2 Million

New Microsoft Security innovations expand multicloud visibility and enhance multiplatform protection

RedHotel Checks in As Dominant China-Backed Cyberspy Group

Collide+Power, Downfall, and Inception: New Side-Channel Attacks Affecting Modern CPUs

AI Risk Database Tackles AI Supply Chain Risks