Port 22

~ 20 Feb 2024 ~

New Malicious PyPI Packages Caught Using Covert Side-Loading Tactics

Microsoft Is Spying on Users of Its AI Tools

Mitsubishi Electric Electrical Discharge Machines

Ethercat Zeek Plugin

Commend WS203VICM

Insider steals 79,000 email addresses at work to promote own business

SaaS Compliance through the NIST Cybersecurity Framework

New Report Reveals North Korean Hackers Targeting Defense Firms Worldwide

Learn How to Build an Incident Response Playbook Against Scattered Spider in Real-Time

Critical Flaws Found in ConnectWise ScreenConnect Software - Patch Now

Watching out for the fakes: How to spot online disinformation

WordPress Bricks Theme Under Active Attack: Critical Flaw Impacts 25,000+ Sites

Two days into the Digital Services Act, EU wields it to deepen TikTok probe

Iran and Hezbollah Hackers Launch Attacks to Influence Israel-Hamas Narrative

LockBit Ransomware's Darknet Domains Seized in Global Law Enforcement Raid

Vietnam to collect biometrics - even DNA - for new ID cards

LockBit ransomware gang disrupted by global operation

Industrial Control Systems Cyber Threats and the Gulf Region ICS Blog Series: 2 of 3

A Tale of the Three *ishings: Part 1 What is Phishing?

~ 19 Feb 2024 ~

EU Court of Human Rights Rejects Encryption Backdoors

ALPHV gang claims it's the attacker that broke into Prudential Financial, LoanDepot

Meta Warns of 8 Spyware Firms Targeting iOS, Android, and Windows Devices

How to Achieve the Best Risk-Based Alerting (Bye-Bye SIEM)

Anatsa Android Trojan Bypasses Google Play Security, Expands Reach to New Countries

Safeguarding cyber-physical systems for a smart future

The Danger Lurking Just Below Ukraine's Surface

Russian-Linked Hackers Breach 80+ Organizations via Roundcube Flaws

Iranian Hackers Target Middle East Policy Experts with New BASICSTAR Backdoor

Feds post $15 million bounty for info on ALPHV/Blackcat ransomware crew

A Three-Slide Executive Presentation?

~ 18 Feb 2024 ~

Election security threats in 2024 range from AI to anthrax?

FBI's Most-Wanted Zeus and IcedID Malware Mastermind Pleads Guilty

~ 17 Feb 2024 ~

How to Not Get Scammed Out of $50,000

How to weaponize LLMs to auto-hijack websites

How Businesses Can Safeguard Their Communication Channels Against Hackers

Google Open Sources Magika: AI-Powered File Identification Tool

Google open sources file-identifying Magika AI for malware hunters and others

~ 16 Feb 2024 ~

SpaceX Launched Military Satellites Designed to Track Hypersonic Missiles

Friday Squid Blogging: Vegan Squid-Ink Pasta

Leak of Russian Threat Part of a Bid to Kill US Surveillance Reform, Sources Say

Zeus, IcedID malware kingpin faces 40 years in slammer

CISA Warning: Akira Ransomware Exploiting Cisco ASA/FTD Vulnerability

Cyber-insurance and vulnerability scanning Week in security with Tony Anscombe

RustDoor macOS Backdoor Targets Cryptocurrency Firms with Fake Job Offers

Cutting kids off from the dark web the solution can only ever be social

Why We Must Democratize Cybersecurity

Malicious 'SNS Sender' Script Abuses AWS for Bulk Smishing Attacks

U.S. State Government Network Breached via Former Employee's Account

U.S. Government Disrupts Russian-Linked Botnet Engaged in Cyber Espionage

Quest Diagnostics pays $5M after mixing patient medical data with hazardous waste

~ 15 Feb 2024 ~

Elon Musks X Gave Check Marks to Terrorist Group Leaders, Report Says

Feds dismantle Russian GRU botnet built on 1,000-plus home, small biz routers

Pentagon launches nuke-spotting satellites amid Russian space bomb rumors

Mitigating AI security risks

All eyes on AI | Unlocked 403: A cybersecurity podcast

Zoom stomps critical privilege escalation bug plus 6 other flaws

Russian Turla Hackers Target Polish NGOs with New TinyTurla-NG Backdoor

Ivanti Pulse Secure Found Using 11-Year-Old Linux Version and Outdated Libraries

Cybercriminals are stealing iOS users' face scans to break into mobile banking accounts

On the Insecurity of Software Bloat

Siemens Unicam FX

Siemens Tecnomatix Plant Simulation

Siemens SINEC NMS

Siemens Simcenter Femap

Siemens SIMATIC WinCC, OpenPCS

Siemens SIMATIC RTLS Gateways

Siemens SCALANCE W1750D

Siemens SCALANCE SC-600 Family

Siemens Parasolid

Siemens CP343-1 Devices

How Nation-State Actors Target Your Business: New Research Exposes Major SaaS Vulnerabilities

Chinese Hackers Using Deepfakes in Advanced Mobile Banking Malware Attacks

Miscreants turn to ad tech to measure malware metrics

European Court of Human Rights declares backdoored encryption is illegal

Critical Exchange Server Flaw (CVE-2024-21410) Under Active Exploitation

North Korea running malware-laden gambling websites as-a-service

OpenAI shuts down China, Russia, Iran, N Korea accounts caught doing naughty things

~ 14 Feb 2024 ~

China's Volt Typhoon spies broke into emergency network of 'large' US city

US Air Force's new cyber, IT skill recruitment plan: Bring back warrant officer ranks

Prudential Financial finds cybercrims lurking inside its IT systems

Upcoming Speaking Engagements

U.S. Internet Leaked Years of Internal, Customer Emails

Section 702 Surveillance Fight Pits the White House Opposite Reproductive Rights

Romanian hospital ransomware crisis attributed to third-party breach

Microsoft, OpenAI Warn of Nation-State Hackers Weaponizing AI for Cyber Attacks

Ubuntu 'command-not-found' Tool Could Trick Users into Installing Rogue Packages

Southern Water cyberattack expected to hit hundreds of thousands of customers

Improving the Cryptanalysis of Lattice-Based Public-Key Algorithms

Staying ahead of threat actors in the age of AI

Cyber Signals: Navigating cyberthreats and strengthening defenses in the era of AI

Cybersecurity Tactics FinServ Institutions Can Bank On in 2024

Bumblebee Malware Returns with New Tricks, Targeting U.S. Businesses

Bumblebee malware wakes from hibernation, forgets what year it is, attacks with macros

The art of digital sleuthing: How digital forensics unlocks the truth

AI Girlfriends Are a Privacy Nightmare

DarkMe Malware Targets Traders Using Microsoft SmartScreen Zero-Day Vulnerability

Microsoft Rolls Out Patches for 73 Flaws, Including 2 Windows Zero-Days

Australian Tax Office probed 150 staff over social media refund scam

Crims found and exploited these two Microsoft bugs before Redmond fixed 'em

~ 13 Feb 2024 ~

Just one bad DNS packet can bring down a public DNSSEC server