Port 22

~ 15 Jun 2023 ~

Angola Marks Technology Advancements With Cybersecurity Academy Plans

CISA Order Highlights Persistent Risk at Network Edge

Chinese UNC4841 Group Exploits Zero-Day Flaw in Barracuda Email Security Gateway

'Shampoo' ChromeLoader Variant Difficult to Wash Out

Borderless Data vs. Data Sovereignty: Can They Co-Exist?

Vidar Malware Using New Tactics to Evade Detection and Anonymize Activities

Warning: GravityRAT Android Trojan Steals WhatsApp Backups and Deletes Files

SUBNET PowerSYSTEM Center

Siemens Solid Edge

Siemens SINAMICS Medium Voltage Products

Siemens SIMOTION

Siemens SIMATIC WinCC V7

Siemens SIMATIC WinCC

Siemens SIMATIC STEP 7 and Derived Products

Siemens SIMATIC S7-1500 TM MFP BIOS

Siemens SICAM A8000 Devices

Advantech WebAccess/SCADA

New Research: 6% of Employees Paste Sensitive Data into GenAI tools as ChatGPT

New Supply Chain Attack Exploits Abandoned S3 Buckets to Distribute Malicious Binaries

New Report Reveals Shuckworm's Long-Running Intrusions on Ukrainian Organizations

Understanding Malware-as-a-Service

How Shady Chinese Encryption Chips Got Into the Navy, NATO, and NASA

Android GravityRAT goes after WhatsApp backups

Microsoft Warns of New Russian State-Sponsored Hacker Group with Destructive Intent

LockBit Ransomware Extorts $91 Million from U.S. Companies

North Korea created very phishy evil twin of Naver, South Korea's top portal

Network-Security Testing Standard Nears Prime Time

Cryptocurrency Attacks Quadrupled as Cybercriminals Cash In

~ 14 Jun 2023 ~

Decision to hold women-in-cyber events in abortion-banning states sparks outcry

Russian APT 'Cadet Blizzard' Behind Ukraine Wiper Attacks

Illinois Hospital Closure Showcases Ransomware's Existential Threat

XSS Vulnerabilities Found in Microsoft Azure Cloud Services

LockBit victims in the US alone paid over $90m in ransoms since 2020

Moving the Cyber Industry Forward Requires a Novel Approach

Expanding horizonsMicrosoft Securitys continued commitment to multicloud

Chinese Hackers Exploit VMware Zero-Day to Backdoor Windows and Linux Systems

Why Your SEG Could Be Your Email Security Achilles' Heel

Cadet Blizzard emerges as a novel and distinct Russian threat actor

Fortinet: Patched Critical Flaw May Have Been Exploited

Lethal weather

Public preview: Improve Win32 app security via app isolation

Insights Into Nation-State Tactics: Lessons From Russia's Hybrid War In Ukraine

How Popular Messaging Tools Instill a False Sense of Security

Severe Vulnerabilities Reported in Microsoft Azure Bastion and Container Registry

Capita wins 50M fraud reporting contract with City of London cops

Microsoft Fixes 69 Bugs, but None Are Zero-Days

On the Need for an AI Public Option

New Golang-based Skuld Malware Stealing Discord and Browser Data from Windows PCs

Where from, Where to The Evolution of Network Security

Bringing security to account: why identity must be unified

Fake Researcher Profiles Spread Malware through GitHub Repositories as PoC Exploits

Critical Security Vulnerability Discovered in WooCommerce Stripe Gateway Plugin

Microsoft Releases Updates to Patch Critical Flaws in Windows and Other Software

Florida man insists he didn't violate the law by keeping Top Secret docs

~ 13 Jun 2023 ~

Cycode Launches CI/CD Pipeline Monitoring Solution (Cimon) to Prevent Supply Chain Attacks

Analysis: Social Engineering Drives BEC Losses to $50B Globally

Chinese Threat Actor Abused ESXi Zero-Day to Pilfer Files From Guest VMs

Popular Apparel, Clothing Brands Being Used in Massive Phishing Scam

Microsoft Patch Tuesday, June 2023 Edition

June Patch Tuesday: VMware vuln under attack by Chinese spies, Microsoft kinda meh

Harness the Power of PKI to Battle Data Breaches

Systems and Security Technical Lead

Last of the Gozi 3 sentenced over Windows info-stealing malware ops

How Security Leaders Should Approach Cybersecurity Startups

How Microsoft and Sonrai integrate to eliminate attack paths

Beware: New DoubleFinger Loader Targets Cryptocurrency Wallets with Stealer

The commonality of criminal intrusion

Why Critical Infrastructure Remains a Ransomware Target

Over Half of Security Leaders Lack Confidence in Protecting App Secrets, Study Reveals

Adversary-in-the-Middle Attack Campaign Hits Dozens of Global Organizations

Rockwell Automation FactoryTalk Transaction Manager

Rockwell Automation FactoryTalk Services Platform

Rockwell Automation FactoryTalk Edge Gateway

Datalogics Library Third-Party

Identifying the Idaho Killer

UFO Whistleblower, Meet a Conspiracy-Loving Congress

Webinar - Mastering API Security: Understanding Your True Attack Surface

Two Russian Nationals Charged for Masterminding Mt. Gox Crypto Exchange Hack

These Microsoft Office security signatures are 'practically worthless'

Cyber insurance 101: what is it and does my company need it?

Russia-Ukraine war sending shockwaves into cyber-ecosystem

UK telco watchdog Ofcom, Minnesota Dept of Ed named as latest MOVEit victims

China's cyber now aimed at infrastructure, warns CISA boss

Critical FortiOS and FortiProxy Vulnerability Likely Exploited - Patch Now!

India probes medical info 'leak' to Telegram

~ 12 Jun 2023 ~

Unsealed: Charges against Russians blamed for Mt Gox crypto-exchange collapse

Researchers Report First Instance of Automated SaaS Ransomware Extortion

New Loader Delivering Spyware via Image Steals Cryptocurrency Info

Fortinet squashes hijack-my-VPN bug in FortiOS gear

Use of Multifactor Authentication (MFA) Nearly Doubles Since 2020, Okta Secure Sign-in Trends Reports Finds

Posing as journalists, Pink Drainer pilfers $3.3M in crypto

RomCom Threat Actor Targets Ukrainian Politicians, US Healthcare

10 Important Security Tasks You Shouldn't Skip

The US Is Openly Stockpiling Dirt on All Its Citizens

Microsoft stole our stolen dark web data, says security outfit

A Massive Vaccine Database Leak Exposes IDs of Millions of Indians

'Stealth Soldier' Attacks Target Libyan Government Entities With Surveillance Malware

Supply Chain Attack Defense Demands Mature Threat Hunting

Forrester names Microsoft a Leader in the 2023 Enterprise Email Security Wave

Doing Less With Less: Focusing on Value