Port 22

~ 1 Aug 2023 ~

Researchers Expose Space Pirates' Cyber Campaign Across Russia and Serbia

Quantum computing: Will it break crypto security within a few years?

China's APT31 Suspected in Attacks on Air-Gapped Systems in Eastern Europe

US military battling cyber threats from within and without

China bans export of drones some countries have already banned anyway

Cybercriminals Renting WikiLoader to Target Italian Organizations with Banking Trojan

~ 31 Jul 2023 ~

What Implementing Biometrics for Authentication Looks Like

Protecting Intellectual Property When It Needs to Be Shared

China's Volt Typhoon APT Burrows Deeper into US Critical Infrastructure

White House: Losing Section 702 spy powers would be among 'worst intelligence failures of our time'

Air-Gapped ICS Systems Targeted by Sophisticated Malware

Abyss Locker Ransomware Looks to Drown VMware's ESXi Servers

Call of Duty Self-Spreading Worm Takes Aim at Player Lobbies

Israeli Oil Refinery Taken Offline by Pro-Iranian Attackers

Best Practices for Enterprise Private 5G Security

New P2PInfect Worm Targets Redis Servers with Undocumented Breach Methods

Summer Documentary Watch Party: 8 Sizzling Cybersecurity Tales

Patchwork Hackers Target Chinese Research Organizations Using EyeShell Backdoor

Hikvision and Nvidia named in contract for Uyghur detection

Webinar: Riding the vCISO Wave: How to Provide vCISO Services

Automatically Finding Prompt Injection Attacks

Apple iOS, Google Android Patch Zero-Days in July Security Updates

AVRecon Botnet Leveraging Compromised Routers to Fuel Illegal Proxy Service

Fruity Trojan Uses Deceptive Software Installers to Spread Remcos RAT

What would sustainable security even look like?

Healthcare Innovation: A Safe and Secure Approach

Multiple Flaws Found in Ninja Forms Plugin Leave 800,000 Sites Vulnerable

What is Cloud Infrastructure?

Moving Beyond Tech: The SECs New Cybersecurity Regulations and the Need for Comprehensive Training

LDR553: Cyber Incident Management Now 5 Days!

US senator victim-blames Microsoft for Chinese hack

~ 29 Jul 2023 ~

Call of Duty: Modern Warfare 2 Players Hit With Worm Malware

Hackers Deploy "SUBMARINE" Backdoor in Barracuda Email Security Gateway Attacks

New Android Malware CherryBlos Utilizing OCR to Steal Sensitive Data

RFP Template for Browser Security

Apple Sets New Rules for Developers to Prevent Fingerprinting and Data Misuse

Ivanti Warns of Another Endpoint Manager Mobile Vulnerability Under Active Attack

Stark#Mule Malware Campaign Targets Koreans, Uses US Army Documents

Florida man accused of hoarding America's secrets faces fresh charges

Millions of people's data stolen because web devs forget to check access perms

~ 28 Jul 2023 ~

Friday Squid Blogging: Zaqistan Flag

Hack Crew Responsible for Stolen Data, NATO Investigates Claims

CherryBlos Malware Uses OCR to Pluck Android Users' Cryptocurrency

FBI boss: Congress must renew Section 702 spy powers that's how we get nearly all our cyber intel

Chinese companies evade sanctions, fuel Moscows war on Ukraine, says report

Senator Blasts Microsoft for Negligence in 365 Email Breach

Choose the Best Biometrics Authentication for Your Use Case

Another AI Pitfall: Digital Mirroring Opens New Cyberattack Vector

IT Ops and Security Teams Need Automation, Not Couples Therapy

IcedID Malware Adapts and Expands Threat with Updated BackConnect Module

STARK#MULE Targets Koreans with U.S. Military-themed Document Lures

Is backdoor access oppressive? Week in security with Tony Anscombe

A Data Exfiltration Attack Scenario: The Porsche Experience

Hackers Abusing Windows Search Feature to Install Remote Access Trojans

Indirect Instruction Injection in Multi-Modal LLMs

Anomaly detection in certificate-based TGT requests

BlueBravo Deploys GraphicalProton Backdoor Against European Diplomatic Entities

Major Security Flaw Discovered in Metabase BI Software Urgent Update Required

Cybersecurity Agencies Warn Against IDOR Bugs Exploited for Data Breaches

Cyclops Launches From Stealth With Generative AI-Based Search Tool

Why CISOs Should Get Involved With Cyber Insurance Negotiation

~ 27 Jul 2023 ~

NATO probes hacktivist crew's boasts of stolen portal data

Despite Post-Log4J Security Gains, Developers Can Still Improve

7 in 10 MSPs Name Data Security and Network Security As Their Top IT Priorities for 2023

CompTIA ChannelCon Technology Vendor Fair Highlights Tech Solutions

Ryanair Hit With Lawsuit Over Use of Facial Recognition Technology

Millions of People Affected in MOVEit Attack on US Gov't Vendor

The NSA Is Lobbying Congress to Save a Phone Surveillance 'Loophole'

Healthcare files of 8M-plus people fall into hands of Clop via MOVEit mega-bug

Deloitte and Chuck E. Cheese join 500+ orgs as MOVEit victims

TSA Updates Pipeline Cybersecurity Requirements

Think tank calls for monitoring of Chinese AI-enabled products

Group-IB Co-Founder Sentenced to 14 Years in Russian Penal Colony

Israeli-Trained Azerbaijan Cyber Students Mark Inaugural Graduation

What Will CISA's Secure Software Development Attestation Form Mean?

Ubuntu Linux Cloud Workloads Face Rampant Root Take Takeovers

How to connect with Microsoft Security at Black Hat USA 2023

Why Today's CISOs Must Embrace Change

GameOver(lay): Two Severe Linux Vulnerabilities Impact 40% of Ubuntu Users

New Malvertising Campaign Distributing Trojanized IT Tools via Google and Bing Search Ads

PTC KEPServerEX

Mitsubishi Electric CNC Series

ETIC Telecom RAS Authentication

The 4 Keys to Building Cloud Security Programs That Can Actually Shift Left

Fooling an AI Article Writer

Hackers Target Apache Tomcat Servers for Mirai Botnet and Crypto Mining

Group-IB Co-Founder Sentenced to 14 Years in Russian Prison for Alleged High Treason

APT trends report Q2 2023

New SEC Rules Require U.S. Companies to Reveal Cyber Attacks Within 4 Days

Companies Must Have Corporate Cybersecurity Experts, SEC Says

What is Cloud Security Compliance?

What is Cloud Security Compliance?

Kyndryl Expands Managed Security Services With More SOC Options

~ 26 Jul 2023 ~

Crooks pwned your servers? You've got four days to tell us, SEC tells public companies

Coro Acquires Network Security Startup Privatise

Rezilion Uncovers High-Risk Vulnerabilities Missing From CISA KEV Catalog

SE Labs Unveils Latest Comparative Analysis of Endpoint Detection and Response Products

'Nitrogen' Ransomware Effort Lures IT Pros via Google, Bing Ads

Massive macOS Campaign Targets Crypto Wallets, Data

SEC Adopts New Rule on Cybersecurity Incident Disclosure Requirements