Port 22

~ 2 Oct 2024 ~

China-Linked CeranaKeeper Targeting Southeast Asia with Data Exfiltration

Fake Job Applications Deliver Dangerous More_eggs Malware to HR Professionals

Separating the bee from the panda: CeranaKeeper making a beeline for Thailand

Alert: Over 700,000 DrayTek Routers Exposed to Hacking via 14 New Vulnerabilities

NIST's security flaw database still backlogged with 17K+ unprocessed bugs. Not great

Alert: Adobe Commerce and Magento Stores Under Attack from CosmicSting Exploit

California AI Safety Bill Vetoed

5 Must-Have Tools for Effective Dynamic Malware Analysis

'Patch yesterday': Zimbra mail servers under siege through RCE vuln

Finding a needle in a haystack: Machine learning at the forefront of threat hunting research

Andariel Hacking Group Shifts Focus to Financial Attacks on U.S. Organizations

Protecting private data in AI deployments

The fix for BGP's weaknesses has big, scary, issues of its own, boffins find

Researchers Sound Alarm on Active Attacks Exploiting Critical Zimbra Postjournal Flaw

PyPI Repository Found Hosting Fake Crypto Wallet Recovery Tools That Steal User Data

~ 1 Oct 2024 ~

ICE Signs $2 Million Contract With Spyware Maker Paragon Solutions

Euro cops arrest 4 including suspected LockBit dev chilling on holiday

Notorious Evil Corp Hackers Targeted NATO Allies for Russian Intelligence

AI-Powered Rhadamanthys Stealer Targets Crypto Wallets with Image Recognition

Cybersecurity Awareness Month: Securing our worldtogether

Evil Corp's deep ties with Russia and NATO member attacks exposed

NCA unmasks man it suspects is both 'Evil Corp kingpin' and LockBit affiliate

Why system resilience should mainly be the job of the OS, not just third-party applications

Hacking ChatGPT by Planting False Memories into Its Data

5 Actionable Steps to Prevent GenAI Data Leaks Without Fully Blocking AI Usage

Key Group: another ransomware group using leaked builders

Cybersecurity Awareness Month needs a radical overhaul it needs legislation

Free Sniper Dz Phishing Tools Fuel 140,000+ Cyber Attacks Targeting User Credentials

New Cryptojacking Attack Targets Docker API to Create Malicious Swarm Botnet

U.K. Hacker Charged in $3.75 Million Insider Trading Scheme Using Hacked Executive Emails

Securing the Grid: Lessons from China's Cyberattacks on U.S. Providers

Australian e-tailer digiDirect customers' info allegedly stolen and dumped online

~ 30 Sep 2024 ~

Rackspace monitoring systems hit by zero-day

Ransomware forces hospital to turn away ambulances

T-Mobile US to cough up $31.5M after that long string of security SNAFUs

Crooked Cops, Stolen Laptops & the Ghost of UGNazi

If you're holding important data, Iran is probably trying spearphish it

THN Cybersecurity Recap: Last Week's Top Threats and Trends (September 23-29)

Remote ID verification tech is often biased, bungling, and no good on its own

Critical Flaws in Tank Gauge Systems Expose Gas Stations to Remote Attacks

Cloud threats have execs the most freaked out because they're not prepared

Session Hijacking 2.0 The Latest Way That Attackers are Bypassing MFA

AI and the 2024 US Elections

A Hacker's Era: Why Microsoft 365 Protection Reigns Supreme

The Pig Butchering Invasion Has Begun

Meta Fined 91 Million for Storing Millions of Facebook and Instagram Passwords in Plaintext

AI code helpers just can't stop inventing package names

Forget the Kia Boyz: Hackers could hijack your car with just a smartphone

Binance claims it helped to bust Chinese crypto scam app in India

A Visual Summary of SANS CloudSecNext Summit 2024

~ 29 Sep 2024 ~

Red team hacker on how she 'breaks into buildings and pretends to be the bad guy'

~ 28 Sep 2024 ~

The US Could Finally Ban Inane Forced Password Changes

Crypto Scam App Disguised as WalletConnect Steals $70K in Five-Month Campaign

U.S. Charges Three Iranian Nationals for Election Interference and Cybercrimes

~ 27 Sep 2024 ~

Feds charge 3 Iranians with 'hack-and-leak' of Trump 2024 campaign

Squid Fishing in Japan

Recall that Recall recall? Now Microsoft thinks it can make Windows feature palatable

Progress Software Releases Patches for 6 Flaws in WhatsUp Gold Patch Now

Ransomware gang using stolen Microsoft Entra ID creds to bust into the cloud

Gamaredon's operations under the microscope Week in security with Tony Anscombe

Critical Linux CUPS Printing System Flaws Could Allow Remote Command Execution

How to Plan and Prepare for Penetration Testing

Microsoft Identifies Storm-0501 as Major Threat in Hybrid Cloud Ransomware Attacks

NIST Recommends Some Common-Sense Password Rules

Teslas Cybertruck Goes, Inevitably, to War