Port 22

~ 15 Aug 2023 ~

North Korean Hackers Suspected in New Wave of Malicious npm Packages

Florida Man, associates, indicted for conspiracy to steal data, software

Chinese media teases imminent expos of seismic US spying scheme

~ 14 Aug 2023 ~

Sextortion suspects on trial after teen victim dies from a self-inflicted gunshot wound

Beware cool-looking beta crypto-apps. They may be money-stealing fakes

Women in CyberSecurity (WiCyS) Hosting Fifth Annual Virtual Career Fair

Phishing Operators Make Ready Use of Abandoned Websites for Bait

Ford SYNC 3 infotainment systems vulnerable to drive-by Wi-Fi hijacking

Diligere, Equity-Invest Are New Firms of U.K. Con Man

What's New in the NIST Cybersecurity Framework 2.0

Russian-African Security Gathering Exposes Kremlin's Reduced Influence

Health Data of 4M Stolen in Cl0p MOVEit Breach of Colorado Department

QwixxRAT: New Remote Access Trojan Emerges via Telegram and Discord

Following Pushback, Zoom Says It Won't Use Customer Data to Train AI Models

Lock Down APIs to Prevent Breaches

Interpol Shuts Down Phishing Service '16shops'

7 Reasons People Don't Understand What You Tell Them

5 Ways CISA Can Help Cyber-Poor Small Businesses & Local Governments

A Huge Scam Targeting Kids With Roblox and Fortnite 'Offers' Has Been Hiding in Plain Sight

Ongoing Xurum Attacks on E-commerce Sites Exploiting Critical Magento 2 Vulnerability

Black Hat 2023: How AI changes the monetization of search

Cumbrian cops accidentally publish all of its officers' details online

Identity Threat Detection and Response: Rips in Your Identity Fabric

China Hacked Japans Military Networks

Charming Kitten Targets Iranian Dissidents with Advanced Cyber Attacks

New Financial Malware 'JanelaRAT' Targets Latin American Users

Phishing with hacked sites

Black Hat 2023: AI gets big defender prize money

How to Choose a Managed Detection and Response (MDR) Solution

3 Mobile or Client-Side Security Myths Debunked

Hactivitsts attack Japanese government over Fukushima wastewater release

India Passes New Digital Personal Data Protection Bill (DPDPB), Putting Users' Privacy First

US government to investigate China's Microsoft email breach

~ 13 Aug 2023 ~

Multiple Flaws in CyberPower and Dataprobe Products Put Data Centers at Risk

~ 12 Aug 2023 ~

An Apple Malware-Flagging Tool Is Trivially Easy to Bypass

Black Hat 2023: Teenage AI not enough for cyberthreat intelligence

A New Attack Reveals Everything You Type With 95 Percent Accuracy

Zoom ZTP & AudioCodes Phones Flaws Uncovered, Exposing Users to Eavesdropping

Google Chrome to shield encryption keys from promised quantum computers

Lolek Bulletproof Hosting Servers Seized, 5 Key Operators Arrested

New Python URL Parsing Flaw Enables Command Injection Attacks

~ 11 Aug 2023 ~

FTX crypto-clown Sam Bankman-Fried couldn't even do house arrest. Now he's in jail

Friday Squid Blogging: NIWA Annual Squid Survey

Security Pressures Mount Around AI's Promises & Peril

DARPA Taps RTX to Attune AI Decisions to Human Values

Fortinet Announces Free Security Awareness Curriculum for K-12 Students Tied to White House's Cyber Initiatives

Microsoft: Codesys PLC bugs could be exploited to 'shut down power plants'

As Phishing Gets Even Sneakier, Browser Security Needs to Step Up

Threat Intelligence Efforts, Investment Lagging, Says Opswat

(Sogou Keyboard)

Maker of Chrome extension with 300,000+ users tells of constant pressure to sell out

XWorm, Remcos RAT Evade EDRs to Infect Critical Infrastructure

GitHubs Hardcore Plan to Roll Out Two-Factor Authentication (2FA)

Researchers Uncover Decade-Long Cyber Espionage on Foreign Embassies in Belarus

What CISA and NSA Guidance Means for Critical Infrastructure Security

Enhancing TLS Security: Google Adds Quantum-Resistant Encryption in Chrome 116

Mobb Wins Black Hat Startup Spotlight Competition

Electoral Commission had internet-facing server with unpatched vuln

20k security folks in the desert Week in security with Tony Anscombe

The Inability to Simultaneously Verify Sentience, Location, and Identity

Magento shopping cart attack targets critical vulnerability revealed in early 2022

Researchers Shed Light on APT31's Advanced Backdoors and Data Exfiltration Tactics

New SystemBC Malware Variant Targets South African Power Company

Black Hat 2023: Cyberwar fire-and-forget-me-not

US Cyber Command boss says China's spooky cyber-skills trail America's

15 New CODESYS SDK Flaws Expose OT Environments to Remote Attacks

CISA Adds Microsoft .NET Vulnerability to KEV Catalog Due to Active Exploitation

Microsoft Expands Cloud Security Posture Management to Google Cloud

What's in New York's 'First Ever' Cyber Strategy?

Brand-New Course LDR521: Security Culture for Leaders

NSA: Codebreaker Challenge Helps Drive Cybersecurity Education

Multiple high severity vulnerabilities in CODESYS V3 SDK could lead to RCE or DoS

~ 10 Aug 2023 ~

Rhysida Ransomware Trains Its Sights on Healthcare Operations

CISA: 'Whirlpool' Backdoor Sends Barracuda ESG Security Down the Drain

Dell Credentials Bug Opens VMWare Environments to Takeover

Cyber Insurance Experts Make a Case for Coverage, Protection

There's a good chance your VPN is vulnerable to privacy-menacing TunnelCrack attack

ESET Research Podcast: Unmasking MoustachedBouncer

Teens Hacked Boston Subways CharlieCard to Get Infinite Free Ridesand This Time Nobody Got Sued

EvilProxy Cyberattack Flood Targets Execs via Microsoft 365

The Hard Realities of Setting AI Risk Policy

SecurityGen Study Highlights Hidden Threat to 5G Mobile Networks From GTP-Based Cyberattacks

Rootly Raises $12M to Help Enterprise IT Teams Resolve Incidents 80 Percent Faster

Osano Secures $25M Series B to Advance Data Privacy Platform

Cybersecurity: It's Time to Trust the Machines

New Attack Alert: Freeze[.]rs Injector Weaponized for XWorm Malware Attacks

New Statc Stealer Malware Emerges: Your Sensitive Data at Risk

Navigating Cybersecurity's Seas: Environmental Regulations, OT & the Maritime Industry's New Challenges

Siemens Solid Edge, JT2Go, and Teamcenter Visualization

Siemens Solid Edge SE2023

Siemens Software Center

Siemens RUGGEDCOM CROSSBOW

Siemens Parasolid Installer

Siemens Parasolid and Teamcenter Visualization

Siemens OpenSSL RSA Decryption in SIMATIC

Siemens JT Open, JT Utilities, and Parasolid

Resource Allocation in Siemens RUGGEDCOM

Network Mirroring in Siemens RUGGEDCOM

Emerging Attacker Exploit: Microsoft Cross-Tenant Synchronization