Port 22

~ 22 Nov 2023 ~

Diamond Sleet supply chain compromise distributes a modified CyberLink installer

3 Ways to Stop Unauthorized Code From Running in Your Network

Idaho National Nuclear Lab Targeted in Major Data Breach

Scattered Spider Hops Nimbly From Cloud to On-Prem in Complex Attack

Rootkit Turns Kubernetes From Orchestration to Subversion

New Flaws in Fingerprint Sensors Let Attackers Bypass Windows Hello Login

The Persian Gulf's March to the Cloud Presents Global Opportunities

US cybercops take on 'pig butchering' org, return $9M in scammed crypto

North Korean Hackers Pose as Job Recruiters and Seekers in Malware Campaigns

Apple to Add Manual Authentication to iMessage

AI Solutions Are the New Shadow IT

Microsoft's bug bounty turns 10. Are these kinds of rewards making code more secure?

Your voice is my password

UK's cookie crumble: Data watchdog serves up tougher recipe for consent banners

HrServ Previously unknown web shell used in APT attack

ClearFake Campaign Expands to Deliver Atomic Stealer on Macs Systems

LockBit Ransomware Exploiting Critical Citrix Bleed Vulnerability to Break In

Binance and CEO admit financial crimes, billions coughed up to US govt

Linux Incident Response - Using ss for Network Analysis

Linux Incident Response - Introduction to Rootkits

~ 21 Nov 2023 ~

The 7 Deadly Sins of Security Awareness Training

Citrix Bleed Bug Inflicts Mounting Wounds, CISA Warns

AutoZone Files MOVEit Data Breach Notice With State of Maine

Exploit for Critical Windows Defender Bypass Goes Public

Chinese censorship following the death of Li Keqiang

DPRK Hackers Masquerade as Tech Recruiters, Job Seekers

DOJ Charges Binance With Vast Money Laundering Scheme and Sanctions Violations

The Role of the CISO in Digital Transformation

Inside Job: Cyber Exec Admits to Hospital Hacks

Microsoft named a Leader in 2023 Gartner Magic Quadrant for Access Management for the 7th year

Major Saudi University to Offer AI, Cybersecurity Studies

Sumo Logic wrestles with security breach, pins down customer data

Kinsing Cyberattackers Target Apache ActiveMQ Flaw to Mine Crypto

Maximize Cybersecurity Returns: 5 Key Steps to Enhancing ROI

AI Helps Uncover Russian State-Sponsored Disinformation in Hungary

The XBOM vs SBOM debate

Play Ransomware Goes Commercial - Now Offered as a Service to Cybercriminals

Inside the Operation to Bring Down Trumps Truth Social

Third-party data breach affecting Canadian government could involve data from 1999

Email Security Flaw Found in the Wild

WAGO PFC200 Series

Fuji Electric Tellus Lite V-Simulator

New Agent Tesla Malware Variant Using ZPAQ Compression in Email Attacks

Maintaining a state of readiness to deal with cyber attacks

How Multi-Stage Phishing Attacks Exploit QRs, CAPTCHAs, and Steganography

Fuel for thought: Can a driverless car get arrested?

Crimeware and financial cyberthreats in 2024

Kinsing Hackers Exploit Apache ActiveMQ Vulnerability to Deploy Linux Rootkits

Malicious Apps Disguised as Banks and Government Agencies Targeting Indian Android Users

Mustang Panda Hackers Targets Philippines Government Amid South China Sea Tensions

Social engineering attacks lure Indian users to install Android banking trojans

Proof of Concept Exploit Publicly Available for Critical Windows SmartScreen Flaw

~ 20 Nov 2023 ~

What Healthcare Cybersecurity Leaders Should Know About the FDA's Section 524B Guidelines

Lasso Security Emerges From Stealth With $6M Seed Funding for Gen AI and Advanced LLM Cybersecurity

Malware Uses Trigonometry to Track Mouse Strokes

GenAI Requires New, Intelligent Defenses

Amid Military Buildup, China Deploys Mustang Panda in the Philippines

MOVEit victim count latest: 2.6K+ orgs hit, 77M+ people's data stolen

CISA Launches Pilot Program to Address Critical Infrastructure Threats

Exploited Vulnerabilities Can Take Months to Make KEV List

Enterprise Generative AI Enters Its Citizen Development Era

Secretive White House Surveillance Program Gives Cops Access to Trillions of US Phone Records

Saudi Arabia Arms Public Sector With Google Cloud Services

Former infosec COO pleads guilty to attacking hospitals to drum up business

NetSupport RAT Infections on the Rise - Targeting Government and Business Sectors

How the Evolving Role of the CISO Impacts Cybersecurity Startups

Product Walkthrough: Silverfort's Unified Identity Protection Platform

DarkGate and PikaBot Malware Resurrect QakBot's Tactics in New Phishing Attacks

Rhysida ransomware gang: We attacked the British Library

Using Generative AI for Surveillance

Why Defenders Should Embrace a Hacker Mindset

LummaC2 Malware Deploys New Trigonometry-Based Anti-Sandbox Technique

The dark side of Black Friday: decoding cyberthreats around the years biggest shopping season

Randstorm Exploit: Bitcoin Wallets Created b/w 2011-2015 Vulnerable to Hacking

Leveraging Sandbox and Threat Intelligence Feeds to Combat Cyber Threats

A Detection and Response Benchmark Designed for the Cloud

Indian Hack-for-Hire Group Targeted U.S., China, and More for Over 10 Years

Your password hygiene remains atrocious, says NordPass

Linux Intrusions A Growing Problem

Five Startling Findings In 2023s ICS Cybersecurity Data

~ 18 Nov 2023 ~

The Startup That Transformed the Hack-for-Hire Industry

Inside the Race to Secure the F1 Las Vegas Grand Prix

8Base Group Deploying New Phobos Ransomware Variant via SmokeLoader

Russian Cyber Espionage Group Deploys LitterDrifter USB Worm in Targeted Attacks

~ 17 Nov 2023 ~

Hackers Weaponize SEC Disclosure Rules Against Corporate Targets

Friday Squid Blogging: Unpatched Vulnerabilities in the Squid Caching Proxy

VicOne and Block Harbor Deliver Integrated Workflow-Based Cybersecurity System

CompTIA Advises Retailers to Check their Cybersecurity Preparedness Ahead of the Holiday Shopping Season

British Library Confirms Ransomware Attack Caused Outages

Scattered Spider Casino Hackers Evade Arrest in Plain Sight

Shadowy Hack-for-Hire Group Behind Sprawling Web of Global Cyberattacks

LockBit redraws negotiation tactics after affiliates fail to squeeze victims

Actions to Take to Defeat Initial Access Brokers

Ransomware Gang Files SEC Complaint

The Bin Laden Letter Is Being Weaponized by the Far-Right

SonicWall swallows Solutions Granted amid cybersecurity demand surge

Hands Off the Security Budget! Find Efficiencies to Reduce Risk

Detection & Response That Scales: A 4-Pronged Approach

Beware: Malicious Google Ads Trick WinSCP Users into Installing Malware

FCC Enforces Stronger Rules to Protect Customers Against SIM Swapping Attacks