Port 22

~ 23 May 2023 ~

Meet the GoldenJackal APT group. Dont expect any howls

Ads for lucrative jobs in Asia fail to mention chance of slavery as crypto-scammer

China hasn't told Micron why it failed security review, or what its ban means

Top 5 Reasons to Attend SANS Blue Team Summit 2023

A Visual Summary of SANS Cybersecurity Leadership Summit 2023

Interview With a Crypto Scam Investment Spammer

Uncle Sam strangles criminals' cashflow by reining in money mules

~ 22 May 2023 ~

Improving Cybersecurity Requires Building Better Public-Private Cooperation

PyPI Shuts Down Over the Weekend, Says Incident Was Overblown

Meta Hit With $1.3B Record-Breaking Fine for GDPR Violations

A Leaked Document Shows Spain Wants to Ban End-to-End Encryption

EU Regulators Hit Meta with Record $1.3 Billion Fine for Data Transfer Violations

Indonesian Cybercriminals Exploit AWS for Profitable Crypto Mining Operations

IBM's Polar Buy Creates Focus on a New 'Shadow Data' Cloud Security Area

Google settles location tracking lawsuit for only $39.9M

Metas $1.3 Billion Fine Is a Strike Against Surveillance Capitalism

Cyber Warfare Lessons From the Russia-Ukraine Conflict

Bad Magic's Extended Reign in Cyber Espionage Goes Back Over a Decade

More UK councils caught by Capita's open AWS bucket blunder

Google Is Not Deleting Old YouTube Videos

Are Your APIs Leaking Sensitive Data?

Fighting the five

Diligent developer courageously lied about exec's NSFW printouts - and survived long enough to quit with dignity

U.K. Fraudster Behind iSpoof Scam Receives 13-Year Jail Term for Cyber Crimes

KeePass Exploit Allows Attackers to Recover Master Passwords from Memory

what-is-CVSS

Finding Evil WMI Event Consumers with Disk Forensics

~ 21 May 2023 ~

The Real Risks in Googles New .Zip and .Mov Domains

PyPI Repository Under Attack: User Sign-Ups and Package Uploads Temporarily Halted

~ 20 May 2023 ~

A TikTok Car Theft Challenge Is Costing Hyundai $200 Million

Meet 'Jack' from Romania! Mastermind Behind Golden Chickens Malware

The Underground History of Turla, Russia's Most Ingenious Hacker Group

Notorious Cyber Gang FIN7 Returns Cl0p Ransomware in New Wave of Attacks

Samsung Devices Under Active Exploitation! CISA Warns of Critical Flaw

~ 19 May 2023 ~

Teen in court after '$600K swiped from DraftKings gamblers'

CommonMagic APT Campaign Broadens Target Scope to Central and Western Ukraine

Friday Squid Blogging: Peruvian Squid-Fishing Regulation Drives Chinese Fleets Away

Russian IT guy sent to labor camp for DDoSing Kremlin websites

Apple Patches 3 Zero-Days Possibly Already Exploited

Data Siloes: Overcoming the Greatest Challenge in SecOps

3 Common Initial Attack Vectors Account for Most Ransomware Campaigns

How You, or Anyone, Can Dodge Montanas TikTok Ban

The real cost of a free lunch Week in security with Tony Anscombe

Keep Your Friends Close and Your Identity Closer

Google Debuts Quality Ratings for Security Bug Disclosures

The real cost of a free lunch Week in security with Tony Anscombe

Privacy Sandbox Initiative: Google to Phase Out Third-Party Cookies Starting 2024

Security Risks of New .zip and .mov Domains

Dr. Active Directory vs. Mr. Exposed Attack Surface: Who'll Win This Fight?

Developer Alert: NPM Packages for Node.js Hiding Dangerous TurkoRat Malware

CloudWizard APT: the bad magic story goes on

Cyber Signals: Shifting tactics fuel surge in business email compromise

A Mysterious Group Has Ties to 15 Years of Ukraine-Russia Hacks

UK's GDPR replacement could wipe out oversight of live facial recognition

AppSec Teams Stuck in Catch-Up Cycle Due to Massive Cloud-Native Enablement Gap

Searching for AI Tools? Watch Out for Rogue Sites Distributing RedLine Malware

WebKit Under Attack: Apple Issues Emergency Patches for 3 New Zero-Day Vulnerabilities

Apple warns of three WebKit vulns under active exploitation, dozens more CVEs across its range

Cybersecurity Jobs: OSINT investigator/Analyst (Japanese)

~ 18 May 2023 ~

Enterprises Rely on Multicloud Security to Protect Cloud Workloads

Cisco squashes critical bugs in small biz switches

KeePass Vulnerability Imperils Master Passwords

Trojan-Rigged Phishing Attacks Pepper China-Taiwan Conflict

10 Types of AI Attacks CISOs Should Track

Google May Delete Your Old Accounts. Heres How to Stop It

Microsoft decides it will be the one to choose which secure login method you use

Embedding Security by Design: A Shared Responsibility

This Cybercrime Syndicate Pre-Infected Over 8.9 Million Android Phones Worldwide

OX Security Launches OX-GPT, AppSec's First ChatGPT Integration

Satori Augments Its Data Security Platform With Posture Management and Data Store Discovery Capabilities

Microsoft Azure VMs Highjacked in Cloud Cyberattack

Once Again, Malware Discovered Hidden in npm

LexisNexis Risk Solutions Cybercrime Report Reveals 20% Annual Increase in Global Digital Attack Rate

WithSecure Launches New Range of Incident Response and Readiness Services

3 Ways Hackers Use ChatGPT to Cause Security Headaches

ActZero Teams Up With UScellular to Secure Mobile Devices From Ransomware Attacks

LayerZero Labs Launches $15M Bug Bounty; Largest in the World

Eagle Eye Networks and Brivo Announce $192M Investment One of the Largest Ever in Cloud Physical Security

Join This Webinar Zero Trust + Deception: Learn How to Outsmart Attackers!

Rockwell Automation FactoryTalk Diagnostics (Update B)

Mitsubishi Electric MELSEC WS Series

Johnson Controls OpenBlue Enterprise Manager Data Collector

Hitachi Energys MicroSCADA Pro/X SYS600 Products

Carlo Gavazzi Powersoft

How to Reduce Exposure on the Manufacturing Attack Surface

Escalating China-Taiwan Tensions Fuel Alarming Surge in Cyber Attacks

8220 Gang Exploiting Oracle WebLogic Flaw to Hijack Servers and Mine Cryptocurrency

5 useful search engines for internetconnected devices and services

Darknet Carding Kingpin Pleads Guilty: Sold Financial Info of Tens of Thousands

Apple Thwarts $2 Billion in App Store Fraud, Rejects 1.7 Million App Submissions

Critical Flaws in Cisco Small Business Switches Could Allow Remote Attacks

Six million patients' data feared stolen from PharMerica

~ 17 May 2023 ~

Lemon Group Uses Millions of Pre-Infected Android Phones to Enable Cybercrime Enterprise

5 Ways Security Testing Can Aid Incident Response

BianLian Cybercrime Group Changes Up Extortion Methods, Warns CISA

'Strictly limit' remote desktop unless you like catching BianLian ransomware

Houthi-Backed Spyware Effort Targets Yemen Aid Workers

Rebinding Attacks Persist With Spotty Browser Defenses

Apple Boots a Half-Million Developers From Official App Store

The US Post Office Is Spying on the Mail. Senators Want to Stop It