Port 22

~ 10 Aug 2023 ~

Encryption Flaws in Popular Chinese Language App Put Users' Typed Data at Risk

Cryptographic Flaw in Libbitcoin Explorer Cryptocurrency Wallet

Focus on DroxiDat/SystemBC

Get your staff's consent before you monitor them, tech inquiry warns

Leaked Yandex Code Breaks Open the Creepy Black Box of Online Advertising

Cybercriminals Increasingly Using EvilProxy Phishing Kit to Target Executives

'MoustachedBouncer' APT Spies on Embassies, Likely via ISPs

MoustachedBouncer: Espionage against foreign diplomats in Belarus

Common TTPs of attacks against industrial organizations

Interpol Busts Phishing-as-a-Service Platform '16Shop,' Leading to 3 Arrests

Zero Trust Blog Series - Blog 2: Architecting for Zero Trust

~ 9 Aug 2023 ~

Nearly every AMD CPU since 2017 vulnerable to Inception data-leak attacks

Panasonic Warns That IoT Malware Attack Cycles Are Accelerating

Hackers Rig Casino Card-Shuffling Machines for Full Control Cheating

DARPA Launches Two-Year Contest to Build AI Tools to Fix Vulnerabilities

LastPass Announces Availability of FIDO2 Authenticators for Passwordless Login

Sweet Security Lands $12M in Seed Funding to Shift Cloud Security Right

Symmetry Systems Closes $17.7M To Scale its AI-Powered Data Security Platform

Checkmarx CISO Study Finds 96% of CISOs Say Their Business Prospects Consider Their Organizations' AppSec Maturity When Making Deal Decisions

Blockchain Signing Bug Cracks Open Crypto Investors' Wallets Worldwide

Black Hat Opens With Call to Steer AI from Predictions to Policy

Windows Defender-Pretender Attack Dismantles Flagship Microsoft EDR

Disposed-of Gadgets Can Lead to Wi-Fi Network Hacks, Kaspersky Says

New LLM Tool Seeks and Remediates Vulnerabilities

It's Time for Cybersecurity to Talk About Climate Change

A Clever Honeypot Tricked Hackers Into Revealing Their Secrets

'Downfall' Bug in Billions of Intel CPUs Reveals Major Design Flaw

Safety of Officers & Civilians of PSNI Compromised in Major Data Breach

Rapid7 prepares to toss 18% of workforce to cut costs

Top 3 Insights I Learned at Recent Cybersecurity Events

C-Suite Cybersecurity Sign-off Hinges on Customer Trust, Digital Opps

OWASP Lead Flags Gaping Hole in Software Supply Chain Security

Sweet Security Debuts Runtime Management for Cloud

Interpol Shuts Down African Cybercrime Group, Seizes $2 Million

New Microsoft Security innovations expand multicloud visibility and enhance multiplatform protection

RedHotel Checks in As Dominant China-Backed Cyberspy Group

Collide+Power, Downfall, and Inception: New Side-Channel Attacks Affecting Modern CPUs

AI Risk Database Tackles AI Supply Chain Risks

Why Shellshock Remains a Cybersecurity Threat After 9 Years

Please do not make it public: Vulnerabilities in Sogou Keyboard encryption expose keypresses to network eavesdropping

China-Linked Hackers Strike Worldwide: 17 Nations Hit in 3-Year Cyber Campaign

Northern Ireland police may have endangered its own officers by posting details online in error

Closing Coverage Gaps Where Customer Resources Meet Cloud Environments

How to Remove Your Info From Google With the 'Results About You' Tool

Dark Reading News Desk: Live at Black Hat USA 2023

Continuous Security Validation with Penetration Testing as a Service (PTaaS)

Using Machine Learning to Detect Keystrokes

U.K. Electoral Commission Breach Exposes Voter Data of 40 Million Britons

Malicious Campaigns Exploit Weak Kubernetes Clusters for Crypto Mining

New Android 14 Security Feature: IT Admins Can Now Disable 2G Networks

Microsoft Releases Patches for 74 New Vulnerabilities in August Update

New Report Exposes Vice Society's Collaboration with Rhysida Ransomware

INTERPOL shutters '16shop' phishing-as-a-service outfit

Microsoft Patch Tuesday, August 2023 Edition

Attacker Breakout Time Shrinks Again, Underscoring Need for Automation

Analyzing Network Chaos Leads to Better DDoS Detection

Network Engineer Salary, Skills, and Career Path

~ 8 Aug 2023 ~

Microsoft, Intel lead this month's security fix emissions

Microsoft Fixes 74 CVEs in August Update

Russian Rocket Bureau Faces Cyber-Espionage Breach, North Korea Responsible

zkPass Secures $2.5M in Seed Funding to Safeguard User Privacy and Data

Brillio Partners With Google Cloud to Build Generative AI Solutions for the Financial Services and Healthcare Industries

75% of Organizations Worldwide Set to Ban ChatGPT and Generative AI Apps on Work Devices

India Data Protection Bill Approved, Despite Privacy Concerns

Raft of TETRA Zero-Day Vulnerabilities Endanger Industrial Communications

Cyber-extortionists pillage Colorado education dept

Custom Yashma Ransomware Crashes Into the Scene

Citrix Zero-Day: 7K Instances Remain Exposed, 460 Compromised

Meet the Brains Behind the Malware-Friendly AI Chat Service WormGPT

New Downfall Flaw Exposes Valuable Data in Generations of Intel Chips

The Problem With Cybersecurity (and AI Security) Regulation

Microsoft Purview data security mitigations for BazaCall and other human-operated data exfiltration attacks

Boost identity protection with Axiad Cloud and Microsoft Entra ID

UK voter data exposed for over a year in attack on Electoral Commission

QakBot Malware Operators Expand C2 Network with 15 New Servers

10 Key Controls to Show Your Organization Is Worthy of Cyber Insurance

Hackers Abusing Cloudflare Tunnels for Covert Communications

What Doctors Wish You Knew About HIPAA and Data Security

Schneider Electric IGSS

Hitachi Energy RTU500 series

You Cant Rush Post-Quantum-Computing Cryptography Standards

China which surveils everyone everywhere floats facial recognition rules

Understanding Active Directory Attack Paths to Improve Security

New Yashma Ransomware Variant Targets Multiple English-Speaking Countries

LOLBAS in the Wild: 11 Living-Off-The-Land Binaries Used for Malicious Purposes

North Korean hackers had access to Russian missile maker for months, say researchers

Ransomware Victims Surge as Threat Actors Pivot to Zero-Day Exploits

Apple Users See Big Mac Attack, Says Accenture

~ 7 Aug 2023 ~

Stalkerware slinger LetMeSpy shuts down for good after database robbery

SecurityScorecard Launches Managed Cyber Risk Services to Mitigate Zero-Day and Critical Supply Chain Vulnerabilities

Akamai Research: Rampant Abuse of Zero-Day and One-Day Vulnerabilities Leads to 143% Increase in Victims of Ransomware

The Mystery of Chernobyls Post-Invasion Radiation Spikes

Microsofts AI Red Team Has Already Made the Case for Itself

SANS Teaches Cybersecurity Leadership in Saudi Arabia

Mallox Ransomware Group Revamps Malware Variants, Evasion Tactics

Adopting guidance from the US National Cybersecurity Strategy to secure the Internet of Things

New Malware Campaign Targets Inexperienced Cyber Criminals with OpenBullet Configs

Microsoft AI Red Team building future of safer AI

Colorado Dept. of Higher Education Hit With Massive Data Breach

Selling Software to the US Government? Know Security Attestation First