Port 22

~ 6 Jul 2023 ~

Black Hat Announces Maria Markstedter, Jen Easterly, Viktor Zhora, and Kemba Walden As Keynote Speakers for Black Hat USA 2023

StackRot Linux Kernel Bug Has Exploit Code on the Way

Microsoft puts out Outlook fire, says 'everything's fine' with Teams malware flaw

Patchless Cisco Flaw Breaks Cloud Encryption for ACI Traffic

Don't Join ThreadsMake Instagram's 'Twitter Killer' Join You

Shell Becomes Latest Cl0p MOVEit Victim

Iranian Hackers' Sophisticated Malware Targets Windows and macOS Users

Privacy Woes Hold Up Global Instagram Threads Launch

The five-day job: A BlackByte ransomware intrusion case study

Cybersecurity's Future Hinges on Stronger Public-Private Partnerships

Microsoft Defender for Endpoint is ranked number one in market share in the IDC Worldwide Corporate Endpoint Security Market Shares report, 2022

Google Searches for 'USPS Package Tracking' Leads to Banking Theft

CISOs Find 'Business as Usual' Shows the Harsh Realities of Cyber-Risk

Botnets Send Exploits Within Days to Weeks After Published PoC

6 Steps To Outsmart Business Email Compromise Scammers

PiiGAB M-Bus

ABUS TVIP

Surviving the 800 Gbps Storm: Gain Insights from Gcore's 2023 DDoS Attack Statistics

Belgian Tax Hack

Researchers Uncover New Linux Kernel 'StackRot' Privilege Escalation Vulnerability

How Pen Testing can Soften the Blow on Rising Costs of Cyber Insurance

Silentbob Campaign: Cloud-Native Environments Under Attack

Whats up with Emotet?

The rising risk of eavesdropping

INTERPOL Nabs Hacking Crew OPERA1ER's Leader Behind $11 Million Cybercrime

Startup Spotlight: Gomboc.ai Balances Cloud Infrastructure Security

LockBit louts unload ransomware at Japans most prolific cargo port

What is OPSEC?

3 Critical RCE Bugs Threaten Industrial Solar Panels, Endangering Grid Systems

North Korean satellite had no military utility for spying, says South Korea

Former boss who stole $10M from Amazon using fake vendor invoices is jailed for 16 years

Mitigating Risk With Threat Intelligence

~ 5 Jul 2023 ~

RAM-ramming Rowhammer is back to uniquely fingerprint devices

83% of Brits Demand Messaging Apps Remain Private, Ahead of Threat From Online Safety Bill

Microsoft Teams Exploit Tool Auto-Delivers Malware

Suspected bank-infecting OPERA1ER crime boss cuffed

OPERA1ER Cybercrime Group's Leader Arrested by INTERPOL

US Spies Are Buying Americans' Private Data. Congress Has a Chance to Stop It

Ransomware Halts Operations at Japan's Port of Nagoya

A Golden Age of AI or Security Threats?

C10p's MOVEit Campaign Represents a New Era in Cyberattacks

11 best practices for securing data in cloud services

China's Mustang Panda Linked to SmugX Attacks on European Governments

EV Charger Hacking Poses a Catastrophic Risk

RedEnergy Stealer-as-a-Ransomware Threat Targeting Energy and Telecom Sectors

Microsoft Can Fix Ransomware Tomorrow

Class-Action Lawsuit for Scraping Data without Permission

Secrets, Secrets Are No Fun. Secrets, Secrets (Stored in Plain Text Files) Hurt Someone

Email crypto phishing scams: stealing from hot and cold crypto wallets

Node.js Users Beware: Manifest Confusion Attack Opens Door to Malware

Instagram's Twitter Alternative 'Threads' Launch Halted in Europe Over Privacy Concerns

Singapore tells crypto operators: act like grown up financial institutions

Ransomware in the Cloud

~ 4 Jul 2023 ~

Swedish Data Protection Authority Warns Companies Against Google Analytics Use

The Password Game

DDoSia Attack Tool Evolves with Encryption, Targeting Multiple Sectors

Mexico-Based Hacker Targets Global Banks with Android Malware

Deepfaking it: What to know about deepfakedriven sextortion schemes

Alert: 330,000 FortiGate Firewalls Still Unpatched to CVE-2023-27997 RCE Flaw

Undiplomatic Chinese threat actor attacks embassies and foreign affairs departments

Fortanix Builds Hardware Security Wall Around Plaintext Search

sec488-major-update

~ 3 Jul 2023 ~

You've patched right? '340K+ Fortinet firewalls' wide open to critical security bug

TSA wants to expand facial recognition to hundreds of airports within next decade

Researchers Develop Exploit Code for Critical Fortinet VPN Bug

Russian Satellite Internet Downed via Attackers Claiming Ties to Wagner Group

Israel Aided UAE in Defending Against DDoS Attack

Dublin Airport staff pay data 'compromised' by criminals

Whos Behind the DomainNetworks Snail Mail Scam?

SSH Servers Hit in 'Proxyjacking' Cyberattacks

Name That Edge Toon: Three-Ring Circus

A CISO's Guide to Paying Down Software Supply Chain Security Debt

Chinese Hackers Use HTML Smuggling to Infiltrate European Ministries with PlugX

Improve Your Security WordPress Spam Protection With CleanTalk Anti-Spam

Self-Driving Cars Are Surveillance Cameras on Wheels

CISA Flags 8 Actively Exploited Flaws in Samsung and D-Link Devices

Evasive Meduza Stealer Targets 19 Password Managers and 76 Crypto Wallets

Verizon 2023 DBIR: Whats new this year and top takeaways for SMBs

US authorities warn on China's new counter-espionage law

BlackCat Operators Distributing Ransomware Disguised as WinSCP via Malvertising

Architecting XDR to Save Money and Your SOC's Sanity

Japan rebukes Fujitsu for cloud security fails

~ 1 Jul 2023 ~

Security News This Week: Cyberstalkers Win First Amendment Victory in the US Supreme Court

Unpatched WordPress Plugin Flaw Could Let Hackers Create Secret Admin on 200,000 Sites

Beware: New 'Rustbucket' Malware Variant Targeting macOS Users

~ 30 Jun 2023 ~

Us, hacked by LockBit? No, says TSMC, that would be our IT supplier

Friday Squid Blogging: See-Through Squid

Chip Giant TSMC Blames $70M LockBit Breach on IT Hardware Supplier

Cops told: Er, no, you need a wiretap order if you want real-time Facebook snooping

Mobile Cyberattacks Soar, Especially Against Android Users

Nokod Raises $8M Seed Round From Seasoned Cybersecurity Investors to Enhance Low-Code/No-Code App Security

Iran-Linked APT35 Targets Israeli Media With Upgraded Spear-Phishing Tools

African Nations Face Escalating Phishing & Compromised Password Cyberattacks

Russian Hacktivist Platform 'DDoSia' Grows Exponentially

Make Diversity the 'How,' Not the 'What,' of Cybersecurity Success

IP Fabric Announces $25M Series B Funding to Accelerate Adoption of Network Assurance

Perception Point Unveils AI Model to Thwart Generative AI-Based BEC Attacks

The good, the bad and the ugly of AI Week in security with Tony Anscombe

CISA BOD 23-01: What Agencies Need to Know About Compliance

3 Ways to Build a More Skilled Cybersecurity Workforce