Port 22

~ 16 Dec 2023 ~

China's MIIT Introduces Color-Coded Action Plan for Data Security Incidents

Microsoft Warns of Storm-0539: The Rising Threat Behind Holiday Gift Card Frauds

Hundreds of thousands of dollars in crypto stolen after Ledger code poisoned

~ 15 Dec 2023 ~

Friday Squid Blogging: Underwater Sculptures Use Squid Ink for Coloring

Kraft Heinz suggests we simmer down about Snatch ransomware attack claims

Patching Perforce perforations: Critical RCE vulnerability discovered in Perforce Helix Core Server

NKabuse backdoor harnesses blockchain brawn to hit several architectures

New iOS feature to thwart eavesdropping Week in security with Tony Anscombe

New KV-Botnet Targeting Cisco, DrayTek, and Fortinet Devices for Stealthy Attacks

Crypto Hardware Wallet Ledger's Supply Chain Breach Results in $600,000 Theft

A Robot the Size of the World

Bug or Feature? Hidden Web Application Vulnerabilities Uncovered

New Security Vulnerabilities Uncovered in pfSense Firewall Software - Patch Now

To BCC or not to BCC that is the question data watchdog wants answered

Google's New Tracking Protection in Chrome Blocks Third-Party Cookies

New NKAbuse Malware Exploits NKN Blockchain Tech for DDoS Attacks

~ 14 Dec 2023 ~

McDonalds Ice Cream Machine Hackers Say They Found the Smoking Gun That Killed Their Startup

Microsoft seizes websites used to sell phony email accounts to Scattered Spider and other crims

Ten Years Later, New Clues in the Target Breach

Microsofts Digital Crime Unit Goes Deep on How It Disrupts Cybercrime

Surveillance Cameras Disguised as Clothes Hooks

116 Malware Packages Found on PyPI Repository Infecting Windows and Linux Systems

Russia joins North Korea in sending state-sponsored cyber troops to pick on TeamCity users

New Pierogi++ Malware by Gaza Cyber Gang Targeting Palestinian Entities

Unveiling NKAbuse: a new multiplatform threat abusing the NKN protocol

Iranian State-Sponsored OilRig Group Deploys 3 New Malware Downloaders

Siemens Web Server of Industrial Products

Siemens User Management Component (UMC)

Siemens SINUMERIK

Siemens SINEC INS

Siemens SIMATIC STEP 7 (TIA Portal)

Siemens SIMATIC S7-1500 CPU 1518(F)-4 PN/DP MFP V3.1

Siemens SIMATIC and SIPLUS Products

Siemens SCALANCE and RUGGEDCOM M-800/S615 Family

Siemens RUGGEDCOM and SCALANCE M-800/S615 Family

Siemens OPC UA Implementation in SINUMERIK ONE and SINUMERIK MC

Siemens LOGO! and SIPLUS LOGO!

Johnson Controls Kantech Gen1 ioSmart

Cambium ePMP 5GHz Force 300-25 Radio

Reimagining Network Pentesting With Automation

Reimagining Network Pentesting With Automation

Money-grubbing crooks abuse OAuth and baffling absence of MFA to do financial crimes

Russian SVR-Linked APT29 Targets JetBrains TeamCity Servers in Ongoing Attacks

OilRigs persistent attacks using cloud service-powered downloaders

Surprise! Email from personal. <br /> information.reveal@gmail.com is not going to contain good news

The SANS Holiday Hack Challenge is back!

New Hacker Group 'GambleForce' Tageting APAC Firms Using SQL Injection Attacks

Microsoft Takes Legal Action to Crack Down on Storm-1152's Cybercrime Network

~ 13 Dec 2023 ~

Hacker Group Linked to Russian Military Claims Credit for Cyberattack on Kyivstar

BazaCall Phishing Scammers Now Leveraging Google Forms for Deception

Learning the safety language of the cloud

Google Using Clang Sanitizers to Protect Android Against Cellular Baseband Vulnerabilities

Surveillance by the US Postal Service

How to Analyze Malwares Network Traffic in A Sandbox

Microsoft Warns of Hackers Exploiting OAuth for Cryptocurrency Mining and Phishing

Nearly a million non-profit donors' details left exposed in unsecured database

Delivering trust with DNS security

Major Cyber Attack Paralyzes Kyivstar - Ukraine's Largest Telecom Operator

FakeSG campaign, Akira ransomware and AMOS macOS stealer

Cyber security isnt simple, but it could be

Think tank report labels NSO, Lazarus, as 'cyber mercenaries'

Microsoft's Final 2023 Patch Tuesday: 33 Flaws Fixed, Including 4 Critical

Final Patch Tuesday of 2023 goes out with a bang

~ 12 Dec 2023 ~

Microsoft Patch Tuesday, December 2023 Edition

Peer-reviewed publication: Regulating Transnational Dissident Cyber espionage

Cloud engineer wreaks havoc on bank network after getting fired

Unveiling the Cyber Threats to Healthcare: Beyond the Myths

Discord in the ranks: Lone Airman behind top-secret info leak on chat platform

Threat actors misuse OAuth applications to automate financially driven attacks

Strengthening identity protection in the face of highly sophisticated attacks

Russian APT28 Hackers Targeting 13 Nations in Ongoing Cyber Espionage Campaign

Northern Ireland cops count human cost of August data breach

New Windows/Linux Firmware Attack

Schneider Electric Easy UPS Online Monitoring Software

Schneider Electric Easy UPS Online Monitoring Software

Non-Human Access is the Path of Least Resistance: A 2023 Recap

A pernicious potpourri of Python packages in PyPI

What to do if your company was mentioned on Darknet?

New MrAnon Stealer Malware Targeting German Users via Booking-Themed Scam

BlackBerry squashes plan to spin out its IoT biz

Apple Releases Security Updates to Patch Critical iOS and macOS Security Flaws

Interpol moves against human traffickers who enslave people to scam you online

New Critical RCE Vulnerability Discovered in Apache Struts 2 - Patch Now

Proposed US surveillance regime would enlist more businesses

Helping CTI Analysts Approach and Report on Emerging Technology Threats and Trends

Cloud Attacks: Whats Old is New Part 1

~ 11 Dec 2023 ~

Congress Clashes Over the Future of Americas Section 702 Spy Program

2.5M patents infected with data loss in Norton Healthcare ransomware outbreak

Memory-safe languages so hot right now, agrees Lazarus Group as it slings DLang malware

New Microsoft Incident Response team guide shares best practices for security teams and leaders

Ukraine Is Crowdfunding Its Reconstruction

Two years on, 1 in 4 apps still vulnerable to Log4Shell

Researchers Unmask Sandman APT's Hidden Link to China-Based KEYPLUG Backdoor

Read the clouds, reduce the cyber risk

Lazarus Group Using Log4j Exploits to Deploy Remote Access Trojans

Black Hat Europe 2023: Should we regulate AI?

Facebook Enables Messenger End-to-End Encryption by Default

23andMe responds to breach with new suit-limiting user terms

Playbook: Your First 100 Days as a vCISO - 5 Steps to Success

Webinar Psychology of Social Engineering: Decoding the Mind of a Cyber Attacker