Port 22

~ 30 Jun 2023 ~

The good, the bad and the ugly of AI Week in security with Tony Anscombe

Google Cloud GenAI Is Coming to Thales' Data Security Platform

CISA BOD 23-01: What Agencies Need to Know About Compliance

3 Ways to Build a More Skilled Cybersecurity Workforce

Iranian Hackers Charming Kitten Utilize POWERSTAR Backdoor in Targeted Espionage Attacks

The good, the bad and the ugly of AI Week in security with Tony Anscombe

3 Reasons SaaS Security is the Imperative First Step to Ensuring Secure AI Usage

The US Is Spying on the UN Secretary General

Apple, Google, and MOVEit Just Patched Serious Security Flaws

WhatsApp Upgrades Proxy Feature Against Internet Shutdowns

Life long cyber security learning

Cybercriminals Hijacking Vulnerable SSH Servers in New Proxyjacking Campaign

Quirky QWERTY killed a password in Paris

MITRE Unveils Top 25 Most Dangerous Software Weaknesses of 2023: Are You at Risk?

Fujitsu admits it fluffed the fix for Japans flaky ID card scheme

Cybersecurity Jobs: Application Pen Tester (Japanese)

~ 29 Jun 2023 ~

Crook who stole $23m+ in YouTube song royalties gets five years behind bars

Pepper and Embedded Insurance Partner on Cyber Insurance For Consumers, SMBs

CISA Wants Exposed Government Devices Remediated In 14 Days

IEC Standardization Leaders Convene in Amsterdam to Review Utility Interworking of Key Standards

Apple Objects to UK Bill That Would Break Encrypted Messaging

Researchers Detail 4 SAP Bugs, Including Flaw in ABAP Kernel

It's 2023 and memory overwrite bugs are not just a thing, they're still number one

Center for Internet Security, CREST Join Forces to Secure Organizations Globally

TXOne Networks' Stellar Solution Safeguards Operational Stability for Organizations in Various Industries

WatchGuard Threat Lab Report Reveals New Browser-Based Social Engineering Trends

Employer Demand for Technology Workers Across Europe Remains on Firm Footing

Cybellum Unveils New Brand, Amplifying Commitment to Team-Centric Product Security

OTORIO Rolls Out Advanced Attack Graph Analysis for OT Security

Invary Raises $1.85M in Pre-Seed Funding to Close Critical Gap in Zero Trust Security

Mend.io Launches Inaugural Open Source Reliability Leaderboard

Russian Cybersecurity Executive Arrested for Alleged Role in 2012 Megahacks

AI-Enabled Voice Cloning Anchors Deepfaked Kidnapping

Thousands of Filipinos, Others Rescued From Forced Cybercrime Labor

Chinese balloon that US shot down was 'crammed' with American hardware

Cybersecurity Is the Healthcare Your Organization Needs

US Patent Office Hacked, Trademark Apps Accessed

From MuddyC3 to PhonyC2: Iran's MuddyWater Evolves with a New Cyber Weapon

Patch me if you can: Cyberattack Series

3 Tips to Increase Hybrid and Multicloud Security

Redacting Documents with a Black Sharpie Doesnt Work

When It Comes to Secure Coding, ChatGPT Is Quintessentially Human

Newbie Akira Ransomware Builds Momentum With Linux Shift

Fluhorse: Flutter-Based Android Malware Targets Credit Cards and 2FA Codes

UAE, Israel Ink Pivotal Joint Cyber-Threat Intelligence Agreement

Schneider Electric EcoStruxure Operator Terminal Expert

Ovarro TBox RTUs

Mitsubishi Electric MELSEC-F Series

Delta Electronics InfraSuite Device Master

The Right Way to Enhance CTI with AI (Hint: It's the Data)

North Korean Hacker Group Andariel Strikes with New EarlyRat Malware

Android Spy App LetMeSpy Suffers Major Data Breach, Exposing Users' Personal Data

Employee monitoring: is bossware right for your company?

Critical Security Flaw in Social Login Plugin for WordPress Exposes Users' Accounts

Pornhub Accused of Illegal Data Collection

Apple joins the opposition to encryption-bypassing 'spy clause' in UK internet law

Newly Uncovered ThirdEye Windows-Based Malware Steals Sensitive Data

Network security guy in extradition tug of war between US and Russia

~ 28 Jun 2023 ~

Russian Spies, War Ministers Reliant on Cybercrime in Pariah State

1Password Launches Unlock With Single Sign-On for OIDC-Supported Identity Providers

6 Ways Cybersecurity is Gut-Checking the ChatGPT Frenzy

NPM Plagued With 'Manifest Confusion' Malware-Hiding Weakness

LetMeSpy Phone-Tracking App Hacked, Revealing User Data

Social Engineering Adds Depth to Red Team Exercises

Astrix Security Raises $25M in Series A Funding

Cato Networks Revolutionizes Network Security With Real-Time, Machine Learning-Powered Protection

Malwarebytes ChatGPT Survey Reveals 81% are Concerned by Generative AI Security Risks

FIDO Alliance Publishes Guidance for Deploying Passkeys in the Enterprise

Saudi Arabia's Cyber Capabilities Ranked Second Globally

Generative AI Projects Pose Major Cybersecurity Risk to Enterprises

How automation is evolving SecOpsand the real cost of cybercrime

Alert: New Electromagnetic Attacks on Drones Could Let Attackers Take Control

Should We Chat? Privacy in the WeChat Ecosystem

Privacy in the WeChat Ecosystem Explained

3 Strategies for Bringing Rigor to Software Security

CryptosLabs Scam Ring Targets French-Speaking Investors, Rakes in 480 Million

Open Source LLM Projects Likely Insecure, Risky to Use

Stalkerware Vendor Hacked

How Your Real Flight Reservation Can Be Used to Scam You

5 Things CISOs Need to Know About Securing OT Environments

8Base Ransomware Spikes in Activity, Threatens U.S. and Brazilian Businesses

Andariels silly mistakes and a new malware family

Avoid juice jacking and recharge your batteries safely this summer

Critical SQL Injection Flaws Expose Gentoo Soko to Remote Code Execution

UCLA, Siemens Among Latest Victims of Relentless MOVEit Attacks

Jscrambler Launches JavaScript Scanner for PCI DSS 4.0 Compliance

Google Workspace Log Extraction

Protecting Small Businesses From Ransomware on a Budget

Cequence Security Adds Generative AI to API Security

~ 27 Jun 2023 ~

Miscreants leak texts and info siphoned by Android stalkerware app LetMeSpy

Mockingjay Slips By EDR Tools With Process Injection Technique

Trans-Rights Hacktivists Steal City of Ft. Worth's Data

Cops' total pwnage of 'secure' EncroChat nets 6,500+ arrests, 740m in funds so far

Warning: JavaScript registry npm vulnerable to 'manifest confusion' abuse

Typing Incriminating Evidence in the Memo Field

U.K. Cyber Thug PlugwalkJoe Gets 5 Years in Prison

Pilot Applicant Information for American, Southwest Hacked

Most Enterprise SIEMs Blind to MITRE ATT&CK Tactics

Why the FDA's SBOM Mandate Changes the Game for OSS Security

Why Cyber Funding Flows for Rural Water Systems