Port 22

~ 9 May 2023 ~

Microsoft Patches Two Zero-Day Vulnerabilities

Privoro and Samsung Partner to Provide Trusted Control Over Smartphone Radios and Sensors

FBI Disarms Russian FSB 'Snake' Malware Network

FBI-led Op Medusa slays NATO-bothering Russian military malware network

Microsoft disarms push notification bombers with number matching in Authenticator

ESET APT Report: Attacks by China-, North Korea-, and Iran-aligned Threat Actors; Russia Eyes Ukraine and the EU

The Problem of Old Vulnerabilities and What to Do About It

U.S. Authorities Seize 13 Domains Offering Criminal DDoS-for-Hire Services

EU proposes spyware Tech Lab to keep Big Brother governments in check

Justice Department Targets 13 Websites Linked to DDoS-for-Hire

PIPEDREAM Malware against Industrial Control Systems

SideWinder Strikes Victims in Pakistan, Turkey in Multiphase Polymorphic Attack

Feds Take Down 13 More DDoS-for-Hire Services

Keep Your Company Cyber Competent Without Adding Cyber Anxiety

Royal Ransomware Expands to Target Linux, VMware ESXi

Half of npm Packages Vulnerable to Old-School Weapon: the 'Shift' Key

Operation ChattyGoblin: Hackers Targeting Gambling Firms via Chat Apps

From DevOps to DevSecOps: Strengthen Product Security with Collaborative Tools

Hitachi Energy MSM

BEC Campaign via Israel Spotted Targeting Large Multinational Companies

The Team of Sleuths Quietly Hunting Cyberattack-for-Hire Services

Researchers Uncover SideWinder's Latest Server-Based Polymorphism Technique

ESET APT Activity Report Q42022Q1 2023

Microsoft Warns of State-Sponsored Attacks Exploiting Critical PaperCut Vulnerability

How the war in Ukraine has been a catalyst in privatepublic collaborations

Beijing raids consultancy, State-sponsored media warns more to come

How To Delete Your Data From ChatGPT

New Ransomware Strain 'CACTUS' Exploits VPN Flaws to Infiltrate Networks

FYI: Intel BootGuard OEM private keys leak from MSI cyber-heist

New Bazel Ruleset Helps Developers Build Secure Container Images

~ 8 May 2023 ~

Western Digital: Customer info stolen in that IT attack

WordPress plugin hole puts '2 million websites' at risk

Twitter admits 'security incident' made private Circles not so much

Consilient Inc. and Harex InfoTech Partner to Fight Financial Crime in South Korea

Whiteford Taylor & Preston LLP Issues Notice of Data Incident

Government, Industry Efforts to Thwart Ransomware Slowly Start to Pay Off

1M NextGen Patient Records Compromised in Data Breach

Western Digital Confirms Customer Data Stolen in Ransomware Attack

Why the 'Why' of a Data Breach Matters

Modern Auth comes to on-prem Exchange Server gear

AI Hacking Village at DEF CON This Year

MSI Data Breach: Private Code Signing Keys Leaked on the Dark Web

Western Digital Confirms Customer Data Stolen by Hackers in March Breach

Why the FTX Collapse Was an Identity Problem

North Korean APT Uses Malicious Microsoft OneDrive Links to Spread New Malware

Join Our Webinar: Learn How to Defeat Ransomware with Identity-Focused Protection

SideCopy Using Action RAT and AllaKore RAT to infiltrate Indian Organizations

How to Set Up a Threat Hunting and Threat Intelligence Program

SafeGraph Lands US Air Force Contract After Targeting Abortion Clinics

CERT-UA Warns of SmokeLoader and RoarBAT Malware Attacks Against Ukraine

T-Mobile suffers second data theft in less than six months

what-is-threat-detection

~ 7 May 2023 ~

Your Twitter Feed Sucks Now. These Free Add-Ons Can Help

~ 6 May 2023 ~

DEF CON to set thousands of hackers loose on LLMs

Russian Ghost Ships Identified Near the Nord Stream Blasts

Dragon Breath APT Group Using Double-Clean-App Technique to Target Gambling Industry

New Vulnerability in Popular WordPress Plugin Exposes Over 2 Million Sites to Cyberattacks

~ 5 May 2023 ~

Friday Squid Blogging: Mediterranean Beef Squid Hoax

Dump these insecure phone adapters because we're not fixing them, says Cisco

KnowBe4 Launches Password Kit to Celebrate World Password Day

Satori Unveils Universal Data Permissions Scanner, A Free Open-Source Tool that Sheds Light on Data Access Authorization

Browser Isolation Adapts to Remote Work, Greater Cloud Usage

A right Royal pain in the Dallas: City IT systems crippled by ransomware

Judge Spares Former Uber CISO Jail Time Over 2016 Data Breach Charges

Apple Patches Bluetooth Flaw in AirPods, Beats

Doctors Behind Mifepristone Ban Called Christians a Top Threat

APTs target MSP access to customer networks Week in security with Tony Anscombe

Attackers Route Malware Activity Over Popular CDNs

New White House AI Initiatives Include AI Software-Vetting Event at DEF CON

APTs target MSP access to customer networks Week in security with Tony Anscombe

Unifying XDR and SIEM Capabilities in 1 Platform

The (Security) Cost of Too Much Data Privacy

2 Years After Colonial Pipeline, US Critical Infrastructure Still Not Ready for Ransomware

New Android Malware 'FluHorse' Targeting East Asian Markets with Deceptive Tactics

Capita admits some pension data 'likely' to have been accessed in March breach

Hackers Targeting Italian Corporate Banking Clients with New Web-Inject Toolkit DrIBAN

N. Korean Kimsuky Hackers Using New Recon Tool ReconShark in Latest Cyberattacks

Lack of Visibility: The Challenge of Protecting Websites from Third-Party Scripts

Packagist Repository Hacked: Over a Dozen PHP Packages with 500 Million Compromised

Users complain over UK state-owned bank's services as Atos eyes the exit

Fleckpe Android Malware Sneaks onto Google Play Store with Over 620,000 Downloads

Cisco Warns of Vulnerability in Popular Phone Adapter, Urges Migration to Newer Model

China labels USA 'Empire of hacking' based on old Wikileaks dumps

Google Expands Passkey Support with Passwordless Authentication

$10M Is Yours If You Can Get This Guy to Leave Russia

The Vulnerability Assessment Framework: Stop Inefficient Patching Now and Transform Your Vulnerability Management

Cybersecurity Jobs: Incident Response Team Member (Japanese)

~ 4 May 2023 ~

Identifying Compromised Data Can Be a Logistical Nightmare

Ex-Uber CSO gets probation for covering up theft of data on millions of people

Autocrypt Releases Comprehensive Key Management Solution for Automotive Manufacturing

Databricks Ventures Invests in Data Security Leader Immuta

Dallas City Systems Taken Down by Royal Ransomware

InsightCyber Launches Platform to Provide Cyber Threat Management and Security to Global Critical Infrastructure

OneTrust Enhances Data Discovery and Governance by Introducing AI-Powered Document Classification

Netskope: Attackers Double Down on Social Engineering Techniques and Malicious Functionalities

Google Launches Cybersecurity Career Certificate Program

How Public-Private Information Sharing Can Level the Cybersecurity Playing Field

Strike three: FTC says Meta still failing to protect user privacy

How to Spot a ChatGPT Phishing Website

Famine to Feast and Back: Startups Adjust to Economic Realities