Port 22

~ 26 Apr 2023 ~

The good, the bad and the generative AI

VMware Releases Critical Patches for Workstation and Fusion Software

The game of CLUE

CISOs Rethink Data Security with Info-Centric Framework

~ 25 Apr 2023 ~

Datadog's 2023 State of Application Security Report Presents Top AppSec Trends

Dig Security Announces New Integration With CrowdStrike

Apache Superset: A story of insecure default keys, thousands of vulnerable systems, few paying attention

BlackBerry Extends Partnership With Managed Security Services Provider (MSSP) to Ensure SMBs are Set Up for Cyber Success

AI Experts: Account for AI/ML Resilience & Risk While There's Still Time

Akamai Introduces Prolexic Network Cloud Firewall

Forcepoint Delivers Data Security Everywhere, Extending DLP Policies From Endpoints to the Cloud

NetWitness Partners With Palo Alto Networks, Broadcom to Launch SASE Packet Integrations at RSA Conference 2023

ReliaQuest Adds AI Capabilities to GreyMatter Intelligent Analysis

Vantage Travel Experiences Data Security Incident

'Educated Manticore' Targets Israeli Victims in Improved Phishing Attacks

Menaced by miscreants, critical infrastructure needs a good ETHOS. Ah, here's one

'Good' AI Is the Only Path to True Zero-Trust Architecture

A Security Team Is Turning This Malware Gangs Tricks Against It

Attackers Abuse PaperCut RCE Flaws to Take Over Enterprise Print Servers

DDoS, Not Ransomware, Is Top Business Concern for Edge Networks

The Decline in Ransomware: Does It Actually Increase Risks for Organizations?

Microsoft announces the 2023 Microsoft Security Excellence Awards winners

Googles Authenticator App Now Lets You Sync 2FA Codes Across Devices

HiddenLayer Nabs Most Innovative Startup Crown at RSAC

Building a Better SBOM

New SLP Vulnerability Could Let Attackers Launch 2200x Powerful DDoS Attacks

Iranian Hackers Launch Sophisticated Attacks Targeting Israel with Powerless Backdoor

Scada-LTS Third Party Component

Keysight N8844A Data Analytics Web Service

Modernizing Vulnerability Management: The Move Toward Exposure Management

Lazarus Subgroup Targeting Apple Devices with New RustBucket macOS Malware

Google Cloud Introduces Security AI Workbench for Faster Threat Detection and Analysis

Cyberweapons Manufacturer QuaDream Shuts Down

Google Authenticator App Gets Cloud Backup Feature for TOTP Codes

Google's here to boost your cloud security and the magic ingredient? AI, of course

~ 24 Apr 2023 ~

Millions of Artifacts, Misconfigured Enterprise Software Registries Are Ripe for Pwning

Tangled Up: 'Tomiris' APT Uses Turla Malware, Confusing Researchers

Google Workspace Extends Enterprise-Grade Security and Device Management for Hybrid Work With Okta and VMware

Bot Management Aims to Tame Attacker Automation

Critical Infrastructure Organizations Further Affected in 3CX Breach

Are Low-Code Apps a Ticking Access Control Time-Bomb?

North Korean Foreign Trade Bank Representative Charged in Crypto Laundering Conspiracies

Intel Let Google Cloud Hack Its New Secure Chips and Found 10 Bugs

Stay compliant and protect sensitive data with Zero Trust security

Google Cloud Announces New Security AI Workbench and Ecosystem Expansion at RSAC 2023

Qwiet AI Builds a Neural Net to Catch Coding Vulnerabilities

Getting started with the CDMC frameworkMicrosofts guide to cloud data management

ZeroFox to Acquire LookingGlass, Broadening Global Attack Surface Intelligence Capabilities

Cisco Unveils Solution to Rapidly Detect Advanced Cyber Threats and Automate Response

The New Frontier in Email Security: Goodbye, Gateways; Hello, Behavioral AI

Russian Hackers Tomiris Targeting Central Asia for Intelligence Gathering

Cybersecurity Survival: Hide From Adversarial AI

Ransomware Hackers Using AuKill Tool to Disable EDR Software Using BYOVD Attack

Zimperium Launches Unified Mobile Security Platform for Threat Detection, Visibility, and Response

Rethinking Safer AI: Can There Really Be a 'TruthGPT'?

Palo Alto Networks Takes Aim At Cyberattacks With the Expansion of Unit 42's Digital Forensics & Incident Response Service Globally

New All-in-One "EvilExtractor" Stealer for Windows Systems Surfaces on the Dark Web

CrowdStrike Introduces CrowdStream to Accelerate and Simplify XDR Adoption

Study: 84% of Companies Use Breached SaaS Applications - Here's How to Fix it for Free!

Hackers Exploit Outdated WordPress Plugin to Backdoor Thousands of WordPress Sites

If you haven't patched Microsoft Process Explorer, prepare to get pwned

How fiends abuse an out-of-date Microsoft Windows driver to infect victims

UK Threatens End-to-End Encryption

Tomiris called, they want their Turla malware back

Russian Hackers Suspected in Ongoing Exploitation of Unpatched PaperCut Servers

That 3CX supply chain attack keeps getting worse: More victims found

Chinese scientists calculate the Milky Way's mass as 805 billion times that of our Sun

~ 23 Apr 2023 ~

Hacker Group Names Are Now Absurdly Out of Control

~ 22 Apr 2023 ~

Criminals Are Using Tiny Devices to Hack and Steal Cars

European air traffic control confirms website 'under attack' by pro-Russia hackers

Lazarus X_TRADER Hack Impacts Critical Infrastructure Beyond 3CX Breach

CISA Adds 3 Actively Exploited Flaws to KEV Catalog, including Critical PaperCut Bug

~ 21 Apr 2023 ~

Microsoft pushes for more women in cybersecurity

Friday Squid Blogging: More on Squid Fishing

Shields Health Breach Exposes 2.3M Users' Data

North Korea's Kimsuky APT Keeps Growing, Despite Public Outing

EvilExtractor Infostealer Campaign Targeting Windows OS

Intel Prioritizes Security in Latest vPro Chips

Hacking Pickleball

Shadow IT, SaaS Pose Security Liability for Enterprises

Using the iPhone Recovery Key to Lock Owners Out of Their iPhones

The Tangled Web of IR Strategies

Kubernetes RBAC Exploited in Large-Scale Campaign for Cryptocurrency Mining

GhostToken Flaw Could Let Attackers Hide Malicious Apps in Google Cloud Platform

Did you mistakenly sell your network access? Week in security with Tony Anscombe

14 Kubernetes and Cloud Security Challenges and How to Solve Them

The War on Passwords Enters a Chaotic New Phase

International cops urge Meta <em>not</em> to implement secure encryption for all

Did you mistakenly sell your network access? Week in security with Tony Anscombe

N.K. Hackers Employ Matryoshka Doll-Style Cascading Supply Chain Attack on 3CX

Healthcare organisations urged to improve system security

Thanks for fixing the computer lab. Now tell us why we shouldnt expel you?

Cisco and VMware Release Security Updates to Patch Critical Flaws in their Products

3CX Breach Was a Double Supply Chain Compromise

Ransomware: Every internet-connected network is at risk. Be prepared!

~ 20 Apr 2023 ~

Infoblox Uncovers DNS Malware Toolkit & Urges Companies to Block Malicious Domains

Bitsight Expands into Integrated Cyber-Risk Management

'GhostToken' Opens Google Accounts to Permanent Infection

OpenSSF Adds Software Supply Chain Tracks to SLSA Framework

New Policy Group Wants to Improve Cybersecurity Disclosure, Support Researchers