Port 22

~ 31 Jul 2023 ~

AVRecon Botnet Leveraging Compromised Routers to Fuel Illegal Proxy Service

Fruity Trojan Uses Deceptive Software Installers to Spread Remcos RAT

What would sustainable security even look like?

Healthcare Innovation: A Safe and Secure Approach

Multiple Flaws Found in Ninja Forms Plugin Leave 800,000 Sites Vulnerable

What is Cloud Infrastructure?

Moving Beyond Tech: The SECs New Cybersecurity Regulations and the Need for Comprehensive Training

LDR553: Cyber Incident Management Now 5 Days!

US senator victim-blames Microsoft for Chinese hack

~ 29 Jul 2023 ~

Call of Duty: Modern Warfare 2 Players Hit With Worm Malware

New Android Malware CherryBlos Utilizing OCR to Steal Sensitive Data

RFP Template for Browser Security

Apple Sets New Rules for Developers to Prevent Fingerprinting and Data Misuse

Ivanti Warns of Another Endpoint Manager Mobile Vulnerability Under Active Attack

Stark#Mule Malware Campaign Targets Koreans, Uses US Army Documents

Florida man accused of hoarding America's secrets faces fresh charges

Millions of people's data stolen because web devs forget to check access perms

~ 28 Jul 2023 ~

Friday Squid Blogging: Zaqistan Flag

Hack Crew Responsible for Stolen Data, NATO Investigates Claims

CherryBlos Malware Uses OCR to Pluck Android Users' Cryptocurrency

FBI boss: Congress must renew Section 702 spy powers that's how we get nearly all our cyber intel

Chinese companies evade sanctions, fuel Moscows war on Ukraine, says report

Senator Blasts Microsoft for Negligence in 365 Email Breach

Choose the Best Biometrics Authentication for Your Use Case

Another AI Pitfall: Digital Mirroring Opens New Cyberattack Vector

IT Ops and Security Teams Need Automation, Not Couples Therapy

IcedID Malware Adapts and Expands Threat with Updated BackConnect Module

STARK#MULE Targets Koreans with U.S. Military-themed Document Lures

A Data Exfiltration Attack Scenario: The Porsche Experience

Hackers Abusing Windows Search Feature to Install Remote Access Trojans

Indirect Instruction Injection in Multi-Modal LLMs

Anomaly detection in certificate-based TGT requests

BlueBravo Deploys GraphicalProton Backdoor Against European Diplomatic Entities

Major Security Flaw Discovered in Metabase BI Software Urgent Update Required

Cybersecurity Agencies Warn Against IDOR Bugs Exploited for Data Breaches

Cyclops Launches From Stealth With Generative AI-Based Search Tool

Why CISOs Should Get Involved With Cyber Insurance Negotiation

~ 27 Jul 2023 ~

NATO probes hacktivist crew's boasts of stolen portal data

Despite Post-Log4J Security Gains, Developers Can Still Improve

7 in 10 MSPs Name Data Security and Network Security As Their Top IT Priorities for 2023

CompTIA ChannelCon Technology Vendor Fair Highlights Tech Solutions

Ryanair Hit With Lawsuit Over Use of Facial Recognition Technology

Millions of People Affected in MOVEit Attack on US Gov't Vendor

The NSA Is Lobbying Congress to Save a Phone Surveillance 'Loophole'

Healthcare files of 8M-plus people fall into hands of Clop via MOVEit mega-bug

Deloitte and Chuck E. Cheese join 500+ orgs as MOVEit victims

TSA Updates Pipeline Cybersecurity Requirements

Think tank calls for monitoring of Chinese AI-enabled products

Group-IB Co-Founder Sentenced to 14 Years in Russian Penal Colony

Israeli-Trained Azerbaijan Cyber Students Mark Inaugural Graduation

What Will CISA's Secure Software Development Attestation Form Mean?

Ubuntu Linux Cloud Workloads Face Rampant Root Take Takeovers

How to connect with Microsoft Security at Black Hat USA 2023

Why Today's CISOs Must Embrace Change

GameOver(lay): Two Severe Linux Vulnerabilities Impact 40% of Ubuntu Users

New Malvertising Campaign Distributing Trojanized IT Tools via Google and Bing Search Ads

The 4 Keys to Building Cloud Security Programs That Can Actually Shift Left

Fooling an AI Article Writer

Hackers Target Apache Tomcat Servers for Mirai Botnet and Crypto Mining

Group-IB Co-Founder Sentenced to 14 Years in Russian Prison for Alleged High Treason

APT trends report Q2 2023

New SEC Rules Require U.S. Companies to Reveal Cyber Attacks Within 4 Days

Companies Must Have Corporate Cybersecurity Experts, SEC Says

What is Cloud Security Compliance?

What is Cloud Security Compliance?