Port 22

~ 20 Apr 2023 ~

OpenSSF Adds Software Supply Chain Tracks to SLSA Framework

New Policy Group Wants to Improve Cybersecurity Disclosure, Support Researchers

Red Canary Announces Readiness

3CX Supply Chain Attack Tied to Financial Trading App Breach

Major US CFPB Data Breach Caused by Employee

Trigona Ransomware Trolling for 'Poorly Managed' MS-SQL Servers

Twitter's 2FA Policy Is a Call for Passkey Disruption

Microsoft Entra delivers 240 percent ROI, according to new Forrester study

'AuKill' Malware Hunts & Kills EDR Processes

Global Spyware Attacks Spotted Against Both New & Old iPhones

Tech Insight: Dangers of Using Large Language Models Before They Are Baked

GPT-4 Provides Improved Answers While Posing New Questions

Two Critical Flaws Found in Alibaba Cloud's PostgreSQL Databases

Capita has 'evidence' customer data was stolen in digital burglary

An earlier supply chain attack led to the 3CX supply chain attack, Mandiant says

The Huge 3CX Breach Was Actually 2 Linked Supply Chain Attacks

Newer Authentication Tech a Priority for 2023

INEA ME RTU

Lazarus Group Adds Linux Malware to Arsenal in Operation Dream Job

Beyond Traditional Security: NDR's Pivotal Role in Safeguarding OT Networks

Fortra Sheds Light on GoAnywhere MFT Zero-Day Exploit Used in Ransomware Attacks

ChatGPT's Data Protection Blind Spots and How Security Teams Can Solve Them

New Zero-Click Exploits Against iOS

Daggerfly Cyberattack Campaign Hits African Telecom Services Providers

NSO Group Used 3 Zero-Click iPhone Exploits Against Human Rights Defenders

Linux malware strengthens links between Lazarus and the 3CX supplychain attack

AI defenders ready to foil AI-armed attackers

Protect the Industrial Control Systems (ICS)

How to Build AI-Powered Cybersecurity Applications

Cloud Agnostic or Devout?

~ 19 Apr 2023 ~

Medusa ransomware crew brags about spreading Bing, Cortana source code

Appeals court spares Google from $20m patent payout over Chrome sandbox

Killnet Boss Exposes Rival Leader in Kremlin Hacktivist Beef

Russian Fancy Bear APT Exploited Unpatched Cisco Routers to Hack US, EU Gov't Agencies

7 Sizzling Sessions to Check Out at RSA Conference 2023

Spyware slinger QuaDreams reported demise may be the canary in the coal mine

Coro Raises an Additional $75M Bringing the Total Raised to $155M in 12 Months

CrowdStrike Announces Managed XDR to Close the Cybersecurity Skills Gap, Expands MDR Portfolio

The Hacker Who Hijacked Matt Walshs Twitter Was Just Bored

GitHub debuts pedigree check for npm packages via Actions

Simplified endpoint management with Microsoft Intune Suite: Adopting a long-term approach with intelligence and automation

Google TAG Warns of Russian Hackers Conducting Phishing Attacks in Ukraine

Gary Bowser, Former Nintendo Hacker, Released From Prison

Blind Eagle Cyber Espionage Group Strikes Again: New Attack Chain Uncovered

Popular Fitness Apps Leak Location Data Even When Users Set Privacy Zones

3 Flaws, 1 War Dominated Cyber-Threat Landscape in 2022

Akamai Technologies to Acquire API Security Company Neosec

How to Prevent 2 Common Attacks on MFA

Google Chrome Hit by Second Zero-Day Attack - Urgent Patch Update Released

The EUs Cyber Solidarity Act: Security Operations Centers to the rescue!

Pakistani Hackers Use Linux Malware Poseidon to Target Indian Government Agencies

How ChatGPTand Bots Like ItCan Spread Malware

Uncovering (and Understanding) the Hidden Risks of SaaS Apps

EFF on the UN Cybercrime Treaty

Prioritize what matters most

PC running slow? 10 ways you can speed it up

U.S. and U.K. Warn of Russian Hackers Exploiting Cisco Router Flaws for Espionage

Iranian Government-Backed Hackers Targeting U.S. Energy and Transit Systems

Critical Flaws in vm2 JavaScript Library Can Lead to Remote Code Execution

Keeping your boat afloat

~ 18 Apr 2023 ~

US citizens charged with pushing pro-Kremlin disinfo, election interference

Cyberattacks Can Cost Enterprises Up to 30% of Operating Income According to ThreatConnect

Report: Over Half of North American Consumers Are Open to Passwordless

Netwrix Annual Security Survey: 68% of Organizations Experienced a Cyberattack Within the Last 12 Months

KnowBe4 Phishing Test Results Reveal IT and Online Services Emails Drive Dangerous Attack Trend

Marlinspike Adds Charles Carmakal to its Advisory Board

NSO Group is Back in Business With 3 New iOS Zero-Click Exploits

Giving a Face to the Malware Proxy Service Faceless

Russian snoops just love invading unpatched Cisco gear, America and UK warn

'Zaraza' Bot Targets Google Chrome to Extract Login Credentials

QBot Expands Initial Access Malware Strategy With PDF-WSF Combo

Microsoft opens up Defender threat intel library with file hash, URL search

Researchers Discover First Ever Major Ransomware Targeting macOS

Payments firm accused of aiding 'contact Microsoft about a virus' scammers must cough $650k

Where There's No Code, There's No SDLC

APT41 Taps Google Red Teaming Tool in Targeted Info-Stealing Attacks

Why Your Anti-Fraud, Identity & Cybersecurity Efforts Should Be Merged

'Goldoson' Malware Sneaks into Google Play Apps, Racks Up 100M Downloads

Nation-state threat actor Mint Sandstorm refines tradecraft to attack high-value targets

Microsoft shifts to a new threat actor naming taxonomy

How Zero Trust Can Protect Systems Against Generative AI Agents

Beyond CVEs: The Key to Mitigating High-Risk Security Exposures

YouTube Videos Distributing Aurora Stealer Malware via Highly Evasive Loader

Brit cops rapped over app that recorded 200k phone calls

Recycled Core Routers Exposed Sensitive Corporate Network Info

Discarded, not destroyed: Old routers reveal corporate secrets

As Consumer Privacy Evolves, Here's How You Can Stay Ahead of Regulations

ZeroFox Acquires LookingGlass

Goldoson Android Malware Infects Over 100 Million Google Play Store Downloads

Used Routers Often Come Loaded With Corporate Secrets

Schneider Electric Easy UPS Online Monitoring Software

Omron CS/CJ Series

DFIR via XDR: How to expedite your investigations with a DFIRent approach

Wrong time to weaken encryption, UK IT chartered institute tells government

Using LLMs to Create Bioweapons

Triple Threat: NSO Groups Pegasus Spyware Returns in 2022 with a Trio of iOS 15 and iOS 16 Zero-Click Exploit Chains

Iranian Hackers Using SimpleHelp Remote Support Software for Persistent Access

Capita IT breach gets worse as Black Basta claims it's now selling off stolen data

LockBit Ransomware Now Targeting Apple macOS Devices

US alleges China created troll army that tried to have dissidents booted from Zoom