Port 22

~ 4 Oct 2023 ~

SEC670 Prep Quiz Answers

~ 3 Oct 2023 ~

US v Sam Bankman-Fried trial begins ... as imploded crypto-biz boss sues his insurer

Russian Hacktivism Takes a Toll on Organizations in Ukraine, EU, US

Gartner Forecasts Global Security and Risk Management Spending to Grow 14% in 2024

Attacks on Maximum Severity WS_FTP Bug Have Been Limited So Far

USPS Anchors Snowballing Smishing Campaigns

Name That Edge Toon: Office Artifacts

Mercenary spyware: Defending against whats next iMEdD International Journalism Forum 2023

Qualcomm Releases Patch for 3 new Zero-Days Under Active Exploitation

Defending new vectors: Threat actors attempt SQL Server to cloud lateral movement

Fast-Growing Dropbox Campaign Steals Microsoft SharePoint Credentials

Warning: PyTorch Models Vulnerable to Remote Code Execution via ShellTorch

Over 3 Dozen Data-Stealing Malicious npm Packages Found Targeting Developers

Ransomware Crisis, Recession Fears Leave CISOs in Tough Spot

CISA adds latest Chrome zero-day to Known Exploited Vulnerabilities Catalog

API Security Trends 2023 Have Organizations Improved their Security Posture?

Protecting your IT infrastructure with Security Configuration Assessment (SCA)

Hacking Gas Pumps via Bluetooth

Playing your part in building a safer digital world: Why cybersecurity matters

Researcher Reveals New Techniques to Bypass Cloudflare's Firewall and DDoS Protection

Arm Issues Patch for Mali GPU Kernel Driver Vulnerability Amidst Ongoing Exploitation

Nexusflow Launches to Help Automate the SOC

Co-founder of collapsed crypto biz Three Arrows cuffed at airport

~ 2 Oct 2023 ~

Secure Yeti Appoints Jayson E. Street as Chief Adversarial Officer to Spearhead Cybersecurity Empowerment

Visa Program Combats Friendly Fraud Losses For Small Businesses Globally

Feds hopelessly behind the times on ransomware trends in alert to industry

In Search of Rust Developers, Companies Turn to In-House Training

North Korea Poses as Meta to Deploy Complex Backdoor at Aerospace Org

KillNet Claims DDoS Attack Against Royal Family Website

FBI: Crippling 'Dual Ransomware Attacks' on the Rise

Norway Urges Europe-Wide Ban on Meta's Targeted Ad Data Collection

Addressing AI and Security Challenges With Red Teams: A Google Perspective

Iran-Linked APT34 Spy Campaign Targets Saudis

Which DFIR Challenges Does the Middle East Face?

NSA AI Security Center

Celebrate 20 years of Cybersecurity Awareness Month with Microsoft and lets secure our world together

Dont Let Zombie Zoom Links Drag You Down

The Biggest Hack of 2023 Keeps Getting Bigger

Predictive Policing Software Terrible at Predicting Crimes

Making Sense of Today's Payment Cybersecurity Landscape

Security researchers believe mass exploitation attempts against WS_FTP have begun

LUCR-3: Scattered Spider Getting SaaS-y in the Cloud

APIs: Unveiling the Silent Killer of Cyber Security Risk Across Industries

Silent Skimmer: A Year-Long Web Skimming Campaign Targeting Online Payment Businesses

AWS stirs the MadPot busting bot baddies and eastern espionage since 2010

OpenRefine's Zip Slip Vulnerability Could Let Attackers Execute Malicious Code

The Silent Threat of APIs: What the New Data Reveals About Unknown Risk

BunnyLoader: New Malware-as-a-Service Threat Emerges in the Cybercrime Underground

Zanubis Android Banking Trojan Poses as Peruvian Government App to Target Users

Yes, Singapore immigration plans to scan your face instead of your passport

SANS ICS Security Awareness - New Series: Managing Human Risk in Industrial Control System Environments

~ 1 Oct 2023 ~

Now MOVEit maker Progress patches holes in WS_FTP

How to Stop Google Bard From Storing Your Data and Location

How to Tell When Your Phone Will Stop Getting Security Updates

~ 30 Sep 2023 ~

A Closer Look at the Snatch Data Ransom Group

Chinese Hackers Are Hiding in Routers in the US and Japan

Apple, Microsoft, and Google Just Fixed Multiple Zero-Day Flaws

FBI Warns of Rising Trend of Dual Ransomware Attacks Targeting U.S. Companies

Iranian APT Group OilRig Using New Menorah Malware for Covert Operations

New Critical Security Flaws Expose Exim Mail Servers to Remote Attacks

~ 29 Sep 2023 ~

Friday Squid Blogging: Protecting Cephalopods in Medical Research

Securing AI: What You Should Know

Microsoft Bing Chat pushes malware via bad ads

How Can Your Security Team Help Developers Shift Left?

PhD student guilty of 3D-printing 'kamikaze' drone for Islamic State terrorists

Spyware Vendor Targets Egyptian Orgs With Rare iOS Exploit Chain

DHS: Physical Security a Concern in Johnson Controls Cyberattack

DHS Calls Into Question Physical Security in Johnson Controls Cyberattack

Cybersecurity Gaps Plague US State Department, GAO Report Warns

Cybercriminals Using New ASMCrypt Malware Loader Flying Under the Radar

Move Over, MOVEit: Critical Progress Bug Infests WS_FTP Software

People Still Matter in Cybersecurity Management

Attacks on Azerbaijan Businesses Drop Malware via Fake Image Files

Norway wants Facebook behavioral advertising banned across Europe

How Lazarus impersonated Meta to attack a target in Spain Week in security with Tony Anscombe

Lazarus Group Impersonates Recruiter from Meta to Target Spanish Aerospace Firm

Post-Quantum Cryptography: Finally Real in Consumer Apps?

Lazarus luring employees with trojanized coding challenges: The case of a Spanish aerospace company

Microsoft's AI-Powered Bing Chat Ads May Lead Users to Malware-Distributing Sites

Progress Software Releases Urgent Hotfixes for Multiple Security Flaws in WS_FTP Server

Cisco Warns of Vulnerability in IOS and IOS XE Software After Exploitation Attempts

QR Code 101: What the Threats Look Like

~ 28 Sep 2023 ~

Chinese snoops stole 60K State Department emails in that Microsoft email heist

Government Shutdown Poised to Stress Nation's Cybersecurity Supply Chain

Chrome Flags Third Zero-Day This Month That's Tied to Spying Exploits

New Cisco IOS Zero-Day Delivers a Double Punch

Feds' privacy panel backs renewing Feds' S. 702 spying powers but with limits

Johnson Controls International Disrupted by Major Cyberattack

Q&A: UK Ambassador on Creating New Cybersecurity Agencies Around the World

DARPA takes its long-duration Manta undersea drone for a test-dip

Novel ZenRAT Scurries Onto Systems via Fake Password Manager Tool

GitHub Repositories Hit by Password-Stealing Commits Disguised as Dependabot Contributions

Looking Beyond the Hype Cycle of AI/ML in Cybersecurity

7 Ways SMBs Can Secure Their WordPress Sites

US Justice Department Urged to Investigate Gunshot Detector Purchases

Join the new Microsoft Security experience at Microsoft Ignite 2023

4 Legal Surprises You May Encounter After a Cybersecurity Incident

Supply Chain Attackers Escalate With GitHub Dependabot Impersonation

China's BlackTech Hacking Group Exploited Routers to Target U.S. and Japanese Companies

CAPTCHAs Easy for Humans, Hard for Bots