Port 22

~ 10 Jul 2023 ~

RomCom RAT Targeting NATO and Ukraine Support Groups

Libert, galit, Spyware: France okays cops snooping on phones

Hackers Steal $20 Million by Exploiting Flaw in Revolut's Payment Systems

Why Hybrid Work Has Made Secure Access So Complicated

How to Use Log Management to Retrace Your Digital Footsteps

What is Linux?

~ 8 Jul 2023 ~

Russias Notorious Troll Farm Disbands

Two Spyware Apps on Google Play with 1.5 Million Users Sending Data to China

~ 7 Jul 2023 ~

Exposure Management Looks to Attack Paths, Identity to Better Measure Risk

How to Safely Architect AI in Your Cybersecurity Programs

Global Hacking Competition Addresses Critical Increase in Cybersecurity Threats for Businesses

Meta's Rush to Topple Twitter Sets Up Looming Privacy Debate

Friday Squid Blogging: Giant Squid Nebula

Truebot Malware Variants Abound, According to CISA Advisory

Top Suspect in 2015 Ashley Madison Hack Committed Suicide in 2014

Spyware Gamed 1.5M Users of Google Play Store

MOVEit Transfer Faces Another Critical Data-Theft Bug

Vishing Goes High-Tech: New 'Letscall' Malware Employs Voice Traffic Routing

Another Critical Unauthenticated SQLi Flaw Discovered in MOVEit Transfer Software

Can Generative AI Be Trusted to Fix Your Code?

Emotet: sold or on vacation? Week in security with Tony Anscombe

Mastodon Social Network Patches Critical Flaws Allowing Server Takeover

Capita staffers told attackers stole data from its own pension fund

The AI Dividend

Emotet: sold or on vacation? Week in security with Tony Anscombe

Close Security Gaps with Continuous Threat Exposure Management

BlackByte 2.0 Ransomware: Infiltrate, Encrypt, and Extort in Just 5 Days

Google Releases Android Patch Update for 3 Actively Exploited Vulnerabilities

JumpCloud Resets API Keys Amid Ongoing Cybersecurity Incident

Cybersecurity Agencies Sound Alarm on Rising TrueBot Malware Attacks

Startup Spotlight: Endor Labs Focuses on Reachability

Cybersecurity Jobs: ICS/OT Security Assessment Consultant (Japanese)

~ 6 Jul 2023 ~

How Threads' Privacy Policy Compares to Twitter's (and Its Rivals')

Nickelodeon probes claims of massive data leak as SpongeBob fans rejoice

Black Hat Announces Maria Markstedter, Jen Easterly, Viktor Zhora, and Kemba Walden As Keynote Speakers for Black Hat USA 2023

StackRot Linux Kernel Bug Has Exploit Code on the Way

Microsoft puts out Outlook fire, says 'everything's fine' with Teams malware flaw

Patchless Cisco Flaw Breaks Cloud Encryption for ACI Traffic

Don't Join ThreadsMake Instagram's 'Twitter Killer' Join You

Shell Becomes Latest Cl0p MOVEit Victim

Iranian Hackers' Sophisticated Malware Targets Windows and macOS Users

Privacy Woes Hold Up Global Instagram Threads Launch

The five-day job: A BlackByte ransomware intrusion case study

Cybersecurity's Future Hinges on Stronger Public-Private Partnerships

Microsoft Defender for Endpoint is ranked number one in market share in the IDC Worldwide Corporate Endpoint Security Market Shares report, 2022

Google Searches for 'USPS Package Tracking' Leads to Banking Theft

CISOs Find 'Business as Usual' Shows the Harsh Realities of Cyber-Risk

Botnets Send Exploits Within Days to Weeks After Published PoC

6 Steps To Outsmart Business Email Compromise Scammers

PiiGAB M-Bus

ABUS TVIP

Surviving the 800 Gbps Storm: Gain Insights from Gcore's 2023 DDoS Attack Statistics

Belgian Tax Hack

Researchers Uncover New Linux Kernel 'StackRot' Privilege Escalation Vulnerability

How Pen Testing can Soften the Blow on Rising Costs of Cyber Insurance

Silentbob Campaign: Cloud-Native Environments Under Attack

Whats up with Emotet?

The rising risk of eavesdropping

INTERPOL Nabs Hacking Crew OPERA1ER's Leader Behind $11 Million Cybercrime

Startup Spotlight: Gomboc.ai Balances Cloud Infrastructure Security

LockBit louts unload ransomware at Japans most prolific cargo port

What is OPSEC?

3 Critical RCE Bugs Threaten Industrial Solar Panels, Endangering Grid Systems

North Korean satellite had no military utility for spying, says South Korea

Former boss who stole $10M from Amazon using fake vendor invoices is jailed for 16 years

Mitigating Risk With Threat Intelligence

~ 5 Jul 2023 ~

RAM-ramming Rowhammer is back to uniquely fingerprint devices

83% of Brits Demand Messaging Apps Remain Private, Ahead of Threat From Online Safety Bill

Microsoft Teams Exploit Tool Auto-Delivers Malware

Suspected bank-infecting OPERA1ER crime boss cuffed

OPERA1ER Cybercrime Group's Leader Arrested by INTERPOL

US Spies Are Buying Americans' Private Data. Congress Has a Chance to Stop It

Ransomware Halts Operations at Japan's Port of Nagoya

A Golden Age of AI or Security Threats?

C10p's MOVEit Campaign Represents a New Era in Cyberattacks

11 best practices for securing data in cloud services

China's Mustang Panda Linked to SmugX Attacks on European Governments

EV Charger Hacking Poses a Catastrophic Risk

RedEnergy Stealer-as-a-Ransomware Threat Targeting Energy and Telecom Sectors

Microsoft Can Fix Ransomware Tomorrow

Class-Action Lawsuit for Scraping Data without Permission

Secrets, Secrets Are No Fun. Secrets, Secrets (Stored in Plain Text Files) Hurt Someone

Email crypto phishing scams: stealing from hot and cold crypto wallets

Node.js Users Beware: Manifest Confusion Attack Opens Door to Malware

Instagram's Twitter Alternative 'Threads' Launch Halted in Europe Over Privacy Concerns

Singapore tells crypto operators: act like grown up financial institutions

Ransomware in the Cloud

~ 4 Jul 2023 ~

Swedish Data Protection Authority Warns Companies Against Google Analytics Use

The Password Game

DDoSia Attack Tool Evolves with Encryption, Targeting Multiple Sectors

Mexico-Based Hacker Targets Global Banks with Android Malware

Deepfaking it: What to know about deepfakedriven sextortion schemes

Alert: 330,000 FortiGate Firewalls Still Unpatched to CVE-2023-27997 RCE Flaw

Undiplomatic Chinese threat actor attacks embassies and foreign affairs departments

Fortanix Builds Hardware Security Wall Around Plaintext Search

sec488-major-update

~ 3 Jul 2023 ~

You've patched right? '340K+ Fortinet firewalls' wide open to critical security bug

TSA wants to expand facial recognition to hundreds of airports within next decade

Researchers Develop Exploit Code for Critical Fortinet VPN Bug

Russian Satellite Internet Downed via Attackers Claiming Ties to Wagner Group