Port 22

~ 25 Oct 2024 ~

Friday Squid Blogging: Giant Squid Found on Spanish Beach

Just how private is Apple's Private Cloud Compute? You can test it to find out

Watermark for LLM-Generated Text

Researchers Discover Command Injection Flaw in Wi-Fi Alliance's Test Suite

Apple Opens PCC Source Code for Researchers to Identify Bugs in Cloud AI Security

Eliminating AI Deepfake Threats: Is Your Identity Security AI-Proof?

SEC Charges 4 Companies Over Misleading SolarWinds Cyberattack Disclosures

Irish Watchdog Imposes Record 310 Million Fine on LinkedIn for GDPR Violations

Putin's pro-Trump trolls accuse Harris of poaching rhinos

~ 24 Oct 2024 ~

AWS Cloud Development Kit flaw exposed accounts to full takeover

Emergency patch: Cisco fixes bug under exploit in brute-force attacks

New Qilin.B Ransomware Variant Emerges with Improved Encryption and Evasion Tactics

AWS Cloud Development Kit Vulnerability Exposes Users to Potential Account Takeover Risks

Cisco Issues Urgent Fix for ASA and FTD Software Vulnerability Under Active Attack

Bitwarden's FOSS halo slips as new SDK requirement locks down freedoms

Why Phishing-Resistant MFA Is No Longer Optional: The Hidden Risks of Legacy MFA

Ransomware's ripple effect felt across ERs as patient care suffers

Lazarus Group Exploits Google Chrome Vulnerability to Control Infected Devices

Meet ZachXBT, the Masked Vigilante Tracking Down Billions in Crypto Scams and Thefts

ESET Research Podcast: CosmicBeetle

Voice-enabled AI agents can automate everything, even your phone scams

Fortinet Warns of Critical Vulnerability in FortiManager Under Active Exploitation

China's top messaging app WeChat banned from Hong Kong government computers

Anthropic's latest Claude model can interact with computers what could go wrong?

Perfctl malware strikes again as crypto-crooks target Docker Remote API servers

Samsung phone users under attack, Google warns

~ 23 Oct 2024 ~

Penn State pays DoJ $1.25M to settle cybersecurity compliance case

Warning! FortiManager critical vulnerability under active attack

'Satanic' data thief claims to have slipped into 350M Hot Topic shoppers info

Microsoft SharePoint RCE flaw exploits in the wild you've had 3 months to patch

Are Automatic License Plate Scanners Constitutional?

New Grandoreiro Banking Malware Variants Emerge with Advanced Tactics to Evade Detection

Microsoft Warns Foreign Disinformation Is Hitting the US Election From All Directions

Nigeria Drops Charges Against Tigran Gambaryan, Jailed Binance Exec and Former IRS Agent

Permiso State of Identity Security 2024: A Shake-up in Identity Security Is Looming Large

CISA Warns of Active Exploitation of Microsoft SharePoint Vulnerability (CVE-2024-38094)

The Global Surveillance Free-for-All in Mobile Ad Data

The Crypto Game of Lazarus APT: Investors vs. Zero-days

Researchers Reveal 'Deceptive Delight' Method to Jailbreak AI Models

Think Youre Secure? 49% of Enterprises Underestimate SaaS Risks

Ransomware Gangs Use LockBit's Fame to Intimidate Victims in Latest Attacks

Embargo ransomware: RocknRust

Millions of Android and iOS users at risk from hardcoded creds in popular apps

~ 22 Oct 2024 ~

US lawmakers push DOJ to prosecute tax prep firms for leaking taxpayer data to big tech

Grandoreiro, the global trojan with grandiose ambitions

Exposed United Nations Database Left Sensitive Information Accessible Online

TSMC blows whistle on potential sanctions-busting shenanigans from Huawei

Gophish Framework Used in Phishing Campaigns to Deploy Remote Access Trojans

VMware fixes critical RCE, make-me-root bugs in vCenter -for the second time

Tech firms to pay millions in SEC penalties for misleading SolarWinds disclosures

Microsoft Threat Intelligence healthcare ransomware report highlights need for collective industry action

Akira ransomware is encrypting victims again following pure extortion fling

The Shitposting Cartoon Dogs Sending Trucks, Drones, and Weapons to Ukraines Front Lines

Security Flaw in Styra's OPA Exposes NTLM Hashes to Remote Attackers

Cybercriminals Exploiting Docker API Servers for SRBMiner Crypto Mining Attacks

No, The Chinese Have Not Broken Modern Encryption Systems with a Quantum Computer

A Comprehensive Guide to Finding Service Accounts in Active Directory

Bumblebee and Latrodectus Malware Return with Sophisticated Phishing Strategies

Malicious npm Packages Target Developers' Ethereum Wallets with SSH Backdoor

VMware Releases vCenter Server Update to Fix Critical RCE Vulnerability

Pixel perfect Ghostpulse malware loader hides inside PNG image files

CISA Adds ScienceLogic SL1 Vulnerability to Exploited Catalog After Active Zero-Day Attack

~ 21 Oct 2024 ~

Chinas Spamouflage cranks up trolling of US Senator Rubio as election day looms

Sophos to snatch Secureworks in $859M buyout: Why fight when you can just buy?

Misinformed about misinformation Gabrielle Lims piece for the Harvard Kennedy School Misinformation Review