Port 22

~ 28 Jun 2023 ~

Saudi Arabia's Cyber Capabilities Ranked Second Globally

Generative AI Projects Pose Major Cybersecurity Risk to Enterprises

How automation is evolving SecOpsand the real cost of cybercrime

Alert: New Electromagnetic Attacks on Drones Could Let Attackers Take Control

Should We Chat? Privacy in the WeChat Ecosystem

Privacy in the WeChat Ecosystem Explained

3 Strategies for Bringing Rigor to Software Security

CryptosLabs Scam Ring Targets French-Speaking Investors, Rakes in 480 Million

Open Source LLM Projects Likely Insecure, Risky to Use

Stalkerware Vendor Hacked

How Your Real Flight Reservation Can Be Used to Scam You

5 Things CISOs Need to Know About Securing OT Environments

8Base Ransomware Spikes in Activity, Threatens U.S. and Brazilian Businesses

Andariels silly mistakes and a new malware family

Avoid juice jacking and recharge your batteries safely this summer

Critical SQL Injection Flaws Expose Gentoo Soko to Remote Code Execution

UCLA, Siemens Among Latest Victims of Relentless MOVEit Attacks

Jscrambler Launches JavaScript Scanner for PCI DSS 4.0 Compliance

Google Workspace Log Extraction

Protecting Small Businesses From Ransomware on a Budget

Cequence Security Adds Generative AI to API Security

~ 27 Jun 2023 ~

Miscreants leak texts and info siphoned by Android stalkerware app LetMeSpy

Mockingjay Slips By EDR Tools With Process Injection Technique

Trans-Rights Hacktivists Steal City of Ft. Worth's Data

Cops' total pwnage of 'secure' EncroChat nets 6,500+ arrests, 740m in funds so far

Warning: JavaScript registry npm vulnerable to 'manifest confusion' abuse

Typing Incriminating Evidence in the Memo Field

U.K. Cyber Thug PlugwalkJoe Gets 5 Years in Prison

Pilot Applicant Information for American, Southwest Hacked

Most Enterprise SIEMs Blind to MITRE ATT&CK Tactics

Why the FDA's SBOM Mandate Changes the Game for OSS Security

Why Cyber Funding Flows for Rural Water Systems

Microsoft at NICE Conference: Resetting expectations and enabling diversity in the cybersecurity workforce

New Ongoing Campaign Targets npm Ecosystem with Unique Execution Chain

New Mockingjay Process Injection Technique Could Let Malware Evade Detection

Preventing Cyberattacks on Schools Starts With K12 Cybersecurity Education

Hitachi Energy FOXMAN-UN and UNEM Products

Beyond Asset Discovery: How Attack Surface Management Prioritizes Vulnerability Remediation

EncroChat Bust Leads to 6,558 Criminals' Arrests and 900 Million Seizure

Anatsa Banking Trojan Targeting Users in US, UK, Germany, Austria, and Switzerland

The Night 17 Million Precious Military Records Went Up in Smoke

Schools out for summer, but its not time to let your cyber guard down

Tackling the cyber skills gap with AI

How cybercrime is impacting SMBs in 2023

New Fortinet's FortiNAC Vulnerability Exposes Networks to Code Execution Attacks

Cloud security advice and expertise at your fingertips

~ 26 Jun 2023 ~

Genworth Financial Reports Data Breach Leaking SSNs Belonging to 2.7M Policyholders and Customers

SolarWinds Execs Targeted by SEC, CEO Vows to Fight

China's 'Volt Typhoon' APT Turns to Zoho ManageEngine for Fresh Cyberattacks

China's 'Volt Typhoon' APT Turns to Zoho ManageEngine for Fresh Cyberattacks

Twitter Celeb Account Hacker Heads to Jail for 5 Years

It's Open Season on Law Firms for Ransomware & Cyberattacks

Cl0p in Your Network? Here's How to Find Out

Remediation Ballet Is a Pas de Deux of Patch and Performance

Researchers Find Way to Recover Cryptographic Keys by Analyzing LED Flickers

How Infrastructure as Code Can Help Minimize Human Error

Trojanized Super Mario Installer Goes After Gamer Data

Why endpoint management is key to securing an AI-powered future

Excel Data Forensics

American and Southwest Airlines pilot candidate data exposed

3 Steps to Successfully & Ethically Navigate a Data Breach

Japanese Cryptocurrency Exchange Falls Victim to JokerSpy macOS Backdoor Attack

Ex-FBI employee jailed for taking classified material home

How Generative AI Can Dupe SaaS Authentication Protocols And Effective Ways To Prevent Other Key AI Risks in SaaS

The US Senate Wants to Reign In AI. Good Luck With That

Microsoft Warns of Widescale Credential Stealing Attacks by Russian Hackers

JP Morgan accidentally deletes evidence in multi-million record retention screwup

How Active Directory Bridging Extends Security Automation to Hybrid IT Environments

Chinese Hackers Using Never-Before-Seen Tactics for Critical Infrastructure Attacks

The unlimited value of a strong defence

~ 25 Jun 2023 ~

5 Ways to Make Your Instant Messaging More Secure

~ 24 Jun 2023 ~

U.S. Cybersecurity Agency Adds 6 Flaws to Known Exploited Vulnerabilities Catalog

Twitter Hacker Sentenced to 5 Years in Prison for $120,000 Crypto Scam

Google bug bounties inch closer to Microsoft's payouts

Update Your iPhone Right Now to Fix 2 Apple Zero Days

~ 23 Jun 2023 ~

Friday Squid Blogging: Giggling Squid

ITDR Combines and Refines Familiar Cybersecurity Approaches

Silobreaker Unveils Geopolitical Threat Intelligence Capabilities With RANE at Infosecurity Europe 2023

NSA: BlackLotus BootKit Patching Won't Prevent Compromise

Suspicious Smartwatches Mailed to US Army Personnel

Microsoft Teams Attack Skips the Phish to Deliver Malware Directly

Why Legacy System Users Prioritize Uptime Over Security

Black Hat Asia 2023: Cybersecurity Maturity and Concern in Asia

What to know about the MOVEit hack Week in security with Tony Anscombe

UPS Data Harvested for SMS Phishing Attacks

Cybercrime Group 'Muddled Libra' Targets BPO Sector with Advanced Social Engineering

How Government Contractors & Agencies Should Navigate New Cyber Rules

What to know about the MoveIT hack Week in security with Tony Anscombe

Millions of Repos on GitHub Are Potentially Vulnerable to Hijacking

Deception Technologies Have a Maturity Problem

UK cyberspies warn ransomware crews targeting law firms

The Power of Browser Fingerprinting: Personalized UX, Fraud Detection, and Secure Logins

Powerful JavaScript Dropper PindOS Distributes Bumblebee and IcedID Malware

Inside the Illicit Market for Abortion Pills on Telegram

NSA Releases Guide to Combat Powerful BlackLotus Bootkit Targeting Windows Systems

Keep it schtum!

New Cryptocurrency Mining Campaign Targets Linux Systems and IoT Devices

Chinese malware intended to infect USB drives accidentally infects networked storage too

US cyber ambassador says China knows how to steal its way to dominance of cloud and AI

A Visual Summary of SANS Ransomware Summit 2023