Port 22

~ 13 Apr 2023 ~

Google Tackles Open Source Security With New Dependency Service

~ 12 Apr 2023 ~

How insecure is America's FirstNet emergency response system? No one's sure

FBI: How fake Xi cops prey on Chinese nationals in the US

Menlo Security Illustrates Importance of Browser Security as 4 in 5 Ransomware Attacks Include Threats Beyond Data Encryption

VulnCheck Named CVE Numbering Authority for Common Vulnerabilities and Exposures

Report Reveals ChatGPT Already Involved in Data Leaks, Phishing Scams & Malware Infections

Leaked Pentagon Documents May Herald a New Era of Revelations

(ISC) Certified in Cybersecurity Earns ANAB Accreditation to ISO 17024 and Surpasses 15,000 Certification Holders

Lazarus Group's 'DeathNote' Cluster Pivots to Defense Sector

When Banking Laws Don't Protect Consumers From Cybertheft

Opera Adds Free VPN to Opera for iOS

FBI & FCC Warn on 'Juice Jacking' at Public Chargers, but What's the Risk?

Data on 400K Kodi Forum Members Stolen and Put Up for Sale

Microsoft: NSO Group-Like 'QuaDream' Actor Selling Mobile Spyware to Governments

Survey Findings Show Link Between Data Silos and Security Vulnerabilities

Gartner: Human-Centric Design Is Top Cybersecurity Trend for 2023

CrowdStrike Expands Falcon to Include IoT

LinkedIn Verification Now Lets You Verify Your Job and Account

LastPass Breach Reveals Important Lessons

1M+ WordPress Sites Hacked via Zero-Day Plug-in Bugs

LinkedIn and Microsoft Entra introduce a new way to verify your workplace

Israel-based Spyware Firm QuaDream Targets High-Risk iPhones with Zero-Click Exploit

The Service Accounts Challenge: Can't See or Secure Them Until It's Too Late

FBI Advising People to Avoid Public Charging Stations

What are the cybersecurity concerns of SMBs by sector?

Mission possible

Following the Lazarus group by tracking DeathNote campaign

Urgent: Microsoft Issues Patches for 97 Flaws, Including Active Ransomware Exploit

3CX teases security-focused client update, plus password hashing

Lazarus Sub-Group Labyrinth Chollima Uncovered as Mastermind in 3CX Supply Chain Attack

US cyber chiefs warn AI will help crooks, China develop nastier cyberattacks faster

SANS FOR498: Digital Acquisition & Rapid Triage

Details Matter

Another zero-click Apple spyware maker just popped up on the radar again

Microsoft (& Apple) Patch Tuesday, April 2023 Edition

~ 11 Apr 2023 ~

April Patch Tuesday: Ransomware gangs already exploiting this Windows bug

Microsoft Patches 97 CVEs, Including Zero-Day & Wormable Bugs

Microsoft Azure Shared Key Misconfiguration Could Lead to RCE

Newly Discovered "By-Design" Flaw in Microsoft Azure Could Expose Storage Accounts to Hackers

'Blatantly Obvious': Spyware Offered to Cyberattackers via PyPI Python Repository

Nokoyawa ransomware attacks with Windows zero-day

Where Are the Women? Making Cybersecurity More Inclusive

Guidance for investigating attacks using CVE-2022-21894: The BlackLotus campaign

7 Things Your Ransomware Response Playbook Is Likely Missing

DEV-0196: QuaDreams KingsPawn malware used to target civil society in Europe, North America, the Middle East, and Southeast Asia

Sweet QuaDreams: A First Look at Spyware Vendor QuaDreams Exploits, Victims, and Customers

Attackers Hide RedLine Stealer Behind ChatGPT, Google Bard Facebook Ads

How Password Managers Can Get Hacked

How CIEM Can Improve Identity, Permissions Management for Multicloud Deployments

Israeli Irrigation Water Controllers & Postal Service Breached

Azure admins warned to disable shared key access as backdoor attack detailed

Samsung Engineers Feed Sensitive Data to ChatGPT, Sparking Workplace AI Warnings

How to Use Apples New All-In-One Password Manager

Cybercriminals Turn to Android Loaders on Dark Web to Evade Google Play Security

FANUC ROBOGUIDE-HandlingPRO

[eBook] A Step-by-Step Guide to Cyber Risk Assessment

Car Thieves Hacking the CAN Bus

40% of IT security pros say they've been told not to report a data leak

10 things to look out for when buying a password manager

Cryptocurrency Stealer Malware Distributed via 13 NuGet Packages

Renewed Focus on Incident Response Brings New Competitors and Partnerships

~ 10 Apr 2023 ~

How much to infect Android phones via Google Play store? How about $20k

Inside FTX: Jokes about misplaced funds, diabolical IT, poor oversight, and worse

Apps for Sale: Cybercriminals Sell Android Hacks for Up to $20K a Pop

Apple squashes iOS, macOS zero-day bugs already exploited by snoops

Pair of Apple Zero-Days Under Active Exploit; Patch & Update Accordingly

High-Stakes Ransomware Response: Know What Cards You Hold

Google to kill Dropcam, Nest Secure hardware next year

Russia's Joker DPR Claims Access to Ukraine Troop Movement Data

How and Why to Put Multicloud to Work

Microsoft, Fortra are this fed up with cyber-gangs abusing Cobalt Strike

Rethinking Cybersecurity's Structure & the Role of the Modern CISO

When it comes to technology, securing your future means securing your present

Estonian National Charged in U.S. for Acquiring Electronics and Metasploit Pro for Russian Military

Hackers Flood NPM with Bogus Packages Causing a DoS Attack

Top 10 Cybersecurity Trends for 2023: From Zero Trust to Cyber Insurance

LLMs and Phishing

Over 1 Million WordPress Sites Infected by Balada Injector Malware Campaign

Protecting your business with Wazuh: The open source security platform

Overview of Google Play threats sold on the dark web

CISA Warns of 5 Actively Exploited Security Flaws: Urgent Action Required

Exploring the Dark Side: OSINT Tools and Techniques for Unmasking Dark Web Operations

~ 8 Apr 2023 ~

Taiwanese PC Company MSI Falls Victim to Ransomware Attack

Pinduoduo, a Top Chinese Shopping App, Is Laced With Malware

Iran-Based Hackers Caught Carrying Out Destructive Attacks Under Ransomware Guise

Apple Releases Updates to Address Zero-Day Flaws in iOS, iPadOS, macOS, and Safari

Researchers Discover Critical Remote Code Execution Flaw in vm2 Sandbox Library

~ 7 Apr 2023 ~

MSI hit in cyberattack, warns against installing knock-off firmware

Friday Squid Blogging: Squid Food Poisoning

Almost Half of Former Employees Say Their Passwords Still Work

Welcome to open source, Elon. Your Twitter code just got a CVE for shadow ban bug

Microsoft, Fortra & Health-ISAC Team Up to Remove Illicit Cobalt Strike Tools

TikTok, Other Mobile Apps Violate Privacy Regulations

MERCURY and DEV-1084: Destructive attack on hybrid environment

Close the Permissions Gap With Identity And Access Management For Multicloud Workforces

Printers Pose Persistent Yet Overlooked Threat

Bad Actors Will Use Large Language Models but Defenders Can, Too

Cybercriminals 'CAN' Steal Your Car, Using Novel IoT Hack

Researchers Uncover Thriving Phishing Kit Market on Telegram Channels

It's this easy to seize control of someone's Nexx 'smart' home plugs, garage doors