Port 22

~ 20 Jul 2023 ~

RIP Kevin Mitnick: Former most-wanted hacker dies at 59

Apache OpenMeetings Wide Open to Account Takeover, Code Execution

Docker Leaks API Secrets & Private Keys, as Cybercriminals Pounce

Should You Be Using a Cybersecurity Careers Framework?

Mallox Ransomware Exploits Weak MS-SQL Servers to Breach Networks

Critical Flaws in AMI MegaRAC BMC Software Expose Servers to Remote Attacks

Plurilock Announces Generative AI 'Guardrails' Product, PromptGuard

Google Categorizes 6 Real-World AI Attacks to Prepare for Now

Apache OpenMeetings Web Conferencing Tool Exposed to Critical Vulnerabilities

Hacker-Turned-Security-Researcher Kevin Mitnick Dies Aged 59

Enterprise Choices in Measuring Risk

Attackers Exploit Citrix Zero-Day Bug to Pwn NetScaler ADC, Gateway

North Korean State-Sponsored Hackers Suspected in JumpCloud Supply Chain Attack

Under CISA <s>pressure</s> collaboration, Microsoft makes cloud security logs available for free

Schneider Electric EcoStruxure Products, Modicon PLCs, and Programmable Automation Controllers

Commentary on the Implementation Plan for the 2023 US National Cybersecurity Strategy

Satellites Are Rife With Basic Security Flaws

A Few More Reasons Why RDP is Insecure (Surprise!)

Turla's New DeliveryCheck Backdoor Breaches Ukrainian Defense Sector

8 common work-from-home scams to avoid

Ukraine busts bot farm spreading Russian infowar propaganda and fraud

New P2PInfect Worm Targeting Redis Servers on Linux and Windows Systems

Microsoft Expands Cloud Logging to Counter Rising Nation-State Cyber Threats

Adobe Rolls Out New Patches for Actively Exploited ColdFusion Vulnerability

Microsoft Relents, Offers Free Key Logging to All 365 Customers

Infosec Doesn't Know What AI Tools Orgs Are Using

Black Hat Offers PenTesting Certification Exam

~ 19 Jul 2023 ~

Graylog Acquires Resurface.io's API Security Solution

Cloud Range Appoints Cybersecurity Leader Galina Antova to Board of Directors

Checkmarx Announces CheckAI Plugin for ChatGPT to Detect and Prevent Attacks Against ChatGPT-Generated Code

Netskope Launches Managed Service Provider Program

KnowBe4 Partners With Egress to Enhance Organizations' Inbound and Outbound Email Security Defenses

Netcraft Secures First Funding With Over $100M From Spectrum Equity

HyperSense Fraud Management Now Available on Google Cloud

Study: Africa Cybersecurity Improves But Lacks Cross-Border Frameworks

P2P Self-Replicating Cloud Worm Targets Redis

Tech support scammers go analog, ask victims to mail bundles of cash

SophosEncrypt Ransomware Fools Security Researchers

China's APT41 Linked to WyrmSpy, DragonEgg Mobile Spyware

Seed Group Brings Resecurity Options to UAE Region

Practice Your Security Prompting Skills

3 Ways AI Could Improve Authentication

Reducing Security Debt in the Cloud

Expanding cloud logging to give customers deeper security visibility

Comprehensive analysis of initial attack samples exploiting CVE-2023-23397 vulnerability

How to Manage Your Attack Surface?

Leverage Threat Intelligence, AI, and Data at Scale to Boost Cyber Defenses

CISA and NSA Issue New Guidance to Strengthen 5G Network Slicing Against Threats

Chinese APT41 Hackers Target Mobile Devices with New WyrmSpy and DragonEgg Spyware

Exploring the Dark Side: OSINT Tools and Techniques for Unmasking Dark Web Operations

INTERSECT '23: Network Security Summit unveils cutting-edge strategies to safeguard digital assets

Bad.Build Flaw in Google Cloud Build Raises Concerns of Privilege Escalation

Child identity theft: how do I keep my kids personal data safe?

Child identity theft: how do I keep my kids personal data safe?

U.S. Government Blacklists Cytrox and Intellexa Spyware Vendors for Cyber Espionage

Zero-Day Attacks Exploited Critical Vulnerability in Citrix ADC and Gateway

~ 18 Jul 2023 ~

US adds Euro spyware makers to export naughty list

Google Cloud Build Flaw Enables Privilege Escalation, Code Tampering

Pernicious Rootkits Pose Growing Blight On Threat Landscape

VirusTotal Data Leak Affects 5K+ Users

Hacker Infected & Foiled by Own Infostealer

Name That Toon: Shark Sighting

FIN8 Modifies 'Sardonic' Backdoor to Deliver BlackCat Ransomware

Fourth Amendment Is Not for Sale Act Goes Back to Congress

Attackers Pummel Millions of Websites via Critical WooCommerce Payments Flaw

Microsoft Takes Security Copilot AI Assistant to the Next Level

Microsoft Inspire: Partner resources to prepare for the future of security with AI

LeakedSource Owner Quit Ashley Madison a Month Before 2015 Hack

Sogu, SnowyDrive Malware Spreads, USB-Based Cyberattacks Surge

Linux Ransomware Poses Significant Threat to Critical Infrastructure

Recycling giant TOMRA pulls systems offline following 'extensive cyberattack'

Pakistani Entities Targeted in Sophisticated Attack Deploying ShadowPad Malware

WellinTech KingHistorian

Weintek Weincloud

Rockwell Automation Kinetix 5700 DC Bus Power Supply

Keysight N6845A Geolocation Server

Iagona ScrutisWeb

GeoVision GV-ADR2701

GE Digital CIMPLICITY

VirusTotal Data Leak Exposes Some Registered Customers' Details

Disabling Self-Driving Cars with a Traffic Cone

Go Beyond the Headlines for Deeper Dives into the Cybercriminal Underground

FIN8 Group Using Modified Sardonic Backdoor for BlackCat Ransomware Attacks

Protect yourself from ticketing scams ahead of the Premier League Summer Series USA Tour

Protect yourself from ticketing scams ahead of the Premier League Summer Series USA Tour

Owner of BreachForums Pleads Guilty to Cybercrime and Child Pornography Charges

Cybercriminals Exploiting WooCommerce Payments Plugin Flaw to Hijack Websites

JumpCloud Blames 'Sophisticated Nation-State' Actor for Security Breach

Cybercrime big in Asia Pacific

Startup Spotlight: Binarly Hardens Firmware Security

~ 17 Jul 2023 ~

How AI-Augmented Threat Intelligence Solves Security Shortfalls

Quick: Manually patch this Zimbra bug that's under attack

Microsoft 'Logging Tax' Hinders Incident Response, Experts Warn

5 Major Takeaways From Microsoft's July Patch Tuesday

Beijing wants to make the Great Firewall of China even greater

AWS Cloud Credential Stealing Campaign Spreads to Azure, Google Cloud

UAE and South African Hospitals Fail on DMARC Implementation

If George Washington Had a TikTok, What Would His Password Be?

Hackers Exploit WebAPK to Deceive Android Users into Installing Malicious Apps

Tracking Down a Suspect through Cell Phone Records