Port 22

~ 5 Jun 2023 ~

Mass Exploitation of Zero-Day Bug in MOVEit File Transfer Underway

After 'Inception' Attack, New Due Diligence Requirements Are Needed

Varonis: Reducing Insider Threats Through Improved Data Security

Qbot malware adapts to live another day and another

Microsoft: Lace Tempest Hackers Behind Active Exploitation of MOVEit Transfer App

The Annual Report: 2024 Plans and Priorities for SaaS Security

The Software-Defined Car

Satacom delivers browser extension that steals cryptocurrency

Inside 4chans Top-Secret Moderation Machine

Magento, WooCommerce, WordPress, and Shopify Exploited in Web Skimmer Attack

Name That Edge Toon: Spring Chickens

Brazilian Cybercriminals Using LOLBaS and CMD Scripts to Drain Bank Accounts

Alarming Surge in TrueBot Activity Revealed with New Delivery Vectors

Australian cyber-op attacked ISIL with the terrifying power of Rickrolling

Toyota admits to yet another cloud leak

Meet TeamT5, the Taiwanese infosec outfit taking on Beijing and defeating its smears

~ 3 Jun 2023 ~

AI Is Being Used to Turbocharge Scams

HowAI Protects (and Attacks) Your Inbox

Uncle Sam wants DEF CON hackers to pwn this Moonlighter satellite in space

New Linux Ransomware Strain BlackSuit Shows Striking Similarities to Royal

Cloud Security Tops Concerns for Cybersecurity Leaders: EC-Council's Certified CISO Hall of Fame Report 2023

FTC Slams Amazon with $30.8M Fine for Privacy Violations Involving Alexa and Ring

~ 2 Jun 2023 ~

The Messy US Influence That's Helping Iranians Stay Online

Friday Squid Blogging: Squid Chromolithographs

PyPI's 2FA Requirements Don't Go Far Enough, Researchers Say

'PostalFurious' SMS Attacks Target UAE Citizens for Data Theft

Malaysia goes its own Huawei, won't ban Chinese vendor from 5G network

'Picture-in-Picture' Obfuscation Spoofs Delta, Kohl's for Credential Harvesting

Streamers Ditch Netflix for Dark Web After Password Sharing Ban

Microsoft stashes nearly half a billion in case LinkedIn data drama hits

Open-Source LLMs

Want Sustainable Security? Find Middle Ground Between Tech & Education

Apple Zero-Days, iMessage Used in 4-Year, Ongoing Spying Effort

How CISOs Can Manage the Intersection of Security, Privacy, And Trust

API security in the spotlight Week in security with Tony Anscombe

In search of the Triangulation: triangle_check utility

New Botnet Malware 'Horabot' Targets Spanish-Speaking Users in Latin America

The Importance of Managing Your Data Security Posture

Camaro Dragon Strikes with New TinyNote Backdoor for Intelligence Gathering

This malicious PyPI package mixed source and compiled code to dodge detection

North Korea's Kimsuky Group Mimics Key Figures in Targeted Cyber Attacks

You might have been phished by the gang that stole North Koreas lousy rocket tech

MOVEit Transfer Under Attack: Zero-Day Vulnerability Actively Being Exploited

Millions of Gigabyte PC motherboards backdoored? What's the actual score?

Cybersecurity Jobs: Cloud Security Analyst (Japanese)

~ 1 Jun 2023 ~

Deployed publicly accessible MOVEit Transfer? Oh no. Mass exploitation underway

Kremlin claims Apple helped NSA spy on diplomats via iPhone backdoor

DNB Strengthens its Network Security Posture and Productivity With Ericsson Security Manager Solution

Cyversity and United Airlines to Provide Cybersecurity Training Scholarships to Cyversity Members

Kaspersky Says New Zero-Day Malware Hit iPhonesIncluding Its Own

Tel Aviv Stock Exchange Selects CardinalOps to Reduce Risk of Breaches Due to Undetected Attacks

Amazon Pays $30.8M to Settle Ring Spying & Alexa Privacy Lawsuits

Jetpack WordPress Plug-in API Bug Triggers Mass Updates

How Do I Reduce Security Tool Sprawl in My Environment?

Sustained 'Red Deer' Phishing Attacks Impersonate Israel Post, Drop RATs

Google Drive Deficiency Allows Attackers to Exfiltrate Workspace Data Without a Trace

Where SBOMs Stand Today

Novel PyPI Malware Uses Compiled Python Bytecode to Evade Detection

The downside of frenemies

Ask Fitis, the Bear: Real Crooks Sign Their Malware

Evasive QBot Malware Leverages Short-lived Residential IPs for Dynamic Attacks

Biometric Bypass: BrutePrint Makes Short Work of Fingerprint Security

New Zero-Click Hack Targets iOS Users with Stealthy Root-Privilege Malware

Unmasking XE Group: Experts Reveal Identity of Suspected Cybercrime Kingpin

SolarWinds Transforms Brand to Signify Ongoing Evolution, Portfolio Expansion, and Customer Empowerment