Port 22

~ 18 Apr 2023 ~

Netwrix Annual Security Survey: 68% of Organizations Experienced a Cyberattack Within the Last 12 Months

KnowBe4 Phishing Test Results Reveal IT and Online Services Emails Drive Dangerous Attack Trend

Marlinspike Adds Charles Carmakal to its Advisory Board

NSO Group is Back in Business With 3 New iOS Zero-Click Exploits

Giving a Face to the Malware Proxy Service Faceless

Russian snoops just love invading unpatched Cisco gear, America and UK warn

'Zaraza' Bot Targets Google Chrome to Extract Login Credentials

QBot Expands Initial Access Malware Strategy With PDF-WSF Combo

Microsoft opens up Defender threat intel library with file hash, URL search

Researchers Discover First Ever Major Ransomware Targeting macOS

Payments firm accused of aiding 'contact Microsoft about a virus' scammers must cough $650k

Where There's No Code, There's No SDLC

APT41 Taps Google Red Teaming Tool in Targeted Info-Stealing Attacks

Why Your Anti-Fraud, Identity & Cybersecurity Efforts Should Be Merged

'Goldoson' Malware Sneaks into Google Play Apps, Racks Up 100M Downloads

Nation-state threat actor Mint Sandstorm refines tradecraft to attack high-value targets

Microsoft shifts to a new threat actor naming taxonomy

How Zero Trust Can Protect Systems Against Generative AI Agents

Beyond CVEs: The Key to Mitigating High-Risk Security Exposures

YouTube Videos Distributing Aurora Stealer Malware via Highly Evasive Loader

Brit cops rapped over app that recorded 200k phone calls

Recycled Core Routers Exposed Sensitive Corporate Network Info

Discarded, not destroyed: Old routers reveal corporate secrets

As Consumer Privacy Evolves, Here's How You Can Stay Ahead of Regulations

ZeroFox Acquires LookingGlass

Goldoson Android Malware Infects Over 100 Million Google Play Store Downloads

Used Routers Often Come Loaded With Corporate Secrets

DFIR via XDR: How to expedite your investigations with a DFIRent approach

Wrong time to weaken encryption, UK IT chartered institute tells government

Using LLMs to Create Bioweapons

Triple Threat: NSO Groups Pegasus Spyware Returns in 2022 with a Trio of iOS 15 and iOS 16 Zero-Click Exploit Chains

Iranian Hackers Using SimpleHelp Remote Support Software for Persistent Access

Capita IT breach gets worse as Black Basta claims it's now selling off stolen data

LockBit Ransomware Now Targeting Apple macOS Devices

US alleges China created troll army that tried to have dissidents booted from Zoom

Military helicopter crash blamed on failure to apply software patch

Be Dazzled by Identity-as-a-Service (IDaaS)

~ 17 Apr 2023 ~

FIN7, Former Conti Gang Members Collaborate on 'Domino' Malware

LockBit crew cooks up half-baked Mac ransomware

lockr Raises $2.5M

Google Issues Emergency Chrome Update for Zero-Day Bug

Chinese Cops Ran Troll Farm and Secret NY Police Station, US Says

NSA's National Centers for Academic Excellent (NCAE) Cyber Games to Hold National Finals on April 22

Pen Testers Need to Hack AI, but Also Question Its Existence

How CISOs Can Craft Better Narratives for the Board

Aloha PoS Restaurant Software Downed by Ransomware Attack

LockBit Ransomware Samples for Apple Macs Hint at New Risks for macOS Users

Protect intellectual property with Govern 365 and Microsoft Purview

Name That Toon: Lucky Charm

Israeli Spyware Vendor QuaDream to Shut Down Following Citizen Lab and Microsoft Expose

New QBot Banking Trojan Campaign Hijacks Business Emails to Spread Malware

See product news and on-demand sessions from Microsoft Secure

Top 5 Data Security RSAC 2023 Sessions to Attend

FIN7 and Ex-Conti Cybercrime Gangs Join Forces in Domino Malware Attacks

What's the Difference Between CSPM & SSPM?

Marketing biz sent 107 million spam emails... to just 437k people

Google Uncovers APT41's Use of Open Source GC2 Tool to Target Media and Job Sites

Tour of the Underground: Master the Art of Dark Web Intelligence Gathering

Swatting as a Service

ICE Records Reveal How Agents Abuse Access to Secret Data

QBot banker delivered through business correspondence

Firmware is on shaky ground let's see what it's made of

Vice Society Ransomware Using Stealthy PowerShell Tool for Data Exfiltration

Student requested access to research data. And waited. And waited. And then hacked to get root

New Zaraza Bot Credential-Stealer Sold on Telegram Targeting 38 Web Browsers