Port 22

~ 22 May 2023 ~

U.K. Fraudster Behind iSpoof Scam Receives 13-Year Jail Term for Cyber Crimes

KeePass Exploit Allows Attackers to Recover Master Passwords from Memory

what-is-CVSS

Finding Evil WMI Event Consumers with Disk Forensics

~ 21 May 2023 ~

The Real Risks in Googles New .Zip and .Mov Domains

PyPI Repository Under Attack: User Sign-Ups and Package Uploads Temporarily Halted

~ 20 May 2023 ~

A TikTok Car Theft Challenge Is Costing Hyundai $200 Million

Meet 'Jack' from Romania! Mastermind Behind Golden Chickens Malware

The Underground History of Turla, Russia's Most Ingenious Hacker Group

Notorious Cyber Gang FIN7 Returns Cl0p Ransomware in New Wave of Attacks

Samsung Devices Under Active Exploitation! CISA Warns of Critical Flaw

~ 19 May 2023 ~

Teen in court after '$600K swiped from DraftKings gamblers'

CommonMagic APT Campaign Broadens Target Scope to Central and Western Ukraine

Friday Squid Blogging: Peruvian Squid-Fishing Regulation Drives Chinese Fleets Away

Russian IT guy sent to labor camp for DDoSing Kremlin websites

Apple Patches 3 Zero-Days Possibly Already Exploited

Data Siloes: Overcoming the Greatest Challenge in SecOps

3 Common Initial Attack Vectors Account for Most Ransomware Campaigns

How You, or Anyone, Can Dodge Montanas TikTok Ban

Keep Your Friends Close and Your Identity Closer

Google Debuts Quality Ratings for Security Bug Disclosures

The real cost of a free lunch Week in security with Tony Anscombe

Privacy Sandbox Initiative: Google to Phase Out Third-Party Cookies Starting 2024

Security Risks of New .zip and .mov Domains

Dr. Active Directory vs. Mr. Exposed Attack Surface: Who'll Win This Fight?

Developer Alert: NPM Packages for Node.js Hiding Dangerous TurkoRat Malware

CloudWizard APT: the bad magic story goes on

Cyber Signals: Shifting tactics fuel surge in business email compromise

A Mysterious Group Has Ties to 15 Years of Ukraine-Russia Hacks

UK's GDPR replacement could wipe out oversight of live facial recognition

AppSec Teams Stuck in Catch-Up Cycle Due to Massive Cloud-Native Enablement Gap

Searching for AI Tools? Watch Out for Rogue Sites Distributing RedLine Malware

WebKit Under Attack: Apple Issues Emergency Patches for 3 New Zero-Day Vulnerabilities

Apple warns of three WebKit vulns under active exploitation, dozens more CVEs across its range

Cybersecurity Jobs: OSINT investigator/Analyst (Japanese)

~ 18 May 2023 ~

Enterprises Rely on Multicloud Security to Protect Cloud Workloads

Cisco squashes critical bugs in small biz switches

KeePass Vulnerability Imperils Master Passwords

Trojan-Rigged Phishing Attacks Pepper China-Taiwan Conflict

10 Types of AI Attacks CISOs Should Track

Google May Delete Your Old Accounts. Heres How to Stop It

Microsoft decides it will be the one to choose which secure login method you use

Embedding Security by Design: A Shared Responsibility

This Cybercrime Syndicate Pre-Infected Over 8.9 Million Android Phones Worldwide

OX Security Launches OX-GPT, AppSec's First ChatGPT Integration

Satori Augments Its Data Security Platform With Posture Management and Data Store Discovery Capabilities

Microsoft Azure VMs Highjacked in Cloud Cyberattack

Once Again, Malware Discovered Hidden in npm

LexisNexis Risk Solutions Cybercrime Report Reveals 20% Annual Increase in Global Digital Attack Rate

WithSecure Launches New Range of Incident Response and Readiness Services

3 Ways Hackers Use ChatGPT to Cause Security Headaches

ActZero Teams Up With UScellular to Secure Mobile Devices From Ransomware Attacks

LayerZero Labs Launches $15M Bug Bounty; Largest in the World

Eagle Eye Networks and Brivo Announce $192M Investment One of the Largest Ever in Cloud Physical Security

Join This Webinar Zero Trust + Deception: Learn How to Outsmart Attackers!

How to Reduce Exposure on the Manufacturing Attack Surface

Escalating China-Taiwan Tensions Fuel Alarming Surge in Cyber Attacks

8220 Gang Exploiting Oracle WebLogic Flaw to Hijack Servers and Mine Cryptocurrency

5 useful search engines for internetconnected devices and services

Darknet Carding Kingpin Pleads Guilty: Sold Financial Info of Tens of Thousands

Apple Thwarts $2 Billion in App Store Fraud, Rejects 1.7 Million App Submissions

Critical Flaws in Cisco Small Business Switches Could Allow Remote Attacks

Six million patients' data feared stolen from PharMerica

~ 17 May 2023 ~

Lemon Group Uses Millions of Pre-Infected Android Phones to Enable Cybercrime Enterprise

5 Ways Security Testing Can Aid Incident Response