Port 22

~ 25 Nov 2024 ~

Security? We've heard of it: How Microsoft plans to better defend Windows

Banned Books: Analysis of Censorship on Amazon.com

Google's New Restore Credentials Tool Simplifies App Login After Android Migration

China has utterly pwned 'thousands and thousands' of devices at US telcos

Security Analysis of the MERGE Voting Protocol

Flying Under the Radar - Security Evasion Techniques

Cybersecurity Blind Spots in IaC and PaC Tools Expose Cloud Platforms to New Attacks

THN Recap: Top Cybersecurity Threats, Tools, and Practices (Nov 18 - Nov 24)

Advanced threat predictions for 2025

Researchers Uncover Malware Using BYOVD to Bypass Antivirus Protections

Google blocked 1,000-plus pro-China fake news websites from its search results

Imagine a land in which Big Tech can't send you down online rabbit holes or use algorithms to overcharge you

Russian spies may have moved in next door to target your network

SANS Threat Analysis Rundown in Review: Breaking Down November 2024s Top Threats

~ 24 Nov 2024 ~

Volunteer DEF CON hackers dive into America's leaky water infrastructure

~ 23 Nov 2024 ~

Trump taps border hawk to head DHS. Will Noem's 'enthusiasm' extend to digital domain?

Russias Ballistic Missile Attack on Ukraine Is an Alarming First

Google Exposes GLASSBRIDGE: A Pro-China Influence Network of Fake News Sites

North Korean Hackers Steal $10M with AI-Driven Scams and Malware on LinkedIn

Andrew Tates Educational Platform Was Hacked

~ 22 Nov 2024 ~

Andrew Tate's site ransacked, subscriber data stolen

Friday Squid Blogging: Transcriptome Analysis of the Indian Squid

1000s of Palo Alto Networks firewalls hijacked as miscreants exploit critical hole

The US Is Calling Out Foreign Influence Campaigns Faster Than Ever

APT-K-47 Uses Hajj-Themed Lures to Deliver Advanced Asyncshell Malware

China-Linked TAG-112 Targets Tibetan Media with Cobalt Strike Espionage Campaign

The Scale of Geoblocking by Nation

Russian Hackers Deploy HATVIBE and CHERRYSPY Malware Across Europe and Asia

Russian Spies Jumped From One Network to Another Via Wi-Fi in an Unprecedented Hack

Unlocking Google Workspace Security: Are You Doing Enough to Protect Your Data?

How to master endpoint security

Microsoft shares latest intelligence on North Korean and Chinese threat actors at CYBERWARCON

Microsoft, Meta, and DOJ Disrupt Global Cybercrime and Fraudulent Networks

SafePay ransomware gang claims Microlise attack that disrupted prison van tracking

PyPI Attack: ChatGPT, Claude Impersonators Deliver JarkaStealer via Python Libraries

Helpline for Yakuza victims fears it leaked their personal info

Here's what happens if you don't layer network security or remove unused web shells

~ 21 Nov 2024 ~

Feds Charge Five Men in Scattered Spider Roundup

DARPA-backed voting system for soldiers abroad savaged

Meta Finally Breaks Its Silence on Pig Butchering

Chinese ship casts shadow over Baltic subsea cable snipfest

Cyber Story Time: The Boy Who Cried "Secure!"

Warning: Over 2,000 Palo Alto Networks Devices Hacked in Ongoing Attack Campaign

Chinese APT Gelsemium Targets Linux Systems with New WolfsBane Backdoor

'Alarming' security bugs lay low in Linux's needrestart server utility for 10 years

'Alarming' bugs lay low in Ubuntu Server utility for 10 years

10 Most Impactful PAM Use Cases for Enhancing Organizational Security

North Korean Front Companies Impersonate U.S. IT Firms to Fund Missile Programs

Secret Service Tracking Peoples Locations without Warrant

Schneider Electric PowerLogic PM5300 Series

Schneider Electric Modicon M340, MC80, and Momentum Unity M1E

Schneider Electric Modicon M340, MC80, and Momentum Unity M1E

Schneider Electric EcoStruxure IT Gateway

OSCAT Basic Library

mySCADA myPRO Manager

Automated Logic WebCTRL Premium Server

Chinas Surveillance State Is Selling Citizen Data as a Side Hustle

Over 145,000 Industrial Control Systems Across 175 Countries Found Exposed Online

Now Online Safety Act is law, UK has 'priorities' but still won't explain 'spy clause'

Unveiling WolfsBane: Gelsemiums Linux counterpart to Gelsevirine

5 Scattered Spider Gang Members Indicted in Multi-Million Dollar Cybercrime Scheme

Google's AI-Powered OSS-Fuzz Tool Finds 26 Vulnerabilities in Open-Source Projects

NodeStealer Malware Targets Facebook Ad Accounts, Harvesting Credit Card Data

Put your usernames and passwords in your will, advises Japan's government

Five Scattered Spider suspects indicted for phishing spree and crypto heists

~ 20 Nov 2024 ~

Chinese cyberspies, Musks Beijing ties, labelled real risk to US security by senator

Mega US healthcare payments network restores system 9 months after ransomware attack

Google's AI bug hunters sniff out two dozen-plus code gremlins that humans missed

Steve Bellovins Retirement Talk

D-Link tells users to trash old VPN routers over bug too dangerous to identify

Ghost Tap: Hackers Exploiting NFCGate to Steal Funds via Mobile Payments

NHIs Are the Future of Cybersecurity: Meet NHIDR

Inside the Booming AI Pimping Industry

Kathryn Thornton: Correcting Hubble's vision | Starmus highlights

Decades-Old Security Vulnerabilities Found in Ubuntu's Needrestart Package

Data is the new uranium incredibly powerful and amazingly dangerous

Microsoft Launches Windows Resiliency Initiative to Boost Security and System Integrity

China-Backed Hackers Leverage SIGTRAN, GSM Protocols to Infiltrate Telecom Networks

Apple Releases Urgent Updates to Patch Actively Exploited Zero-Day Vulnerabilities

Oracle Warns of Agile PLM Vulnerability Currently Under Active Exploitation

Anyone Can Buy Data Tracking US Soldiers and Spies to Nuclear Vaults and Brothels in Germany

Fintech Giant Finastra Investigating Data Breach

Healthcare org Equinox notifies 21K patients and staff of data theft

~ 19 Nov 2024 ~

China-linked group abuses Fortinet 0-day with post-exploit VPN-credential stealer

Russian suspected Phobos ransomware admin extradited to US over $16M extortion

America's drinking water systems have a hard-to-swallow cybersecurity problem

Palo Alto Networks tackles firewall-busting zero-days with critical patches

Navigating third-party risks

Ngioweb Botnet Fuels NSOCKS Residential Proxy Network Exploiting IoT Devices

Hackers Hijack Unsecured Jupyter Notebooks to Stream Illegal Sports Broadcasts

AI innovations for a more secure future unveiled at Microsoft Ignite

Crook breaks into AI biz, points $250K wire payment at their own account

Why Italy Sells So Much Spyware

Mitsubishi Electric MELSEC iQ-F Series

Privileged Accounts, Hidden Threats: Why Privileged Access Security Must Be a Top Priority

Scammer Black Friday offers: Online shopping threats and dark web

My information was stolen. Now what?

ICE Can Already Sidestep Sanctuary City Laws Through Data-Sharing Fusion Centers

New 'Helldown' Ransomware Variant Expands Attacks to VMware and Linux Systems

Join in the festive cybersecurity fun