Port 22

~ 12 Apr 2023 ~

Data on 400K Kodi Forum Members Stolen and Put Up for Sale

Microsoft: NSO Group-Like 'QuaDream' Actor Selling Mobile Spyware to Governments

Survey Findings Show Link Between Data Silos and Security Vulnerabilities

Gartner: Human-Centric Design Is Top Cybersecurity Trend for 2023

CrowdStrike Expands Falcon to Include IoT

LinkedIn Verification Now Lets You Verify Your Job and Account

LastPass Breach Reveals Important Lessons

1M+ WordPress Sites Hacked via Zero-Day Plug-in Bugs

LinkedIn and Microsoft Entra introduce a new way to verify your workplace

Israel-based Spyware Firm QuaDream Targets High-Risk iPhones with Zero-Click Exploit

The Service Accounts Challenge: Can't See or Secure Them Until It's Too Late

FBI Advising People to Avoid Public Charging Stations

What are the cybersecurity concerns of SMBs by sector?

Mission possible

Following the Lazarus group by tracking DeathNote campaign

Urgent: Microsoft Issues Patches for 97 Flaws, Including Active Ransomware Exploit

3CX teases security-focused client update, plus password hashing

Lazarus Sub-Group Labyrinth Chollima Uncovered as Mastermind in 3CX Supply Chain Attack

US cyber chiefs warn AI will help crooks, China develop nastier cyberattacks faster

SANS FOR498: Digital Acquisition & Rapid Triage

Details Matter

Another zero-click Apple spyware maker just popped up on the radar again

Microsoft (& Apple) Patch Tuesday, April 2023 Edition

~ 11 Apr 2023 ~

April Patch Tuesday: Ransomware gangs already exploiting this Windows bug

Microsoft Patches 97 CVEs, Including Zero-Day & Wormable Bugs

Microsoft Azure Shared Key Misconfiguration Could Lead to RCE

'Blatantly Obvious': Spyware Offered to Cyberattackers via PyPI Python Repository

Nokoyawa ransomware attacks with Windows zero-day

Where Are the Women? Making Cybersecurity More Inclusive

Guidance for investigating attacks using CVE-2022-21894: The BlackLotus campaign

7 Things Your Ransomware Response Playbook Is Likely Missing

DEV-0196: QuaDreams KingsPawn malware used to target civil society in Europe, North America, the Middle East, and Southeast Asia

Sweet QuaDreams: A First Look at Spyware Vendor QuaDreams Exploits, Victims, and Customers

Attackers Hide RedLine Stealer Behind ChatGPT, Google Bard Facebook Ads

How Password Managers Can Get Hacked

How CIEM Can Improve Identity, Permissions Management for Multicloud Deployments

Israeli Irrigation Water Controllers & Postal Service Breached

Azure admins warned to disable shared key access as backdoor attack detailed

Samsung Engineers Feed Sensitive Data to ChatGPT, Sparking Workplace AI Warnings

How to Use Apples New All-In-One Password Manager

Cybercriminals Turn to Android Loaders on Dark Web to Evade Google Play Security

[eBook] A Step-by-Step Guide to Cyber Risk Assessment

Car Thieves Hacking the CAN Bus

40% of IT security pros say they've been told not to report a data leak

10 things to look out for when buying a password manager

Cryptocurrency Stealer Malware Distributed via 13 NuGet Packages

Renewed Focus on Incident Response Brings New Competitors and Partnerships

~ 10 Apr 2023 ~

How much to infect Android phones via Google Play store? How about $20k

Inside FTX: Jokes about misplaced funds, diabolical IT, poor oversight, and worse

Apps for Sale: Cybercriminals Sell Android Hacks for Up to $20K a Pop

Apple squashes iOS, macOS zero-day bugs already exploited by snoops

Pair of Apple Zero-Days Under Active Exploit; Patch & Update Accordingly

High-Stakes Ransomware Response: Know What Cards You Hold

Google to kill Dropcam, Nest Secure hardware next year

Russia's Joker DPR Claims Access to Ukraine Troop Movement Data

How and Why to Put Multicloud to Work

Microsoft, Fortra are this fed up with cyber-gangs abusing Cobalt Strike

Rethinking Cybersecurity's Structure & the Role of the Modern CISO

When it comes to technology, securing your future means securing your present

Estonian National Charged in U.S. for Acquiring Electronics and Metasploit Pro for Russian Military

Hackers Flood NPM with Bogus Packages Causing a DoS Attack

Top 10 Cybersecurity Trends for 2023: From Zero Trust to Cyber Insurance

LLMs and Phishing

Over 1 Million WordPress Sites Infected by Balada Injector Malware Campaign

Protecting your business with Wazuh: The open source security platform