Port 22

~ 20 Jun 2023 ~

Rogue Android Apps Target Pakistani Individuals in Sophisticated Espionage Campaign

Data leak at major law firm sets Australia's government and elites scrambling

~ 19 Jun 2023 ~

Consumer Data: The Risk and Reward for Manufacturing Companies

New Mystic Stealer Malware Targets 40 Web Browsers and 70 Browser Extensions

Guess what happened to this US agency using outdated software?

Name That Toon: Time to Spare?

US Investors Sniffing Around Blacklisted NSO Group Assets

Generative AI Has Its Risks, But the Sky Isn't Falling

Decoding Identity and Access Management For Organizations and Consumers

Researchers Discover New Sophisticated Toolkit Targeting Apple macOS Systems

Introducing AI-guided Remediation for IaC Security / KICS

Power LED Side-Channel Attack

State-Backed Hackers Employ Advanced Methods to Target Middle Eastern and African Governments

Microsoft Blames Massive DDoS Attack for Azure, Outlook, and OneDrive Disruptions

Outsource to infill on cyber security

With dead-time dump, Microsoft revealed DDoS as cause of cloud outages

~ 18 Jun 2023 ~

Humans Arent Mentally Ready for an AI-Saturated Post-Truth World

~ 17 Jun 2023 ~

A Newly Named Group of GRU Hackers is Wreaking Havoc in Ukraine

From Cryptojacking to DDoS Attacks: Diicot Expands Tactics with Cayosin Botnet

~ 16 Jun 2023 ~

Third MOVEit bug fixed a day after PoC exploit made public

Clop Hacking Rampage Hits US Agencies and Exposes Data of Millions

Friday Squid Blogging: Squid Can Edit Their RNA

Getting Over the DNS Security Awareness Gap

Security LeadHER Wraps Groundbreaking Inaugural Conference for Women in Security

The Infrastructure Security Engineer Is a Unicorn Among Thoroughbreds

Killnet Threatens Imminent SWIFT, World Banking Attacks

Security and Human Behavior (SHB) 2023

LockBit suspect's arrest sheds more light on 'trustworthy' gang

Third MOVEit Transfer Vulnerability Disclosed by Progress Software

Is a RAT stealing your files? Week in security with Tony Anscombe

Dodgy Microlending Apps Stalk MEA Users, Highlighting Cyber Maturity Gaps

Is a RAT stealing your files? Week in security with Tony Anscombe

Attackers Create Synthetic Security Researchers to Steal IP

Cybercrime Doesn't Take a Vacation

ChamelDoH: New Linux Backdoor Utilizing DNS-over-HTTPS Tunneling for Covert CnC

Capita faces first legal Letter of Claim over mega breach

HashiCorp Expands PAM, Secrets Management Capabilities

Activities in the Cybercrime Underground Require a New Approach to Cybersecurity

Stop Cyberbullying Day: Prevention is everyones responsibility

20-Year-Old Russian LockBit Ransomware Affiliate Arrested in Arizona

Microsoft: Russia sent its B team to wipe Ukrainian hard drives

Third Flaw Uncovered in MOVEit Transfer App Amidst Cl0p Ransomware Mass Attack

Cybersecurity Jobs: Security Awareness Officer (Japanese)

EU boss Breton: There's no Huawei that Chinese comms kit is safe to use in Europe

~ 15 Jun 2023 ~

How Do I Protect My API Keys From Appearing in GitHub Search Results?

US government hit by Russia's Clop in MOVEit mass attack

Coalition Releases Security Vulnerability Exploit Scoring System

Keytos Uncovers 15,000 Vulnerable Subdomains per Month in Azure Using Cryptographic Certificates

Action1 Announces $20M Investment in Its Patch Management Platform

LockBit Affiliate Arrested, as Extortion Totals Reach $91M Since 2020

Thales Proposes to Acquire Tesserent, Expanding its Global Cybersecurity Leadership

Vulcan Cyber Is a Launch Partner for Wiz Integrations (WIN) Platform

Critical Barracuda ESG Zero-Day Linked to Novel Chinese APT

Chinese spies blamed for data-harvesting raids on Barracuda email gateways

Free Training's Role in Cybersecurity

Ransomware Hackers and Scammers Utilizing Cloud Mining to Launder Cryptocurrency

Angola Marks Technology Advancements With Cybersecurity Academy Plans

CISA Order Highlights Persistent Risk at Network Edge

Chinese UNC4841 Group Exploits Zero-Day Flaw in Barracuda Email Security Gateway

'Shampoo' ChromeLoader Variant Difficult to Wash Out

Borderless Data vs. Data Sovereignty: Can They Co-Exist?

Vidar Malware Using New Tactics to Evade Detection and Anonymize Activities

Warning: GravityRAT Android Trojan Steals WhatsApp Backups and Deletes Files

SUBNET PowerSYSTEM Center

Siemens Solid Edge

Siemens SINAMICS Medium Voltage Products

Siemens SIMOTION

Siemens SIMATIC WinCC V7

Siemens SIMATIC WinCC

Siemens SIMATIC STEP 7 and Derived Products

Siemens SIMATIC S7-1500 TM MFP BIOS

Siemens SICAM A8000 Devices

Advantech WebAccess/SCADA

New Research: 6% of Employees Paste Sensitive Data into GenAI tools as ChatGPT

New Supply Chain Attack Exploits Abandoned S3 Buckets to Distribute Malicious Binaries

New Report Reveals Shuckworm's Long-Running Intrusions on Ukrainian Organizations

Understanding Malware-as-a-Service

How Shady Chinese Encryption Chips Got Into the Navy, NATO, and NASA

Android GravityRAT goes after WhatsApp backups

Microsoft Warns of New Russian State-Sponsored Hacker Group with Destructive Intent

LockBit Ransomware Extorts $91 Million from U.S. Companies

North Korea created very phishy evil twin of Naver, South Korea's top portal

Network-Security Testing Standard Nears Prime Time

Cryptocurrency Attacks Quadrupled as Cybercriminals Cash In

~ 14 Jun 2023 ~

Decision to hold women-in-cyber events in abortion-banning states sparks outcry

Russian APT 'Cadet Blizzard' Behind Ukraine Wiper Attacks

Illinois Hospital Closure Showcases Ransomware's Existential Threat

XSS Vulnerabilities Found in Microsoft Azure Cloud Services

LockBit victims in the US alone paid over $90m in ransoms since 2020

Moving the Cyber Industry Forward Requires a Novel Approach

Expanding horizonsMicrosoft Securitys continued commitment to multicloud

Chinese Hackers Exploit VMware Zero-Day to Backdoor Windows and Linux Systems

Why Your SEG Could Be Your Email Security Achilles' Heel

Cadet Blizzard emerges as a novel and distinct Russian threat actor

Fortinet: Patched Critical Flaw May Have Been Exploited

Lethal weather

Public preview: Improve Win32 app security via app isolation

Insights Into Nation-State Tactics: Lessons From Russia's Hybrid War In Ukraine

How Popular Messaging Tools Instill a False Sense of Security

Severe Vulnerabilities Reported in Microsoft Azure Bastion and Container Registry