Port 22

~ 31 Aug 2023 ~

Apple's Decision to Kill Its CSAM Photo-Scanning Tool Sparks Fresh Controversy

Kremlin-backed Sandworm strikes Android devices with data-stealing Infamous Chisel

Cybercriminals Team Up to Upgrade 'SapphireStealer' Malware

UK Agrees to Support Kuwait's Cybersecurity Center

Paramount, Forever 21 Data Breaches Set Stage for Follow-On Attacks

Apple iPhone 14 Pro Offered Up to the Hacking Masses

Navigating privacy in a data-driven world with Microsoft Priva

AgentSmith HIDS Host Based Intrusion Detection

Cyberattackers Swarm OpenFire Cloud Servers With Takeover Barrage

SapphireStealer Malware: A Gateway to Espionage and Ransomware Operations

A Brief History of ICS-Tailored Attacks

Adversaries Ride RocketMQ Bug to DreamBus Bot Resurgence

Fake Signal and Telegram apps Week in security with Tony Anscombe

North Korean Hackers Deploy New Malicious Python Packages in PyPI Repository

PTC Kepware KepServerEX

GE Digital CIMPLICITY

Digi RealPort Protocol

ARDEREG Sistemas SCADA

Numbers Don't Lie: Exposing the Harsh Truths of Cyberattacks in New Report

Own Your Own Government Surveillance Van

Google Fixes Serious Security Flaws in Chrome and Android

What you need to know about iCloud Private Relay

Earth Estries' Espionage Campaign Targets Governments and Tech Titans Across Continents

SEC568: Approaching the Software Supply Chain like Jack Byrnes

Next Generation FOR508 - Major Course Update Fall 2023

How to Get Into OSINT

FOR589: Cybercrime Intelligence Blog

Career Development for Security Awareness, Behavior, and Culture Professionals

~ 30 Aug 2023 ~

Barracuda gateway attacks: How Chinese snoops keep a grip on victims' networks

Chinese Group Spreads Android Spyware Via Trojan Signal, Telegram Apps

APT Attacks From 'Earth Estries' Hit Gov't, Tech With Custom Malware

New York Times Spoofed to Hide Russian Disinformation Campaign

Microsoft angry over Russian-led UN cybercrime treaty

Unmasking Trickbot, One of the Worlds Top Cybercrime Gangs

Hackers Can Exploit Windows Container Isolation Framework to Bypass Endpoint Security

4 Strategies to Safeguard the Finance Industry Against Deepfake Onslaught

Performance-Enhanced Android MMRat Scurries onto Devices Via Fake App Stores

MMRat Android Trojan Executes Remote Financial Fraud Through Accessibility Feature

Should Senior IT Professionals Be Accountable for Professional Decisions?

China-Linked BadBazaar Android Spyware Targeting Signal and Telegram Users

When Apps Go Rogue

In Airbnb, Cybercriminals Find a Comfortable Home for Fraud

How to Prevent ChatGPT From Stealing Your Content & Traffic

Malicious npm Packages Aim to Target Developers for Source Code Theft

Alert: Juniper Firewalls, Openfire, and Apache RocketMQ Under Attack from New Exploits

IT threat evolution in Q2 2023. Non-mobile statistics

IT threat evolution in Q2 2023. Mobile statistics

IT threat evolution in Q2 2023

BadBazaar espionage tool targets Android users via trojanized Signal and Telegram apps

Critical Vulnerability Alert: VMware Aria Operations Networks at Risk from Remote Attacks

FBI Dismantles QakBot Malware, Frees 700,000 Computers, Seizes $8.6 Million

Toyota Japan back on the road after probably-not-cyber attack halted production

Evolution of Cybercriminal Operations in 2023

Meta reckons China's troll farms could learn proper OpSec from Russia's fake news crews

~ 29 Aug 2023 ~

6 Ways AI Can Revolutionize Digital Forensics

Everest Group Research: C-Suite Must Recognize Critical Difference Between Cybersecurity and Cyber Resilience

SPHERE Appoints Former Johnson & Johnson CISO Marene Allison to Board of Directors

Unpatched Citrix NetScaler Devices Targeted by Ransomware Group FIN8

Delinea Research Reveals a Cyber Insurance Gap

University cuts itself off from internet after mystery security snafu

PurFoods Mom's Meals Reports Data Breach Exposing Social Security Numbers of Over 1.2 Million Consumers

Sprawling Qakbot Malware Takedown Spans 700,000 Infected Machines

MOVEit Was a SQL Injection Accident Waiting to Happen

Meta Cripples China's Signature 'Spamouflage' Influence Op

Apple security boss faces iPads-for-gun-permits bribery charge... again

FBI-led Operation Duck Hunt shoots down Qakbot

South African Department of Defence Denies Stolen Data Claims

U.S. Hacks QakBot, Quietly Removes Botnet Infections

Somalia Orders ISPs to Block Telegram and TikTok

Rackspace Faces Massive Cleanup Costs After Ransomware Attack

Addressing Cybersecurity's Talent Shortage & Its Impact on CISOs

Chinese Hacking Group Exploits Barracuda Zero-Day to Target Government, Military, and Telecom

DarkGate Malware Activity Spikes as Developer Rents Out Malware to Affiliates

Kroll's Crypto Breach Highlights SIM-Swapping Risk

Here's What Your Breach Response Plan Might Be Missing

The Weird, Big-Money World of Cybercrime Writing Contests

PTC Codebeamer

More UK cops' names and photos exposed in supplier breach

Survey Provides Takeaways for Security Pros to Operationalize their Remediation Life Cycle

Identity Theft from 1965 Uncovered through Face Recognition

Citrix NetScaler Alert: Ransomware Hackers Exploiting Critical Vulnerability

Phishing-as-a-Service Gets Smarter: Microsoft Sounds Alarm on AiTM Attacks

~ 28 Aug 2023 ~

Health, payment info for 1.2M people feared stolen from Purfoods in IT attack

Motherboard Mishaps Undermine Trust, Security

BreachLock Intelligence Report Reveals Critical Insights From Thousands of Penetration Tests

Cybercriminals Harness Leaked LockBit Builder in Wave of New Attacks

Considerations for Reducing Risk When Migrating to the Cloud

Financial Firms Breached in MOVEit Cyberattacks Now Face Lawsuits

London Police Warned to Stay Vigilant Amid Major Data Breach

5 Ways to Prepare for Google's 90-Day TLS Certificate Expiration

Malware loader lowdown: The big 3 responsible for 80% of attacks so far this year

Experts Uncover How Cybercriminals Could Exploit Microsoft Entra ID for Elevated Privilege

Developers Beware: Malicious Rust Libraries Caught Transmitting OS Info to Telegram Channel

Authentication Outage Underscores Why 'Fail Safe' Is Key

Legal Liability for Insecure Software Might Work, but It's Dangerous

Cyberattacks Targeting E-commerce Applications

Remotely Stopping Polish Trains

Recovering from a supply-chain attack: What are the lessons to learn from the 3CX hack?

Malware Unleashed: Public Sector Hit in Sudden Surge, Reveals New Research

Better SaaS Security Goes Beyond Procurement