Port 22

~ 2 Jun 2023 ~

'PostalFurious' SMS Attacks Target UAE Citizens for Data Theft

Malaysia goes its own Huawei, won't ban Chinese vendor from 5G network

'Picture-in-Picture' Obfuscation Spoofs Delta, Kohl's for Credential Harvesting

Streamers Ditch Netflix for Dark Web After Password Sharing Ban

Microsoft stashes nearly half a billion in case LinkedIn data drama hits

Open-Source LLMs

Want Sustainable Security? Find Middle Ground Between Tech & Education

Apple Zero-Days, iMessage Used in 4-Year, Ongoing Spying Effort

How CISOs Can Manage the Intersection of Security, Privacy, And Trust

API security in the spotlight Week in security with Tony Anscombe

In search of the Triangulation: triangle_check utility

New Botnet Malware 'Horabot' Targets Spanish-Speaking Users in Latin America

The Importance of Managing Your Data Security Posture

Camaro Dragon Strikes with New TinyNote Backdoor for Intelligence Gathering

This malicious PyPI package mixed source and compiled code to dodge detection

North Korea's Kimsuky Group Mimics Key Figures in Targeted Cyber Attacks

You might have been phished by the gang that stole North Koreas lousy rocket tech

MOVEit Transfer Under Attack: Zero-Day Vulnerability Actively Being Exploited

Millions of Gigabyte PC motherboards backdoored? What's the actual score?

Cybersecurity Jobs: Cloud Security Analyst (Japanese)

~ 1 Jun 2023 ~

Deployed publicly accessible MOVEit Transfer? Oh no. Mass exploitation underway

Kremlin claims Apple helped NSA spy on diplomats via iPhone backdoor

DNB Strengthens its Network Security Posture and Productivity With Ericsson Security Manager Solution

Cyversity and United Airlines to Provide Cybersecurity Training Scholarships to Cyversity Members

Kaspersky Says New Zero-Day Malware Hit iPhonesIncluding Its Own

Tel Aviv Stock Exchange Selects CardinalOps to Reduce Risk of Breaches Due to Undetected Attacks

Amazon Pays $30.8M to Settle Ring Spying & Alexa Privacy Lawsuits

Jetpack WordPress Plug-in API Bug Triggers Mass Updates

How Do I Reduce Security Tool Sprawl in My Environment?

Sustained 'Red Deer' Phishing Attacks Impersonate Israel Post, Drop RATs

Google Drive Deficiency Allows Attackers to Exfiltrate Workspace Data Without a Trace

Where SBOMs Stand Today

Novel PyPI Malware Uses Compiled Python Bytecode to Evade Detection

The downside of frenemies

Ask Fitis, the Bear: Real Crooks Sign Their Malware

Evasive QBot Malware Leverages Short-lived Residential IPs for Dynamic Attacks

Biometric Bypass: BrutePrint Makes Short Work of Fingerprint Security

New Zero-Click Hack Targets iOS Users with Stealthy Root-Privilege Malware

Unmasking XE Group: Experts Reveal Identity of Suspected Cybercrime Kingpin

SolarWinds Transforms Brand to Signify Ongoing Evolution, Portfolio Expansion, and Customer Empowerment

Top macOS Malware Threats Proliferate: Here Are 6 to Watch

Dark Reading Launches Inaugural CISO Advisory Board

Operation Triangulation: iOS devices targeted with previously unknown malware

Malicious PyPI Packages Using Compiled Python Code to Bypass Detection

How Wazuh Improves IT Hygiene for Cyber Security Resilience

On the Catastrophic Risk of AI

All eyes on APIs: Top 3 API security risks and how to mitigate them

Improved BlackCat Ransomware Strikes with Lightning Speed and Stealthy Tactics

N. Korean ScarCruft Hackers Exploit LNK Files to Spread RokRAT

Amazon Ring, Alexa accused of every nightmare IoT security fail you can imagine

Ukraine war blurs lines between cyber-crims and state-sponsored attackers

Active Mirai Botnet Variant Exploiting Zyxel Devices for DDoS Attacks

Urgent WordPress Update Fixes Critical Flaw in Jetpack Plugin on Million of Sites

Dark Pink cyber-spies add info stealers to their arsenal, notch up more victims

Women in Cybersecurity (WiCyS) Joins Forces with SANS Security Awareness

~ 31 May 2023 ~

Feds, you'll need a warrant for that cellphone border search

Meet Charlotte, CrowdStrike's New Generative AI Assistant

Yet Another Toyota Cloud Data Breach Jeopardizes Thousands of Customers

Can Cloud Services Encourage Better Login Security? Netflix's Accidental Model

MacOS 'Migraine' Bug: Big Headache for Device System Integrity

Ways to Help Cybersecurity's Essential Workers Avoid Burnout

What Apple's RSRs Reveal About Mac Patch Management

Barracuda Email Security Gateways bitten by data thieves

Criminals spent 10 days in US dental insurer's systems extracting data of 9 million

Investment May Be Down, but Cybersecurity Remains a Hot Sector