Port 22

~ 14 Jun 2023 ~

Capita wins 50M fraud reporting contract with City of London cops

Microsoft Fixes 69 Bugs, but None Are Zero-Days

On the Need for an AI Public Option

New Golang-based Skuld Malware Stealing Discord and Browser Data from Windows PCs

Where from, Where to The Evolution of Network Security

Bringing security to account: why identity must be unified

Fake Researcher Profiles Spread Malware through GitHub Repositories as PoC Exploits

Critical Security Vulnerability Discovered in WooCommerce Stripe Gateway Plugin

Microsoft Releases Updates to Patch Critical Flaws in Windows and Other Software

Florida man insists he didn't violate the law by keeping Top Secret docs

~ 13 Jun 2023 ~

Cycode Launches CI/CD Pipeline Monitoring Solution (Cimon) to Prevent Supply Chain Attacks

Analysis: Social Engineering Drives BEC Losses to $50B Globally

Chinese Threat Actor Abused ESXi Zero-Day to Pilfer Files From Guest VMs

Popular Apparel, Clothing Brands Being Used in Massive Phishing Scam

Microsoft Patch Tuesday, June 2023 Edition

June Patch Tuesday: VMware vuln under attack by Chinese spies, Microsoft kinda meh

Harness the Power of PKI to Battle Data Breaches

Systems and Security Technical Lead

Last of the Gozi 3 sentenced over Windows info-stealing malware ops

How Security Leaders Should Approach Cybersecurity Startups

How Microsoft and Sonrai integrate to eliminate attack paths

Beware: New DoubleFinger Loader Targets Cryptocurrency Wallets with Stealer

The commonality of criminal intrusion

Why Critical Infrastructure Remains a Ransomware Target

Over Half of Security Leaders Lack Confidence in Protecting App Secrets, Study Reveals

Adversary-in-the-Middle Attack Campaign Hits Dozens of Global Organizations

Rockwell Automation FactoryTalk Transaction Manager

Rockwell Automation FactoryTalk Services Platform

Rockwell Automation FactoryTalk Edge Gateway

Datalogics Library Third-Party

Identifying the Idaho Killer

UFO Whistleblower, Meet a Conspiracy-Loving Congress

Webinar - Mastering API Security: Understanding Your True Attack Surface

Two Russian Nationals Charged for Masterminding Mt. Gox Crypto Exchange Hack

These Microsoft Office security signatures are 'practically worthless'

Cyber insurance 101: what is it and does my company need it?

Russia-Ukraine war sending shockwaves into cyber-ecosystem

UK telco watchdog Ofcom, Minnesota Dept of Ed named as latest MOVEit victims

China's cyber now aimed at infrastructure, warns CISA boss

Critical FortiOS and FortiProxy Vulnerability Likely Exploited - Patch Now!

India probes medical info 'leak' to Telegram

~ 12 Jun 2023 ~

Unsealed: Charges against Russians blamed for Mt Gox crypto-exchange collapse

Researchers Report First Instance of Automated SaaS Ransomware Extortion

New Loader Delivering Spyware via Image Steals Cryptocurrency Info

Fortinet squashes hijack-my-VPN bug in FortiOS gear

Use of Multifactor Authentication (MFA) Nearly Doubles Since 2020, Okta Secure Sign-in Trends Reports Finds

Posing as journalists, Pink Drainer pilfers $3.3M in crypto

RomCom Threat Actor Targets Ukrainian Politicians, US Healthcare

10 Important Security Tasks You Shouldn't Skip

The US Is Openly Stockpiling Dirt on All Its Citizens

Microsoft stole our stolen dark web data, says security outfit

A Massive Vaccine Database Leak Exposes IDs of Millions of Indians

'Stealth Soldier' Attacks Target Libyan Government Entities With Surveillance Malware

Supply Chain Attack Defense Demands Mature Threat Hunting

Forrester names Microsoft a Leader in the 2023 Enterprise Email Security Wave

Doing Less With Less: Focusing on Value

Researchers Uncover Publisher Spoofing Bug in Microsoft Visual Studio Installer

Lantum S3 bucket leak is prescription for chaos for thousands of UK doctors

AI-Generated Steganography

Hold it more vulnerabilities found in MOVEit file transfer software

Why Now? The Rise of Attack Surface Management

Cybercriminals Using Powerful BatCloak Engine to Make Malware Fully Undetectable

Sneaky DoubleFinger loads GreetingGhoul targeting your cryptocurrency

An Anti-Porn App Put Him in Jail and His Family Under Surveillance

Password Reset Hack Exposed in Honda's E-Commerce Platform, Dealers Data at Risk

Beware: 1,000+ Fake Cryptocurrency Sites Trap Users in Bogus Rewards Scheme

Critical RCE Flaw Discovered in Fortinet FortiGate Firewalls - Patch Now!

Apple's Safari Private Browsing Now Automatically Removes Tracking Parameters in URLs

A Visual Summary of SANS Blue Team Summit 2023

~ 11 Jun 2023 ~

Talitrix Prison-Monitoring System Tracks Inmates Down to Their Heart Rate

~ 10 Jun 2023 ~

9 Years After the Mt. Gox Hack, Feds Indict Alleged Culprits

New SPECTRALVIPER Backdoor Targeting Vietnamese Public Companies

New Critical MOVEit Transfer SQL Injection Vulnerabilities Discovered - Patch Now!

~ 9 Jun 2023 ~

Online muggers make serious moves on unpatched Microsoft bugs

Passkeys See Fresh Momentum With New Pilot Programs

Friday Squid Blogging: Light-Emitting Squid

DOS Attacks Dominate, but System Intrusions Cause Most Pain

Brand-New Security Bugs Affect All MOVEit Transfer Versions

FBI: FISA Section 702 'absolutely critical' to spy on, err, protect Americans

'Asylum Ambuscade' Cyberattackers Blend Financial Heists & Cyber Espionage

3 Elite Communication Skills to Help Security Pros Get Projects Funded

Ransomware scum hit Japanese pharma giant Eisai Group

Cl0P Gang Sat on Exploit for MOVEit Flaw for Nearly 2 Years

Microsoft Uncovers Banking AitM Phishing and BEC Attacks Targeting Financial Giants

South African Female Students Offered Cyber Scholarship

Mixing cybercrime and cyberespionage Week in security with Tony Anscombe

5 Tips for Modernizing Your Security Operations Center Strategy

Asylum Ambuscade: A Cybercrime Group with Espionage Ambitions

How Continuous Monitoring and Threat Intel Can Help Prevent Ransomware

Seven steps for using zero trust to protect your multicloud estate

Mixing cybercrime and cyberespionage Week in security with Tony Anscombe

Brit data watchdog fines sleazy sales ops 250K for 'bombarding' folk with calls

5 Reasons Why Access Management is the Key to Securing the Modern Workplace

Operation Triangulation: Zero-Click iPhone Malware

Stealth Soldier: A New Custom Backdoor Targets North Africa with Espionage Attacks

Darkweb credit card marts in decline across Asia, researchers claim

Google changes email authentication after spoof shows a bad delivery for UPS

Parsing the 2023 VZ DBIR for the Human Element

Cybersecurity Jobs: Intrusion Detection/SOC Analyst (Japanese)

City of Dallas Still Clawing Back Weeks After Cyber Incident