Port 22

~ 5 Jun 2023 ~

Microsoft: Lace Tempest Hackers Behind Active Exploitation of MOVEit Transfer App

The Annual Report: 2024 Plans and Priorities for SaaS Security

The Software-Defined Car

Satacom delivers browser extension that steals cryptocurrency

Inside 4chans Top-Secret Moderation Machine

Magento, WooCommerce, WordPress, and Shopify Exploited in Web Skimmer Attack

Name That Edge Toon: Spring Chickens

Brazilian Cybercriminals Using LOLBaS and CMD Scripts to Drain Bank Accounts

Alarming Surge in TrueBot Activity Revealed with New Delivery Vectors

Australian cyber-op attacked ISIL with the terrifying power of Rickrolling

Toyota admits to yet another cloud leak

Meet TeamT5, the Taiwanese infosec outfit taking on Beijing and defeating its smears

~ 3 Jun 2023 ~

AI Is Being Used to Turbocharge Scams

HowAI Protects (and Attacks) Your Inbox

Uncle Sam wants DEF CON hackers to pwn this Moonlighter satellite in space

New Linux Ransomware Strain BlackSuit Shows Striking Similarities to Royal

Cloud Security Tops Concerns for Cybersecurity Leaders: EC-Council's Certified CISO Hall of Fame Report 2023

FTC Slams Amazon with $30.8M Fine for Privacy Violations Involving Alexa and Ring

~ 2 Jun 2023 ~

The Messy US Influence That's Helping Iranians Stay Online

Friday Squid Blogging: Squid Chromolithographs

PyPI's 2FA Requirements Don't Go Far Enough, Researchers Say

'PostalFurious' SMS Attacks Target UAE Citizens for Data Theft

Malaysia goes its own Huawei, won't ban Chinese vendor from 5G network

'Picture-in-Picture' Obfuscation Spoofs Delta, Kohl's for Credential Harvesting

Streamers Ditch Netflix for Dark Web After Password Sharing Ban

Microsoft stashes nearly half a billion in case LinkedIn data drama hits

API security in the spotlight Week in security with Tony Anscombe

Open-Source LLMs

Want Sustainable Security? Find Middle Ground Between Tech & Education

Apple Zero-Days, iMessage Used in 4-Year, Ongoing Spying Effort

How CISOs Can Manage the Intersection of Security, Privacy, And Trust

API security in the spotlight Week in security with Tony Anscombe

In search of the Triangulation: triangle_check utility

New Botnet Malware 'Horabot' Targets Spanish-Speaking Users in Latin America

The Importance of Managing Your Data Security Posture

Camaro Dragon Strikes with New TinyNote Backdoor for Intelligence Gathering

This malicious PyPI package mixed source and compiled code to dodge detection

North Korea's Kimsuky Group Mimics Key Figures in Targeted Cyber Attacks

You might have been phished by the gang that stole North Koreas lousy rocket tech

MOVEit Transfer Under Attack: Zero-Day Vulnerability Actively Being Exploited

Millions of Gigabyte PC motherboards backdoored? What's the actual score?

Cybersecurity Jobs: Cloud Security Analyst (Japanese)

~ 1 Jun 2023 ~

Deployed publicly accessible MOVEit Transfer? Oh no. Mass exploitation underway

Kremlin claims Apple helped NSA spy on diplomats via iPhone backdoor

DNB Strengthens its Network Security Posture and Productivity With Ericsson Security Manager Solution

Cyversity and United Airlines to Provide Cybersecurity Training Scholarships to Cyversity Members

Kaspersky Says New Zero-Day Malware Hit iPhonesIncluding Its Own

Tel Aviv Stock Exchange Selects CardinalOps to Reduce Risk of Breaches Due to Undetected Attacks

Amazon Pays $30.8M to Settle Ring Spying & Alexa Privacy Lawsuits

Jetpack WordPress Plug-in API Bug Triggers Mass Updates

How Do I Reduce Security Tool Sprawl in My Environment?

Sustained 'Red Deer' Phishing Attacks Impersonate Israel Post, Drop RATs

Google Drive Deficiency Allows Attackers to Exfiltrate Workspace Data Without a Trace

Where SBOMs Stand Today

Novel PyPI Malware Uses Compiled Python Bytecode to Evade Detection

The downside of frenemies

Ask Fitis, the Bear: Real Crooks Sign Their Malware

Evasive QBot Malware Leverages Short-lived Residential IPs for Dynamic Attacks

Biometric Bypass: BrutePrint Makes Short Work of Fingerprint Security

New Zero-Click Hack Targets iOS Users with Stealthy Root-Privilege Malware

Unmasking XE Group: Experts Reveal Identity of Suspected Cybercrime Kingpin

SolarWinds Transforms Brand to Signify Ongoing Evolution, Portfolio Expansion, and Customer Empowerment

Top macOS Malware Threats Proliferate: Here Are 6 to Watch

Dark Reading Launches Inaugural CISO Advisory Board

Operation Triangulation: iOS devices targeted with previously unknown malware

Malicious PyPI Packages Using Compiled Python Code to Bypass Detection

HID Global SAFE

Advantech WebAccess/SCADA

How Wazuh Improves IT Hygiene for Cyber Security Resilience

On the Catastrophic Risk of AI

All eyes on APIs: Top 3 API security risks and how to mitigate them

Improved BlackCat Ransomware Strikes with Lightning Speed and Stealthy Tactics

N. Korean ScarCruft Hackers Exploit LNK Files to Spread RokRAT

Amazon Ring, Alexa accused of every nightmare IoT security fail you can imagine

Ukraine war blurs lines between cyber-crims and state-sponsored attackers

Active Mirai Botnet Variant Exploiting Zyxel Devices for DDoS Attacks

Urgent WordPress Update Fixes Critical Flaw in Jetpack Plugin on Million of Sites

Dark Pink cyber-spies add info stealers to their arsenal, notch up more victims

Women in Cybersecurity (WiCyS) Joins Forces with SANS Security Awareness

~ 31 May 2023 ~

Feds, you'll need a warrant for that cellphone border search

Meet Charlotte, CrowdStrike's New Generative AI Assistant

Yet Another Toyota Cloud Data Breach Jeopardizes Thousands of Customers

Can Cloud Services Encourage Better Login Security? Netflix's Accidental Model

MacOS 'Migraine' Bug: Big Headache for Device System Integrity

Ways to Help Cybersecurity's Essential Workers Avoid Burnout

What Apple's RSRs Reveal About Mac Patch Management

Barracuda Email Security Gateways bitten by data thieves

Criminals spent 10 days in US dental insurer's systems extracting data of 9 million

Investment May Be Down, but Cybersecurity Remains a Hot Sector

Apple's iOS 16.5 Fixes 3 Security Bugs Already Used in Attacks

Checkmarx Announces GenAI-powered AppSec Platform, Empowering Developers and AppSec Teams to Find and Fix Vulnerabilities Faster

New eID Scheme Gives EU Citizens Easy Access to Public Services Online

XDR meets IAM: Comprehensive identity threat detection and response with Microsoft

Cybercriminals Targeting Apache NiFi Instances for Cryptocurrency Mining

Mirai Variant Opens Tenda, Zyxel Gear to RCE, DDoS

Chinese Hacking of US Critical Infrastructure

Focus Security Efforts on Choke Points, Not Visibility

XFS bug in Linux kernel 6.3.3 coincides with SGI code comeback

Critical Firmware Backdoor in Gigabyte Systems Exposes ~7 Million Devices

When the popular safeguarding tool is anything but