Port 22

~ 12 Apr 2023 ~

Urgent: Microsoft Issues Patches for 97 Flaws, Including Active Ransomware Exploit

3CX teases security-focused client update, plus password hashing

Lazarus Sub-Group Labyrinth Chollima Uncovered as Mastermind in 3CX Supply Chain Attack

US cyber chiefs warn AI will help crooks, China develop nastier cyberattacks faster

SANS FOR498: Digital Acquisition & Rapid Triage

Details Matter

Another zero-click Apple spyware maker just popped up on the radar again

Microsoft (& Apple) Patch Tuesday, April 2023 Edition

~ 11 Apr 2023 ~

April Patch Tuesday: Ransomware gangs already exploiting this Windows bug

Microsoft Patches 97 CVEs, Including Zero-Day & Wormable Bugs

Microsoft Azure Shared Key Misconfiguration Could Lead to RCE

Newly Discovered "By-Design" Flaw in Microsoft Azure Could Expose Storage Accounts to Hackers

'Blatantly Obvious': Spyware Offered to Cyberattackers via PyPI Python Repository

Nokoyawa ransomware attacks with Windows zero-day

Where Are the Women? Making Cybersecurity More Inclusive

Guidance for investigating attacks using CVE-2022-21894: The BlackLotus campaign

7 Things Your Ransomware Response Playbook Is Likely Missing

DEV-0196: QuaDreams KingsPawn malware used to target civil society in Europe, North America, the Middle East, and Southeast Asia

Sweet QuaDreams: A First Look at Spyware Vendor QuaDreams Exploits, Victims, and Customers

Attackers Hide RedLine Stealer Behind ChatGPT, Google Bard Facebook Ads

How Password Managers Can Get Hacked

How CIEM Can Improve Identity, Permissions Management for Multicloud Deployments

Israeli Irrigation Water Controllers & Postal Service Breached

Azure admins warned to disable shared key access as backdoor attack detailed

Samsung Engineers Feed Sensitive Data to ChatGPT, Sparking Workplace AI Warnings

How to Use Apples New All-In-One Password Manager

Cybercriminals Turn to Android Loaders on Dark Web to Evade Google Play Security

FANUC ROBOGUIDE-HandlingPRO

[eBook] A Step-by-Step Guide to Cyber Risk Assessment

Car Thieves Hacking the CAN Bus

40% of IT security pros say they've been told not to report a data leak

10 things to look out for when buying a password manager

Cryptocurrency Stealer Malware Distributed via 13 NuGet Packages

Renewed Focus on Incident Response Brings New Competitors and Partnerships

~ 10 Apr 2023 ~

How much to infect Android phones via Google Play store? How about $20k

Inside FTX: Jokes about misplaced funds, diabolical IT, poor oversight, and worse

Apps for Sale: Cybercriminals Sell Android Hacks for Up to $20K a Pop

Apple squashes iOS, macOS zero-day bugs already exploited by snoops

Pair of Apple Zero-Days Under Active Exploit; Patch & Update Accordingly

High-Stakes Ransomware Response: Know What Cards You Hold

Google to kill Dropcam, Nest Secure hardware next year

Russia's Joker DPR Claims Access to Ukraine Troop Movement Data

How and Why to Put Multicloud to Work

Microsoft, Fortra are this fed up with cyber-gangs abusing Cobalt Strike

Rethinking Cybersecurity's Structure & the Role of the Modern CISO

When it comes to technology, securing your future means securing your present

Estonian National Charged in U.S. for Acquiring Electronics and Metasploit Pro for Russian Military

Hackers Flood NPM with Bogus Packages Causing a DoS Attack

Top 10 Cybersecurity Trends for 2023: From Zero Trust to Cyber Insurance

LLMs and Phishing

Over 1 Million WordPress Sites Infected by Balada Injector Malware Campaign

Protecting your business with Wazuh: The open source security platform

Overview of Google Play threats sold on the dark web

CISA Warns of 5 Actively Exploited Security Flaws: Urgent Action Required

Exploring the Dark Side: OSINT Tools and Techniques for Unmasking Dark Web Operations

~ 8 Apr 2023 ~

Taiwanese PC Company MSI Falls Victim to Ransomware Attack

Pinduoduo, a Top Chinese Shopping App, Is Laced With Malware

Iran-Based Hackers Caught Carrying Out Destructive Attacks Under Ransomware Guise

Apple Releases Updates to Address Zero-Day Flaws in iOS, iPadOS, macOS, and Safari

Researchers Discover Critical Remote Code Execution Flaw in vm2 Sandbox Library

~ 7 Apr 2023 ~

MSI hit in cyberattack, warns against installing knock-off firmware

Friday Squid Blogging: Squid Food Poisoning

Almost Half of Former Employees Say Their Passwords Still Work

Welcome to open source, Elon. Your Twitter code just got a CVE for shadow ban bug

Microsoft, Fortra & Health-ISAC Team Up to Remove Illicit Cobalt Strike Tools

TikTok, Other Mobile Apps Violate Privacy Regulations

MERCURY and DEV-1084: Destructive attack on hybrid environment

Close the Permissions Gap With Identity And Access Management For Multicloud Workforces

Printers Pose Persistent Yet Overlooked Threat

Bad Actors Will Use Large Language Models but Defenders Can, Too

Cybercriminals 'CAN' Steal Your Car, Using Novel IoT Hack

Researchers Uncover Thriving Phishing Kit Market on Telegram Channels

It's this easy to seize control of someone's Nexx 'smart' home plugs, garage doors

With ICMP magic, you can snoop on vulnerable HiSilicon, Qualcomm-powered Wi-Fi

Microsoft Takes Legal Action to Disrupt Cybercriminals' Illegal Use of Cobalt Strike Tool

Are Source Code Leaks the New Threat Software vendors Should Care About?

Free VPN Amnezia Helps Users Avoid Censorship in Russia

CISA Warns of Critical ICS Flaws in Hitachi, mySCADA, ICL, and Nexx Products

Cybersecurity Jobs: Malware Analyst (Japanese)

~ 6 Apr 2023 ~

Fight AI With AI

Twitter 'Shadow Ban' Bug Gets Official CVE

'BEC 3.0' Is Here With Tax-Season QuickBooks Cyberattacks

DevOps threat matrix

Australia Is Scouring the Earth for Cybercriminals the US Should Too

Steer clear of tax scams Week in security with Tony Anscombe

Secure hybrid and remote workplaces with a Zero Trust approach

It Takes AI Security to Fight AI Cyberattacks

Steer clear of tax scams Week in security with Tony Anscombe

What to Discuss at RSA Conference and It's Not ChatGPT

Styx Marketplace Provides Hub for Financial Cybercrime

So Russia has a stash of scary malware? Imagine our shock

The Pope's Security Gets a Boost With Vatican's MDM Move

The Dangerous Weak Link in the US Food Chain

mySCADA myPRO

Korenix Jetwave

JTEKTELECTRONICS Kostac PLC Programming Software

JTEKT ELECTRONICS Screen Creator Advance 2

Industrial Control Links ScadaFlex II SCADA Controllers

Hitachi Energy MicroSCADA System Data Manager SDM600

Supply Chain Attacks and Critical Infrastructure: How CISA Helps Secure a Nation's Crown Jewels