Port 22

~ 31 May 2023 ~

Chinese Hacking of US Critical Infrastructure

Focus Security Efforts on Choke Points, Not Visibility

XFS bug in Linux kernel 6.3.3 coincides with SGI code comeback

Critical Firmware Backdoor in Gigabyte Systems Exposes ~7 Million Devices

When the popular safeguarding tool is anything but

Salesforce 'Ghost Sites' Expose Sensitive Corporate Data

Millions of Gigabyte Motherboards Were Sold With a Firmware Backdoor

Beware of Ghost Sites: Silent Threat Lurking in Your Salesforce Communities

Microsoft Details Critical Apple macOS Vulnerability Allowing SIP Protection Bypass

6 Steps to Effective Threat Hunting: Safeguard Critical Assets and Fight Cybercrime

5 free OSINT tools for social media

Thinking straight in the SoC: How AI erases cognitive bias

Dark Pink APT Group Leverages TelePowerBot and KamiKakaBot in Sophisticated Attacks

RomCom RAT Using Deceptive Web of Rogue Software Sites for Covert Attacks

Alert: Hackers Exploit Barracuda Email Security Gateway 0-Day Flaw for 7 Months

Spotlight on 2023 Dan Kaminsky Fellow: Dr. Gus Andrews

Discord Admins Hacked by Malicious Bookmarks

~ 30 May 2023 ~

1. This crypto-coin is called Jimbo. 2. $8m was stolen from its devs in flash loan attack

90+ orgs tell Slack to stop slacking when it comes to full encryption

Human-Assisted CAPTCHA-Cracking Services Supercharge Shopper Bots

421M Spyware Apps Downloaded Through Google Play

Pegasus-pusher NSO gets new owner keen on the commercial spyware biz

Undetected Attacks Against Middle East Targets Conducted Since 2020

9M Dental Patients Affected by LockBit Attack on MCNA

New macOS vulnerability, Migraine, could bypass System Integrity Protection

Pentagon Leaks Emphasize the Need for a Trusted Workforce

Hackers Win $105,000 for Reporting Critical Security Flaws in Sonos One Speakers

CAPTCHA-Breaking Services with Human Solvers Helping Cybercriminals Defeat Security

Advantech WebAccess/SCADA

Implementing Risk-Based Vulnerability Discovery and Remediation

Brute-Forcing a Fingerprint Reader

Tricks of the trade: How a cybercrime ring operated a multilevel fraud scheme

Sneaky DogeRAT Trojan Poses as Popular Apps, Targets Indian Android Users

~ 29 May 2023 ~

New BrutePrint Attack Lets Attackers Unlock Smartphones with Fingerprint Brute-Force

Top Cyberattacks Revealed in New Threat Intelligence Report

AceCryptor: Cybercriminals' Powerful Weapon, Detected in 240K+ Attacks

3 Challenges in Building a Continuous Threat Exposure Management (CTEM) Program and How to Beat Them

New GobRAT Remote Access Trojan Targeting Linux Routers in Japan

Don't Click That ZIP File! Phishers Weaponizing .ZIP Domains to Trick Victims

New York county still dealing with ransomware eight months after attack

PyPI Implements Mandatory Two-Factor Authentication for Project Owners

~ 28 May 2023 ~

padre Padding Oracle Attack Exploiter Tool

~ 27 May 2023 ~

Netflixs Password-Sharing Crackdown Has Hit the US

New Stealthy Bandit Stealer Targeting Web Browsers and Cryptocurrency Wallets

Critical OAuth Vulnerability in Expo Framework Allows Account Hijacking

Alien versus Predator? No, this Android spyware works together

~ 26 May 2023 ~

Friday Squid Blogging: Online Cephalopod Course

US govt pushes spyware to other countries? Senator Wyden would like a word

2 Lenses for Examining the Safety of Open Source Software

130K+ Patients' Social Security Numbers Leaked in UHS of Delaware Data Breach

Tesla Whistleblower Leaks 100GB of Data, Revealing Safety Complaints

Travel-Themed Phishing, BEC Campaigns Get Smarter as Summer Season Arrives

Phishing Domains Tanked After Meta Sued Freenom

Severe Flaw in Google Cloud's Cloud SQL Service Exposed Confidential Data

How an innocuous app morphed into a trojan Week in security with Tony Anscombe

How an innocuous app morphed into a trojan Week in security with Tony Anscombe

How Safe Is Your Wearable Device?

Predator Android Spyware: Researchers Sound the Alarm on Alarming Capabilities

5 Must-Know Facts about 5G Network Security and Its Cloud Benefits

Expeditionary Cyberspace Operations

New COSMICENERGY Malware Exploits ICS Protocol to Sabotage Power Grids

Barracuda Warns of Zero-Day Exploited to Breach Email Security Gateway Appliances

BlackByte ransomware crew lists city of Augusta after cyber 'incident'

Cybersecurity Jobs: Technical Director (Japanese)

A Visual Summary of SANS AI Cybersecurity Summit 2023

It's 2023 and Sri Lanka doesn't have a cyber security authority

Russia's War in Ukraine Shows Cyberattacks Can Be War Crimes

~ 25 May 2023 ~

'Volt Typhoon' Breaks Fresh Ground for China-Backed Cyber Campaigns

Red Hat Tackles Software Supply Chain Security

CosmicEnergy Malware Emerges, Capable of Electric Grid Shutdown

Lazarus Group Striking Vulnerable Windows IIS Web Servers

Spotted: Suspected Russian malware designed to disrupt Euro, Asia energy grids

Netflix's Password-Sharing Ban Offers Security Upsides

Bcrypt, a Popular Password Hashing Algorithm, Starts Its Long Goodbye

Perception Point Report Finds That Advanced Phishing Attacks Grew by 356% in 2022

Memcyco Delivers Real-Time Brandjacking Detection and Protection Solution

Bank of Ghana Opens SOC to Enable Threat Intelligence Sharing

'Operation Magalenha' Attacks Gives Window Into Brazil's Cybercrime Ecosystem

Dark Frost Botnet Launches Devastating DDoS Attacks on Gaming Industry

Zyxel Issues Critical Security Patches for Firewall and VPN Products

So the FBI 'persistently' abused its snoop powers. What's to worry about?

Google Cloud Bug Allows Server Takeover From CloudSQL Service

Dangerous Regions: Isolating Branch Offices in High-Risk Countries

Cynet Protects Hospital From Lethal Infection

New PowerExchange Backdoor Used in Iranian Cyber Attack on UAE Government

CISO Criminalization, Vague Cyber Disclosure Rules Create Angst for Security Teams

Moxa MXsecurity Series

Alert: Brazilian Hackers Targeting Users of Over 30 Portuguese Banks

On the Poisoning of LLMs

Webinar with Guest Forrester: Browser Security New Approaches

Buhti Ransomware Gang Switches Tactics, Utilizes Leaked LockBit and Babuk Code

Facial recog system used by Met Police shows racial bias at low thresholds

Confirmation & Research Note 1: Pegasus infections in Armenian Civil Society

Shedding light on AceCryptor and its operation

China's Stealthy Hackers Infiltrate U.S. and Guam Critical Infrastructure Undetected

Iranian Agrius Hackers Targeting Israeli Organizations with Moneybird Ransomware

The Security Hole at the Heart of ChatGPT and Bing

GUAC 0.1 Beta: Google's Breakthrough Framework for Secure Software Supply Chains

Five Eyes and Microsoft accuse China of attacking US infrastructure again

~ 24 May 2023 ~

This legit Android app turned into audio-snooping malware and Google missed it