Port 22

~ 24 Apr 2023 ~

That 3CX supply chain attack keeps getting worse: More victims found

Chinese scientists calculate the Milky Way's mass as 805 billion times that of our Sun

~ 23 Apr 2023 ~

Hacker Group Names Are Now Absurdly Out of Control

~ 22 Apr 2023 ~

Criminals Are Using Tiny Devices to Hack and Steal Cars

European air traffic control confirms website 'under attack' by pro-Russia hackers

Lazarus X_TRADER Hack Impacts Critical Infrastructure Beyond 3CX Breach

CISA Adds 3 Actively Exploited Flaws to KEV Catalog, including Critical PaperCut Bug

~ 21 Apr 2023 ~

Microsoft pushes for more women in cybersecurity

Friday Squid Blogging: More on Squid Fishing

Shields Health Breach Exposes 2.3M Users' Data

North Korea's Kimsuky APT Keeps Growing, Despite Public Outing

EvilExtractor Infostealer Campaign Targeting Windows OS

Intel Prioritizes Security in Latest vPro Chips

Hacking Pickleball

Shadow IT, SaaS Pose Security Liability for Enterprises

Using the iPhone Recovery Key to Lock Owners Out of Their iPhones

The Tangled Web of IR Strategies

Kubernetes RBAC Exploited in Large-Scale Campaign for Cryptocurrency Mining

GhostToken Flaw Could Let Attackers Hide Malicious Apps in Google Cloud Platform

14 Kubernetes and Cloud Security Challenges and How to Solve Them

The War on Passwords Enters a Chaotic New Phase

International cops urge Meta <em>not</em> to implement secure encryption for all

Did you mistakenly sell your network access? Week in security with Tony Anscombe

N.K. Hackers Employ Matryoshka Doll-Style Cascading Supply Chain Attack on 3CX

Healthcare organisations urged to improve system security

Thanks for fixing the computer lab. Now tell us why we shouldnt expel you?

Cisco and VMware Release Security Updates to Patch Critical Flaws in their Products

3CX Breach Was a Double Supply Chain Compromise

Ransomware: Every internet-connected network is at risk. Be prepared!

~ 20 Apr 2023 ~

Infoblox Uncovers DNS Malware Toolkit & Urges Companies to Block Malicious Domains

Bitsight Expands into Integrated Cyber-Risk Management

'GhostToken' Opens Google Accounts to Permanent Infection

OpenSSF Adds Software Supply Chain Tracks to SLSA Framework

New Policy Group Wants to Improve Cybersecurity Disclosure, Support Researchers

Red Canary Announces Readiness

3CX Supply Chain Attack Tied to Financial Trading App Breach

Major US CFPB Data Breach Caused by Employee

Trigona Ransomware Trolling for 'Poorly Managed' MS-SQL Servers

Twitter's 2FA Policy Is a Call for Passkey Disruption

Microsoft Entra delivers 240 percent ROI, according to new Forrester study

'AuKill' Malware Hunts & Kills EDR Processes

Global Spyware Attacks Spotted Against Both New & Old iPhones

Tech Insight: Dangers of Using Large Language Models Before They Are Baked

GPT-4 Provides Improved Answers While Posing New Questions

Two Critical Flaws Found in Alibaba Cloud's PostgreSQL Databases

Capita has 'evidence' customer data was stolen in digital burglary

An earlier supply chain attack led to the 3CX supply chain attack, Mandiant says

The Huge 3CX Breach Was Actually 2 Linked Supply Chain Attacks

Newer Authentication Tech a Priority for 2023

Lazarus Group Adds Linux Malware to Arsenal in Operation Dream Job

Beyond Traditional Security: NDR's Pivotal Role in Safeguarding OT Networks

Fortra Sheds Light on GoAnywhere MFT Zero-Day Exploit Used in Ransomware Attacks

ChatGPT's Data Protection Blind Spots and How Security Teams Can Solve Them

New Zero-Click Exploits Against iOS

Daggerfly Cyberattack Campaign Hits African Telecom Services Providers

NSO Group Used 3 Zero-Click iPhone Exploits Against Human Rights Defenders

Linux malware strengthens links between Lazarus and the 3CX supplychain attack

AI defenders ready to foil AI-armed attackers

Protect the Industrial Control Systems (ICS)

How to Build AI-Powered Cybersecurity Applications

Cloud Agnostic or Devout?

~ 19 Apr 2023 ~

Medusa ransomware crew brags about spreading Bing, Cortana source code

Appeals court spares Google from $20m patent payout over Chrome sandbox

Killnet Boss Exposes Rival Leader in Kremlin Hacktivist Beef

Russian Fancy Bear APT Exploited Unpatched Cisco Routers to Hack US, EU Gov't Agencies