Port 22

~ 24 Apr 2023 ~

Intel Let Google Cloud Hack Its New Secure Chips and Found 10 Bugs

Stay compliant and protect sensitive data with Zero Trust security

Google Cloud Announces New Security AI Workbench and Ecosystem Expansion at RSAC 2023

Qwiet AI Builds a Neural Net to Catch Coding Vulnerabilities

Getting started with the CDMC frameworkMicrosofts guide to cloud data management

ZeroFox to Acquire LookingGlass, Broadening Global Attack Surface Intelligence Capabilities

Cisco Unveils Solution to Rapidly Detect Advanced Cyber Threats and Automate Response

The New Frontier in Email Security: Goodbye, Gateways; Hello, Behavioral AI

Russian Hackers Tomiris Targeting Central Asia for Intelligence Gathering

Cybersecurity Survival: Hide From Adversarial AI

Ransomware Hackers Using AuKill Tool to Disable EDR Software Using BYOVD Attack

Zimperium Launches Unified Mobile Security Platform for Threat Detection, Visibility, and Response

Rethinking Safer AI: Can There Really Be a 'TruthGPT'?

Palo Alto Networks Takes Aim At Cyberattacks With the Expansion of Unit 42's Digital Forensics & Incident Response Service Globally

New All-in-One "EvilExtractor" Stealer for Windows Systems Surfaces on the Dark Web

CrowdStrike Introduces CrowdStream to Accelerate and Simplify XDR Adoption

Study: 84% of Companies Use Breached SaaS Applications - Here's How to Fix it for Free!

Hackers Exploit Outdated WordPress Plugin to Backdoor Thousands of WordPress Sites

If you haven't patched Microsoft Process Explorer, prepare to get pwned

How fiends abuse an out-of-date Microsoft Windows driver to infect victims

UK Threatens End-to-End Encryption

Tomiris called, they want their Turla malware back

Russian Hackers Suspected in Ongoing Exploitation of Unpatched PaperCut Servers

That 3CX supply chain attack keeps getting worse: More victims found

Chinese scientists calculate the Milky Way's mass as 805 billion times that of our Sun

~ 23 Apr 2023 ~

Hacker Group Names Are Now Absurdly Out of Control

~ 22 Apr 2023 ~

Criminals Are Using Tiny Devices to Hack and Steal Cars

European air traffic control confirms website 'under attack' by pro-Russia hackers

Lazarus X_TRADER Hack Impacts Critical Infrastructure Beyond 3CX Breach

CISA Adds 3 Actively Exploited Flaws to KEV Catalog, including Critical PaperCut Bug

~ 21 Apr 2023 ~

Microsoft pushes for more women in cybersecurity

Friday Squid Blogging: More on Squid Fishing

Shields Health Breach Exposes 2.3M Users' Data

North Korea's Kimsuky APT Keeps Growing, Despite Public Outing

EvilExtractor Infostealer Campaign Targeting Windows OS

Intel Prioritizes Security in Latest vPro Chips

Hacking Pickleball

Shadow IT, SaaS Pose Security Liability for Enterprises

Using the iPhone Recovery Key to Lock Owners Out of Their iPhones

The Tangled Web of IR Strategies

Kubernetes RBAC Exploited in Large-Scale Campaign for Cryptocurrency Mining

GhostToken Flaw Could Let Attackers Hide Malicious Apps in Google Cloud Platform

Did you mistakenly sell your network access? Week in security with Tony Anscombe

14 Kubernetes and Cloud Security Challenges and How to Solve Them

The War on Passwords Enters a Chaotic New Phase

International cops urge Meta <em>not</em> to implement secure encryption for all

Did you mistakenly sell your network access? Week in security with Tony Anscombe

N.K. Hackers Employ Matryoshka Doll-Style Cascading Supply Chain Attack on 3CX

Healthcare organisations urged to improve system security

Thanks for fixing the computer lab. Now tell us why we shouldnt expel you?

Cisco and VMware Release Security Updates to Patch Critical Flaws in their Products

3CX Breach Was a Double Supply Chain Compromise

Ransomware: Every internet-connected network is at risk. Be prepared!

~ 20 Apr 2023 ~

Infoblox Uncovers DNS Malware Toolkit & Urges Companies to Block Malicious Domains

Bitsight Expands into Integrated Cyber-Risk Management

'GhostToken' Opens Google Accounts to Permanent Infection

OpenSSF Adds Software Supply Chain Tracks to SLSA Framework

New Policy Group Wants to Improve Cybersecurity Disclosure, Support Researchers

Red Canary Announces Readiness

3CX Supply Chain Attack Tied to Financial Trading App Breach

Major US CFPB Data Breach Caused by Employee

Trigona Ransomware Trolling for 'Poorly Managed' MS-SQL Servers

Twitter's 2FA Policy Is a Call for Passkey Disruption

Microsoft Entra delivers 240 percent ROI, according to new Forrester study

'AuKill' Malware Hunts & Kills EDR Processes

Global Spyware Attacks Spotted Against Both New & Old iPhones

Tech Insight: Dangers of Using Large Language Models Before They Are Baked

GPT-4 Provides Improved Answers While Posing New Questions

Two Critical Flaws Found in Alibaba Cloud's PostgreSQL Databases

Capita has 'evidence' customer data was stolen in digital burglary

An earlier supply chain attack led to the 3CX supply chain attack, Mandiant says

The Huge 3CX Breach Was Actually 2 Linked Supply Chain Attacks

Newer Authentication Tech a Priority for 2023

INEA ME RTU

Lazarus Group Adds Linux Malware to Arsenal in Operation Dream Job

Beyond Traditional Security: NDR's Pivotal Role in Safeguarding OT Networks

Fortra Sheds Light on GoAnywhere MFT Zero-Day Exploit Used in Ransomware Attacks

ChatGPT's Data Protection Blind Spots and How Security Teams Can Solve Them

New Zero-Click Exploits Against iOS

Daggerfly Cyberattack Campaign Hits African Telecom Services Providers

NSO Group Used 3 Zero-Click iPhone Exploits Against Human Rights Defenders

Linux malware strengthens links between Lazarus and the 3CX supplychain attack

AI defenders ready to foil AI-armed attackers

Protect the Industrial Control Systems (ICS)

How to Build AI-Powered Cybersecurity Applications

Cloud Agnostic or Devout?

~ 19 Apr 2023 ~

Medusa ransomware crew brags about spreading Bing, Cortana source code

Appeals court spares Google from $20m patent payout over Chrome sandbox

Killnet Boss Exposes Rival Leader in Kremlin Hacktivist Beef

Russian Fancy Bear APT Exploited Unpatched Cisco Routers to Hack US, EU Gov't Agencies

7 Sizzling Sessions to Check Out at RSA Conference 2023

Spyware slinger QuaDreams reported demise may be the canary in the coal mine

Coro Raises an Additional $75M Bringing the Total Raised to $155M in 12 Months

CrowdStrike Announces Managed XDR to Close the Cybersecurity Skills Gap, Expands MDR Portfolio

The Hacker Who Hijacked Matt Walshs Twitter Was Just Bored

GitHub debuts pedigree check for npm packages via Actions

Simplified endpoint management with Microsoft Intune Suite: Adopting a long-term approach with intelligence and automation

Google TAG Warns of Russian Hackers Conducting Phishing Attacks in Ukraine

Gary Bowser, Former Nintendo Hacker, Released From Prison

Blind Eagle Cyber Espionage Group Strikes Again: New Attack Chain Uncovered