Port 22

~ 13 Apr 2023 ~

Pentagon super-leak suspect cuffed: 21-year-old Air National Guardsman

Super-Yacht Specialist Lrssen in Dry Dock After Ransomware Attack

Threat actors strive to cause Tax Day headaches

The Internet Reform Trilemma

RTM Locker: Emerging Cybercrime Group Targeting Businesses with Ransomware

The Hacking of ChatGPT Is Just Getting Started

Majority of US IT Pros Told to Keep Quiet About Data Breaches

Legion Malware Marches onto Web Servers to Steal Credentials, Spam Mobile Users

Improve supply chain security and resiliency with Microsoft

How to Define Tier-Zero Assets in Active Directory Security

WhatsApp Introduces New Device Verification Feature to Prevent Account Takeover Attacks

Bypassing a Theft Threat Model

Why Shadow APIs are More Dangerous than You Think

Pakistan-based Transparent Tribe Hackers Targeting Indian Educational Institutions

Lazarus Hacker Group Evolves Tactics, Tools, and Targets in DeathNote Campaign

Uncommon infection methodspart 2

ChatGPT Security: OpenAI's Bug Bounty Program Offers Up to $20,000 Prizes

Google Tackles Open Source Security With New Dependency Service

~ 12 Apr 2023 ~

How insecure is America's FirstNet emergency response system? No one's sure

FBI: How fake Xi cops prey on Chinese nationals in the US

Menlo Security Illustrates Importance of Browser Security as 4 in 5 Ransomware Attacks Include Threats Beyond Data Encryption

VulnCheck Named CVE Numbering Authority for Common Vulnerabilities and Exposures

Report Reveals ChatGPT Already Involved in Data Leaks, Phishing Scams & Malware Infections

Leaked Pentagon Documents May Herald a New Era of Revelations

(ISC) Certified in Cybersecurity Earns ANAB Accreditation to ISO 17024 and Surpasses 15,000 Certification Holders

Lazarus Group's 'DeathNote' Cluster Pivots to Defense Sector

When Banking Laws Don't Protect Consumers From Cybertheft

Opera Adds Free VPN to Opera for iOS

FBI & FCC Warn on 'Juice Jacking' at Public Chargers, but What's the Risk?

Data on 400K Kodi Forum Members Stolen and Put Up for Sale

Microsoft: NSO Group-Like 'QuaDream' Actor Selling Mobile Spyware to Governments

Survey Findings Show Link Between Data Silos and Security Vulnerabilities

Gartner: Human-Centric Design Is Top Cybersecurity Trend for 2023

CrowdStrike Expands Falcon to Include IoT

LinkedIn Verification Now Lets You Verify Your Job and Account

LastPass Breach Reveals Important Lessons

1M+ WordPress Sites Hacked via Zero-Day Plug-in Bugs

LinkedIn and Microsoft Entra introduce a new way to verify your workplace

Israel-based Spyware Firm QuaDream Targets High-Risk iPhones with Zero-Click Exploit

The Service Accounts Challenge: Can't See or Secure Them Until It's Too Late

FBI Advising People to Avoid Public Charging Stations

What are the cybersecurity concerns of SMBs by sector?

Mission possible

Following the Lazarus group by tracking DeathNote campaign

Urgent: Microsoft Issues Patches for 97 Flaws, Including Active Ransomware Exploit

3CX teases security-focused client update, plus password hashing

Lazarus Sub-Group Labyrinth Chollima Uncovered as Mastermind in 3CX Supply Chain Attack

US cyber chiefs warn AI will help crooks, China develop nastier cyberattacks faster

SANS FOR498: Digital Acquisition & Rapid Triage

Details Matter

Another zero-click Apple spyware maker just popped up on the radar again

Microsoft (& Apple) Patch Tuesday, April 2023 Edition

~ 11 Apr 2023 ~

April Patch Tuesday: Ransomware gangs already exploiting this Windows bug

Microsoft Patches 97 CVEs, Including Zero-Day & Wormable Bugs

Microsoft Azure Shared Key Misconfiguration Could Lead to RCE

'Blatantly Obvious': Spyware Offered to Cyberattackers via PyPI Python Repository

Nokoyawa ransomware attacks with Windows zero-day

Where Are the Women? Making Cybersecurity More Inclusive

Guidance for investigating attacks using CVE-2022-21894: The BlackLotus campaign

7 Things Your Ransomware Response Playbook Is Likely Missing

DEV-0196: QuaDreams KingsPawn malware used to target civil society in Europe, North America, the Middle East, and Southeast Asia

Sweet QuaDreams: A First Look at Spyware Vendor QuaDreams Exploits, Victims, and Customers

Attackers Hide RedLine Stealer Behind ChatGPT, Google Bard Facebook Ads

How Password Managers Can Get Hacked

How CIEM Can Improve Identity, Permissions Management for Multicloud Deployments