Port 22

~ 27 Apr 2023 ~

Microsoft is busy rewriting core Windows library code in memory-safe Rust

'Anonymous Sudan' Claims Responsibility for DDoS Attacks Against Israel

Threat Actor Names Proliferate, Adding Confusion

Lazarus, Scarcruft North Korean APTs Shift Tactics, Thrive

China's 'Evasive Panda' Hijacks Software Updates to Deliver Custom Backdoor

SANS Reveals Top 5 Most Dangerous Cyberattacks for 2023

The White House National Cybersecurity Strategy Has a Fatal Flaw

NSA Cybersecurity Director Says Buckle Upfor Generative AI

Why you should practice rollbacks to prevent data loss in a ransomware attack

Continuous Scanning Is Imperative for Effective Web Application Security

Google Gets Court Order to Take Down CryptBot That Infected Over 670,000 Computers

Combating Kubernetes the Newest IAM Challenge

Paperbug Attack: New Politically-Motivated Surveillance Campaign in Tajikistan

Security Risks of AI

Tenable Makes Generative AI Security Tools Available to the Research Community

LimeRAT Malware Analysis: Extracting the Config

Brace Yourself for the 2024 Deepfake Election

RTM Locker's First Linux Ransomware Strain Targeting NAS and ESXi Hosts

APT trends report Q1 2023

Microsoft Confirms PaperCut Servers Used to Deliver LockBit and Cl0p Ransomware

~ 26 Apr 2023 ~

Google 2FA Syncing Feature Could Put Your Privacy at Risk

Microsoft probes complaints of Edge leaking URLs to Bing

BigID and Thales Collaborate to Deliver Comprehensive Data Protection and Privacy Compliance

A US Bill Would Ban Kids Under 13 From Joining Social Media

DoJ, Treasury accuses 3 men of laundering crypto for North Korea

Linux Shift: Chinese APT Alloy Taurus Is Back With Retooling

High-Severity SLP Flaw Can Amplify DDoS Attacks up to 2,200 Times

CyberGRX Announces Winners of the Inaugural Cyber Risk Nation Awards

Healthy security habits to fight credential breaches: Cyberattack Series

Chinese Hackers Spotted Using Linux Variant of PingPull in Targeted Cyberattacks

Metaverse Version of the Dark Web Could be Nearly Impenetrable

RSA Conference 2023 How AI will infiltrate the world

FAQ: A comparison of search censorship in China

Missing Links: A comparison of search censorship in China

Effects of the Hive Ransomware Group Takedown

Charming Kitten's New BellaCiao Malware Discovered in Multi-Country Attacks

Malware-Free Cyberattacks Are On the Rise; Here's How to Detect Them

Chinese Hackers Using MgBot Malware to Target International NGOs in Mainland China

Browser Security Survey: 87% of SaaS Adopters Exposed to Browser-borne Attacks

AI to Aid Democracy

Evasive Panda APT group delivers malware via updates for popular Chinese software

Apache Superset Vulnerability: Insecure Default Configuration Exposes Servers to RCE Attacks

The good, the bad and the generative AI

VMware Releases Critical Patches for Workstation and Fusion Software

The game of CLUE

CISOs Rethink Data Security with Info-Centric Framework

~ 25 Apr 2023 ~

Datadog's 2023 State of Application Security Report Presents Top AppSec Trends

Dig Security Announces New Integration With CrowdStrike

Apache Superset: A story of insecure default keys, thousands of vulnerable systems, few paying attention

BlackBerry Extends Partnership With Managed Security Services Provider (MSSP) to Ensure SMBs are Set Up for Cyber Success

AI Experts: Account for AI/ML Resilience & Risk While There's Still Time

Akamai Introduces Prolexic Network Cloud Firewall

Forcepoint Delivers Data Security Everywhere, Extending DLP Policies From Endpoints to the Cloud

NetWitness Partners With Palo Alto Networks, Broadcom to Launch SASE Packet Integrations at RSA Conference 2023

ReliaQuest Adds AI Capabilities to GreyMatter Intelligent Analysis

Vantage Travel Experiences Data Security Incident

'Educated Manticore' Targets Israeli Victims in Improved Phishing Attacks

Menaced by miscreants, critical infrastructure needs a good ETHOS. Ah, here's one

'Good' AI Is the Only Path to True Zero-Trust Architecture

A Security Team Is Turning This Malware Gangs Tricks Against It

Attackers Abuse PaperCut RCE Flaws to Take Over Enterprise Print Servers

DDoS, Not Ransomware, Is Top Business Concern for Edge Networks

The Decline in Ransomware: Does It Actually Increase Risks for Organizations?

Microsoft announces the 2023 Microsoft Security Excellence Awards winners

Googles Authenticator App Now Lets You Sync 2FA Codes Across Devices

HiddenLayer Nabs Most Innovative Startup Crown at RSAC

Building a Better SBOM

New SLP Vulnerability Could Let Attackers Launch 2200x Powerful DDoS Attacks

Iranian Hackers Launch Sophisticated Attacks Targeting Israel with Powerless Backdoor

Scada-LTS Third Party Component

Keysight N8844A Data Analytics Web Service

Modernizing Vulnerability Management: The Move Toward Exposure Management

Lazarus Subgroup Targeting Apple Devices with New RustBucket macOS Malware

Google Cloud Introduces Security AI Workbench for Faster Threat Detection and Analysis

Cyberweapons Manufacturer QuaDream Shuts Down

Google Authenticator App Gets Cloud Backup Feature for TOTP Codes

Google's here to boost your cloud security and the magic ingredient? AI, of course

~ 24 Apr 2023 ~

Millions of Artifacts, Misconfigured Enterprise Software Registries Are Ripe for Pwning

Tangled Up: 'Tomiris' APT Uses Turla Malware, Confusing Researchers

Google Workspace Extends Enterprise-Grade Security and Device Management for Hybrid Work With Okta and VMware

Bot Management Aims to Tame Attacker Automation

Critical Infrastructure Organizations Further Affected in 3CX Breach

Are Low-Code Apps a Ticking Access Control Time-Bomb?

North Korean Foreign Trade Bank Representative Charged in Crypto Laundering Conspiracies

Intel Let Google Cloud Hack Its New Secure Chips and Found 10 Bugs

Stay compliant and protect sensitive data with Zero Trust security

Google Cloud Announces New Security AI Workbench and Ecosystem Expansion at RSAC 2023

Qwiet AI Builds a Neural Net to Catch Coding Vulnerabilities

Getting started with the CDMC frameworkMicrosofts guide to cloud data management

ZeroFox to Acquire LookingGlass, Broadening Global Attack Surface Intelligence Capabilities

Cisco Unveils Solution to Rapidly Detect Advanced Cyber Threats and Automate Response

The New Frontier in Email Security: Goodbye, Gateways; Hello, Behavioral AI

Russian Hackers Tomiris Targeting Central Asia for Intelligence Gathering

Cybersecurity Survival: Hide From Adversarial AI

Ransomware Hackers Using AuKill Tool to Disable EDR Software Using BYOVD Attack

Zimperium Launches Unified Mobile Security Platform for Threat Detection, Visibility, and Response

Rethinking Safer AI: Can There Really Be a 'TruthGPT'?

Palo Alto Networks Takes Aim At Cyberattacks With the Expansion of Unit 42's Digital Forensics & Incident Response Service Globally

New All-in-One "EvilExtractor" Stealer for Windows Systems Surfaces on the Dark Web

CrowdStrike Introduces CrowdStream to Accelerate and Simplify XDR Adoption