Port 22

~ 9 Mar 2023 ~

Malvertising through search engines

New ScrubCrypt Crypter Used in Cryptojacking Attacks Targeting Oracle WebLogic

New Critical Flaw in FortiOS and FortiProxy Could Give Hackers Remote Access

Suspected Chinese cyber spies target unpatched SonicWall devices

Dems, Repubs eye up ban on chat apps they don't like

~ 8 Mar 2023 ~

'Skinny' Cyber Insurance Policies Create Compliance Path

Edgeless Systems Raises $5M to Advance Confidential Computing

Emotet Resurfaces Yet Again After 3-Month Hiatus

TSA Issues Urgent Directive to Make Aviation More Cyber Resilient

40% of Global ICS Systems Attacked With Malware in 2022

Legal Industry Faces Double Jeopardy as a Favorite Cybercrime Target

The FBI Just Admitted It Bought US Location Data

Russian Influence Duo Targets Politicians, CEOs for Embarrassing Video Calls

International Womens Day: The power of diversity to build stronger cybersecurity teams

AI-Powered 'BlackMamba' Keylogging Attack Evades Modern EDR Security

Jenkins Security Alert: New Security Flaws Could Allow Code Execution Attacks

The US Air Force Is Moving Fast on AI-Piloted Fighter Jets

Lacework Launches Secured by Women Initiative

Surge in Cloud Adoption Means a Greater Data Attack Surface for Healthcare and Financial Services

Rising Public Cloud Adoption Is Accelerating Shadow Data Risks

Syxsense Platform: Unified Security and Endpoint Management

BlackLotus Malware Hijacks Windows Secure Boot Process

Lazarus Group Exploits Zero-Day Vulnerability to Hack South Korean Financial Entity

A woman from Mars: Life in the pursuit of space exploration

The state of stalkerware in 2022

Securing ways to share workplace passwords

Sharp Panda Using New Soul Framework Version to Target Southeast Asian Governments

CISA's KEV Catalog Updated with 3 New Flaws Threatening IT Management Systems

Boeing signs off anti-jamming tech that keeps satellites online

Aussie tech worker payroll scheme operators found guilty of tax fraud

Acer confirms server intrusion after miscreant offers 160GB cache of stolen files

Tech Giants Go Cloud-Native Shopping

These DrayTek routers are under actual attack and there's no patch

~ 7 Mar 2023 ~

Sued by Meta, Freenom Halts Domain Registrations

Akamai Technologies Releases New Service and Tools to Stop Advanced Threats and Drive Zero Trust Adoption

Hiatus Campaign Infects DrayTek Routers for Cyber Espionage, Proxy Control

Acer Confirms Data Offered Up for Sale Was Stolen

Hacker Cracks Toyota Customer Search Tool

ManageEngine Launches Security and Risk Posture Management in its SIEM Solution

Employees Are Feeding Sensitive Biz Data to ChatGPT, Raising Security Fears

Scams Security Pros Almost Fell For

99% of Cybersecurity Leaders Are Stressed About Email Security

Palo Alto Survey Reveals 90% of Organizations Cannot Resolve Cyberthreats Within an Hour

Get integrated Microsoft Purview Information Protection in Adobe Acrobatnow available

Remcos RAT Spyware Scurries Into Machines via Cloud Servers

Delinea Adds New features for its Privilege Manager and DevOps Secrets Vault

Key Proposals in Biden's Cybersecurity Strategy Face Congressional Challenges

Ransomware's Favorite Target: Critical Infrastructure and Its Industrial Control Systems

Optiv Launches Full Suite of Operational Technology Services

Cyber Security Works to Rebrand As Securin Inc.

SYS01stealer: New Threat Using Facebook Ads to Target Critical Infrastructure Firms

Prompt Injection Attacks on Large Language Models

How Denmarks Welfare State Became a Surveillance Nightmare

Transparent Tribe Hackers Distribute CapraRAT via Trojanized Messaging Apps

Why Healthcare Can't Afford to Ignore Digital Identity

Love scam or espionage? Transparent Tribe lures Indian and Pakistani officials

Pro-Putin scammers trick politicians and celebrities into low-tech hoax video calls

Shein's Android App Caught Transmitting Clipboard Data to Remote Servers

LastPass Hack: Engineer's Failure to Update Plex Software Led to Massive Data Breach

Machine Learning Improves Prediction of Exploited Vulnerabilities

~ 6 Mar 2023 ~

EPA orders US states to check cybersecurity of public water supplies

DoppelPaymer ransomware suspects cuffed, alleged ringleaders escape

Shein Shopping App Glitch Copies Android Clipboard Contents

Police Raid Rounds Up Core Members of DoppelPaymer Ransomware Gang

NIST's Quantum-Proof Algorithm Has a Bug, Analysts Say

SANS Institute Partners With Google to Launch Cloud Diversity Academy

Protecting Android clipboard content from unintended exposure

The Role of Verifiable Credentials In Preventing Account Compromise

Name That Edge Toon: Domino Effect

New HiatusRAT Malware Targets Business-Grade Routers to Covertly Spy on Victims

From Disinformation to Deep Fakes: How Threat Actors Manipulate Reality

Core Members of DoppelPaymer Ransomware Gang Targeted in Germany and Ukraine

New National Cybersecurity Strategy

This Algorithm Could Ruin Your Life

Experts Reveal Google Cloud Platform's Blind Spot for Data Exfiltration Attacks

Threat landscape for industrial automation systems for H2 2022

Experts Discover Flaw in U.S. Govt's Chosen Quantum-Resistant Encryption Algorithm

Where are the women in cyber security? On the dark side, study suggests

~ 5 Mar 2023 ~

A Privacy Hero's Final Wish: An Institute to Redirect AI's Future

~ 4 Mar 2023 ~

The LastPass Hack Somehow Gets Worse

What to Do When Your Boss Is Spying on You

The High-Stakes Blame Game in the White House Cybersecurity Plan

Security and IT Teams No Longer Need To Pay For SaaS-Shadow IT Discovery

New FiXS ATM Malware Targeting Mexican Banks

Secret Service, ICE break the law over and over with fake cell tower spying

Rapid7 Brings Threat Intel Data to USF Cybersecurity Lab

Snap CISO: I rate software supply chain risk 9.9 out of 10

~ 3 Mar 2023 ~

Friday Squid Blogging: Were Almost at Flying Squid Drones

FTC: BetterHelp pushed users to share mental health info then gave it to Facebook

EV Charging Infrastructure Offers an Electric Cyberattack Opportunity

Indigo Books Refuses LockBit Ransomware Demand

Polish Politician's Phone Patrolled by Pegasus

Frankenstein malware stitched together from code of others disguised as PyPI package

3 Ways Security Teams Can Use IP Data Context

Chick-fil-A Gives Customers a Bone to Pick After Data Breach

Nick Weaver on Regulating Cryptocurrency

It's Time to Assess the Potential Dangers of an Increasingly Connected World

What does $5,000 buy you on a hacking forum? Week in security with Tony Anscombe

The Sketchy Plan to Build a Russian Android Phone

Warning on SolarWinds-like supply-chain attacks: 'They're just getting bigger'