Port 22

~ 24 Apr 2023 ~

The New Frontier in Email Security: Goodbye, Gateways; Hello, Behavioral AI

Ransomware Hackers Using AuKill Tool to Disable EDR Software Using BYOVD Attack

Zimperium Launches Unified Mobile Security Platform for Threat Detection, Visibility, and Response

Rethinking Safer AI: Can There Really Be a 'TruthGPT'?

Palo Alto Networks Takes Aim At Cyberattacks With the Expansion of Unit 42's Digital Forensics & Incident Response Service Globally

CrowdStrike Introduces CrowdStream to Accelerate and Simplify XDR Adoption

Study: 84% of Companies Use Breached SaaS Applications - Here's How to Fix it for Free!

Hackers Exploit Outdated WordPress Plugin to Backdoor Thousands of WordPress Sites

If you haven't patched Microsoft Process Explorer, prepare to get pwned

How fiends abuse an out-of-date Microsoft Windows driver to infect victims

UK Threatens End-to-End Encryption

Tomiris called, they want their Turla malware back

Russian Hackers Suspected in Ongoing Exploitation of Unpatched PaperCut Servers

That 3CX supply chain attack keeps getting worse: More victims found

Chinese scientists calculate the Milky Way's mass as 805 billion times that of our Sun

~ 23 Apr 2023 ~

Hacker Group Names Are Now Absurdly Out of Control

~ 22 Apr 2023 ~

Criminals Are Using Tiny Devices to Hack and Steal Cars

European air traffic control confirms website 'under attack' by pro-Russia hackers

Lazarus X_TRADER Hack Impacts Critical Infrastructure Beyond 3CX Breach

CISA Adds 3 Actively Exploited Flaws to KEV Catalog, including Critical PaperCut Bug

~ 21 Apr 2023 ~

Microsoft pushes for more women in cybersecurity

Friday Squid Blogging: More on Squid Fishing

Shields Health Breach Exposes 2.3M Users' Data

North Korea's Kimsuky APT Keeps Growing, Despite Public Outing

EvilExtractor Infostealer Campaign Targeting Windows OS

Intel Prioritizes Security in Latest vPro Chips

Hacking Pickleball

Shadow IT, SaaS Pose Security Liability for Enterprises

Using the iPhone Recovery Key to Lock Owners Out of Their iPhones

The Tangled Web of IR Strategies

Kubernetes RBAC Exploited in Large-Scale Campaign for Cryptocurrency Mining

GhostToken Flaw Could Let Attackers Hide Malicious Apps in Google Cloud Platform

14 Kubernetes and Cloud Security Challenges and How to Solve Them

The War on Passwords Enters a Chaotic New Phase

International cops urge Meta <em>not</em> to implement secure encryption for all

Did you mistakenly sell your network access? Week in security with Tony Anscombe

N.K. Hackers Employ Matryoshka Doll-Style Cascading Supply Chain Attack on 3CX

Healthcare organisations urged to improve system security

Thanks for fixing the computer lab. Now tell us why we shouldnt expel you?

Cisco and VMware Release Security Updates to Patch Critical Flaws in their Products

3CX Breach Was a Double Supply Chain Compromise

Ransomware: Every internet-connected network is at risk. Be prepared!

~ 20 Apr 2023 ~

Infoblox Uncovers DNS Malware Toolkit & Urges Companies to Block Malicious Domains

Bitsight Expands into Integrated Cyber-Risk Management

'GhostToken' Opens Google Accounts to Permanent Infection

OpenSSF Adds Software Supply Chain Tracks to SLSA Framework

New Policy Group Wants to Improve Cybersecurity Disclosure, Support Researchers

Red Canary Announces Readiness

3CX Supply Chain Attack Tied to Financial Trading App Breach

Major US CFPB Data Breach Caused by Employee

Trigona Ransomware Trolling for 'Poorly Managed' MS-SQL Servers

Twitter's 2FA Policy Is a Call for Passkey Disruption

Microsoft Entra delivers 240 percent ROI, according to new Forrester study

'AuKill' Malware Hunts & Kills EDR Processes

Global Spyware Attacks Spotted Against Both New & Old iPhones

Tech Insight: Dangers of Using Large Language Models Before They Are Baked

GPT-4 Provides Improved Answers While Posing New Questions

Two Critical Flaws Found in Alibaba Cloud's PostgreSQL Databases

Capita has 'evidence' customer data was stolen in digital burglary

An earlier supply chain attack led to the 3CX supply chain attack, Mandiant says

The Huge 3CX Breach Was Actually 2 Linked Supply Chain Attacks

Newer Authentication Tech a Priority for 2023

Lazarus Group Adds Linux Malware to Arsenal in Operation Dream Job

Beyond Traditional Security: NDR's Pivotal Role in Safeguarding OT Networks

Fortra Sheds Light on GoAnywhere MFT Zero-Day Exploit Used in Ransomware Attacks