Port 22

~ 13 Sep 2024 ~

Apple Vision Pro Vulnerability Exposed Virtual Keyboard Inputs to Attackers

17-Year-Old Arrested in Connection with Cyber Attack Affecting Transport for London

The Dark Nexus Between Harm Groups and The Com

TrickMo Android Trojan Exploits Accessibility Services for On-Device Banking Fraud

Say Goodbye to Phishing: Must-Haves to Eliminate Credential Theft

Progress WhatsUp Gold Exploited Just Hours After PoC Release for Critical Flaw

CosmicBeetle joins the ranks of RansomHub affiliates Week in security with Tony Anscombe

New Linux Malware Campaign Exploits Oracle Weblogic to Mine Cryptocurrency

Cambodian senator sanctioned by US over alleged forced labor cyber-scam camps

Australias government spent the week boxing Big Tech

Feds pull plug on domains linked to import of Chinese gun conversion devices

Unlocking New Heights in DFIR: The GX-FE Certification Is Here!

Fortinet admits miscreant got hold of customer data in the cloud

'Hadooken' Linux malware targets Oracle WebLogic servers

~ 12 Sep 2024 ~

I stole 20GB of data from Capgemini and now I'm leaking it, says cyber-crook

Mastercard splurges $2.65B on another big cyber purchase Recorded Future

Adobe fixed Acrobat bug, neglected to mention whole zero-day exploit thing

New Android Malware 'Ajina.Banker' Steals Financial Data and Bypasses 2FA via Telegram

Google Chrome gets a mind of its own for some security fixes

Urgent: GitLab Patches Critical Flaw Allowing Unauthorized Pipeline Job Execution

Microsoft Is Adding New Cryptography Algorithms

Transport for London confirms 5,000 users' bank data exposed, pulls large chunks of IT infra offline

Beware: New Vo1d Malware Infects 1.3 Million Android TV Boxes Worldwide

Exposed Selenium Grid Servers Targeted for Crypto Mining and Proxyjacking

EU kicks off an inquiry into Google's AI model

About that Windows Installer 'make me admin' security hole. Here's how it's exploited

Top 3 Threat Report Insights for Q2 2024

Iranian Cyber Group OilRig Targets Iraqi Government in Sophisticated Malware Attack

Ireland's Watchdog Launches Inquiry into Google's AI Data Practices in Europe

Apple Vision Pros Eye Tracking Exposed What People Type

Mind your header! There's nothing refreshing about phishers' latest tactic

NIS2, DORA, and Tiber-EU expanding cybersecurity regulation

If HDMI screen rips aren't good enough for you pirates, DeCENC is another way to beat web video DRM

Pokmon GO was an intelligence tool, claims Belarus military official

WordPress Mandates Two-Factor Authentication for Plugin and Theme Developers

Healthcare giant to pay $65M settlement after crooks stole and leaked nude patient pics

~ 11 Sep 2024 ~

Cyber crooks shut down UK, US schools, thousands of kids affected

Apple Intelligence Promises Better AI Privacy. Heres How It Actually Works

Major sales and ops overhaul leads to much more activity ... for Meow ransomware gang

Hunters International claims ransom on Chinese mega-bank's London HQ

Quad7 Botnet Expands to Target SOHO Routers and VPN Appliances

DragonRank Black Hat SEO Campaign Targeting IIS Servers Across Asia and Europe

So you paid a ransom demand and now the decryptor doesn't work

Singapore Police Arrest Six Hackers Linked to Global Cybercrime Syndicate

Evaluating the Effectiveness of Reward Modeling of Generative AI Systems

How $20 and a lapsed domain allowed security pros to undermine internet integrity

Why Is It So Challenging to Go Passwordless?

Mind the talent gap: Infosec vacancies abound, but hiring is flat

Developers Beware: Lazarus Group Uses Fake Coding Tests to Spread Malware

6 common Geek Squad scams and how to defend against them

Microsoft Issues Patches for 79 Flaws, Including 3 Actively Exploited Windows Flaws

Ivanti Releases Urgent Security Updates for Endpoint Manager Vulnerabilities

India to train 5000 'Cyber Commandos'

Microsoft says it broke some Windows 10 patching as it fixes flaws under attack

~ 10 Sep 2024 ~

Bug Left Some Windows PCs Dangerously Unpatched

Lex Gill at CBC Ideas at Crows Theatre: Making Justice Imaginable

CosmicBeetle Deploys Custom ScRansom Ransomware, Partnering with RansomHub

Crypto scams rake in $5.6B a year for cyberscum lowlifes, FBI says

Experts Identify 3 Chinese-Linked Clusters Behind Cyberattacks in Southeast Asia

Shining a Light on Shadow Apps: The Invisible Gateway to SaaS Data Breaches

New Chrome Zero-Day

New PIXHELL Attack Exploits Screen Noise to Exfiltrates Data from Air-Gapped Computers

Mustang Panda Deploys Advanced Malware to Spy on Asia-Pacific Governments

CosmicBeetle steps up: Probation period at RansomHub

Thanks, Edward Snowden: you propelled China to quantum networking leadership