Port 22

~ 12 Apr 2023 ~

SANS FOR498: Digital Acquisition & Rapid Triage

Another zero-click Apple spyware maker just popped up on the radar again

Microsoft (& Apple) Patch Tuesday, April 2023 Edition

~ 11 Apr 2023 ~

April Patch Tuesday: Ransomware gangs already exploiting this Windows bug

Microsoft Patches 97 CVEs, Including Zero-Day & Wormable Bugs

Microsoft Azure Shared Key Misconfiguration Could Lead to RCE

'Blatantly Obvious': Spyware Offered to Cyberattackers via PyPI Python Repository

Nokoyawa ransomware attacks with Windows zero-day

Where Are the Women? Making Cybersecurity More Inclusive

Guidance for investigating attacks using CVE-2022-21894: The BlackLotus campaign

7 Things Your Ransomware Response Playbook Is Likely Missing

DEV-0196: QuaDreams KingsPawn malware used to target civil society in Europe, North America, the Middle East, and Southeast Asia

Sweet QuaDreams: A First Look at Spyware Vendor QuaDreams Exploits, Victims, and Customers

Attackers Hide RedLine Stealer Behind ChatGPT, Google Bard Facebook Ads

How Password Managers Can Get Hacked

How CIEM Can Improve Identity, Permissions Management for Multicloud Deployments

Israeli Irrigation Water Controllers & Postal Service Breached

Azure admins warned to disable shared key access as backdoor attack detailed

Samsung Engineers Feed Sensitive Data to ChatGPT, Sparking Workplace AI Warnings

How to Use Apples New All-In-One Password Manager

Cybercriminals Turn to Android Loaders on Dark Web to Evade Google Play Security

[eBook] A Step-by-Step Guide to Cyber Risk Assessment

Car Thieves Hacking the CAN Bus

40% of IT security pros say they've been told not to report a data leak

10 things to look out for when buying a password manager

Cryptocurrency Stealer Malware Distributed via 13 NuGet Packages

Renewed Focus on Incident Response Brings New Competitors and Partnerships

~ 10 Apr 2023 ~

How much to infect Android phones via Google Play store? How about $20k

Inside FTX: Jokes about misplaced funds, diabolical IT, poor oversight, and worse

Apps for Sale: Cybercriminals Sell Android Hacks for Up to $20K a Pop

Apple squashes iOS, macOS zero-day bugs already exploited by snoops

Pair of Apple Zero-Days Under Active Exploit; Patch & Update Accordingly

High-Stakes Ransomware Response: Know What Cards You Hold

Google to kill Dropcam, Nest Secure hardware next year

Russia's Joker DPR Claims Access to Ukraine Troop Movement Data

How and Why to Put Multicloud to Work

Microsoft, Fortra are this fed up with cyber-gangs abusing Cobalt Strike

Rethinking Cybersecurity's Structure & the Role of the Modern CISO

When it comes to technology, securing your future means securing your present

Estonian National Charged in U.S. for Acquiring Electronics and Metasploit Pro for Russian Military

Hackers Flood NPM with Bogus Packages Causing a DoS Attack

Top 10 Cybersecurity Trends for 2023: From Zero Trust to Cyber Insurance

LLMs and Phishing

Over 1 Million WordPress Sites Infected by Balada Injector Malware Campaign

Protecting your business with Wazuh: The open source security platform

Overview of Google Play threats sold on the dark web

CISA Warns of 5 Actively Exploited Security Flaws: Urgent Action Required

Exploring the Dark Side: OSINT Tools and Techniques for Unmasking Dark Web Operations

~ 8 Apr 2023 ~

Taiwanese PC Company MSI Falls Victim to Ransomware Attack

Pinduoduo, a Top Chinese Shopping App, Is Laced With Malware

Iran-Based Hackers Caught Carrying Out Destructive Attacks Under Ransomware Guise

Apple Releases Updates to Address Zero-Day Flaws in iOS, iPadOS, macOS, and Safari

Researchers Discover Critical Remote Code Execution Flaw in vm2 Sandbox Library

~ 7 Apr 2023 ~

MSI hit in cyberattack, warns against installing knock-off firmware

Friday Squid Blogging: Squid Food Poisoning

Almost Half of Former Employees Say Their Passwords Still Work

Welcome to open source, Elon. Your Twitter code just got a CVE for shadow ban bug

Microsoft, Fortra & Health-ISAC Team Up to Remove Illicit Cobalt Strike Tools

TikTok, Other Mobile Apps Violate Privacy Regulations

MERCURY and DEV-1084: Destructive attack on hybrid environment

Close the Permissions Gap With Identity And Access Management For Multicloud Workforces

Printers Pose Persistent Yet Overlooked Threat

Bad Actors Will Use Large Language Models but Defenders Can, Too

Cybercriminals 'CAN' Steal Your Car, Using Novel IoT Hack

Researchers Uncover Thriving Phishing Kit Market on Telegram Channels