Port 22

~ 7 Jun 2023 ~

Microsoft to Pay $20 Million Penalty for Illegally Collecting Kids' Data on Xbox

Cisco Touts New AI-Based Security, SSE Features

Winning the Mind Game: The Role of the Ransomware Negotiator

How Attorneys Are Harming Cybersecurity Incident Response

The Key to Zero Trust Identity Is Automation

The Bold Plan to Create Cyber 311 Hotlines

Hear no evil: Ultrasound attacks on voice assistants

IT threat evolution Q1 2023

IT threat evolution Q1 2023. Mobile statistics

IT threat evolution in Q1 2023. Non-mobile statistics

New PowerDrop Malware Targeting U.S. Aerospace Industry

~ 6 Jun 2023 ~

Police use of PayPal records under fire after raid on 'Cop City' protest fund trio

Verizon DBIR: Social Engineering Breaches Double, Leading to Spiraling Ransomware Costs

Researchers Spot a Different Kind of Magecart Card-Skimming Campaign

Microsoft Preps $425M Payment for LinkedIn GDPR Violations

With SEC Rule Changes on the Horizon, Research Reveals Only 14% of CISOs Have Traits Desired for Cyber Expert Board Positions

ILTA and Conversant Group Release Cybersecurity Benchmarking Survey of the Legal Industry

Service Rents Email Addresses for Account Signups

Malwarebytes may not be allowed to label rival's app as 'potentially unwanted'

Netskope Intelligent SSE Selected by Transdev to Secure and Connect its Hybrid Workforce

US govt now bans TikTok from contractors' work gear

Microsoft cops $20M slap on the wrist for mishandling kids' Xbox data

New Malware Campaign Leveraging Satacom Downloader to Steal Cryptocurrency

Identity thieves can hunt us for 'rest of our lives,' claims suit after university data leak

Why a proactive detection and incident response plan is crucial for your organization

Filling the Gaps: How to Secure the Future of Hybrid Work

Over 60K Adware Apps Posing as Cracked Versions of Popular Apps Target Android Devices

US Aerospace Contractor Hacked With 'PowerDrop' Backdoor

Mitsubishi Electric MELSEC iQ-R Series/iQ-F Series

Delta Electronics CNCSoft-B DOPSoft

ChatGPT Hallucinations Open Developers to Supply-Chain Malware Attacks

5 Reasons Why IT Security Tools Don't Work For OT

Snowden Ten Years Later

Zero-Day Alert: Google Issues Patch for New Chrome Vulnerability - Update Now!

7 tips for spotting a fake mobile app

Taking the art of email security to the next level

Cyclops Ransomware Gang Offers Go-Based Info Stealer to Cybercriminals

Chinese PostalFurious Gang Strikes UAE Users with Sneaky SMS Phishing Scheme

Zyxel Firewalls Under Attack! Urgent Patching Required

SEC drops 42 cases after staff bungle data protection

~ 5 Jun 2023 ~

Apple Expands Its On-Device Nudity Detection to Combat CSAM

Red Sift Launches Relevance Detection as GPT-4-Powered Asset Discovery and Classification Solution

Microsoft Links MOVEit Attack to Cl0p as British Airways, Others Fall

2.5M Impacted by Enzo Biochem Data Leak After Ransomware Attack

Gigabyte Slams Backdoor Shut With Attack-Killing BIOS Update

British Airways, Boots, BBC payroll data stolen in MOVEit supply-chain attack

Crypto catastrophe strikes some Atomic Wallet users, over $35M thought stolen

Moonlighter Satellite Offers In-Orbit Target for Space Hackers

Don't Overlook Twitter's Trove of Threat Intel for Enterprise Cybersecurity

Hacks Against Ukraine's Emergency Response Services Rise During Bombings

Mass Exploitation of Zero-Day Bug in MOVEit File Transfer Underway

After 'Inception' Attack, New Due Diligence Requirements Are Needed

Varonis: Reducing Insider Threats Through Improved Data Security

Qbot malware adapts to live another day and another

Microsoft: Lace Tempest Hackers Behind Active Exploitation of MOVEit Transfer App

The Annual Report: 2024 Plans and Priorities for SaaS Security

The Software-Defined Car

Satacom delivers browser extension that steals cryptocurrency

Inside 4chans Top-Secret Moderation Machine

Magento, WooCommerce, WordPress, and Shopify Exploited in Web Skimmer Attack

Name That Edge Toon: Spring Chickens

Brazilian Cybercriminals Using LOLBaS and CMD Scripts to Drain Bank Accounts

Alarming Surge in TrueBot Activity Revealed with New Delivery Vectors

Australian cyber-op attacked ISIL with the terrifying power of Rickrolling

Toyota admits to yet another cloud leak

Meet TeamT5, the Taiwanese infosec outfit taking on Beijing and defeating its smears

~ 3 Jun 2023 ~

AI Is Being Used to Turbocharge Scams

HowAI Protects (and Attacks) Your Inbox

Uncle Sam wants DEF CON hackers to pwn this Moonlighter satellite in space

New Linux Ransomware Strain BlackSuit Shows Striking Similarities to Royal

Cloud Security Tops Concerns for Cybersecurity Leaders: EC-Council's Certified CISO Hall of Fame Report 2023

FTC Slams Amazon with $30.8M Fine for Privacy Violations Involving Alexa and Ring

~ 2 Jun 2023 ~

The Messy US Influence That's Helping Iranians Stay Online

Friday Squid Blogging: Squid Chromolithographs

PyPI's 2FA Requirements Don't Go Far Enough, Researchers Say

'PostalFurious' SMS Attacks Target UAE Citizens for Data Theft

Malaysia goes its own Huawei, won't ban Chinese vendor from 5G network

'Picture-in-Picture' Obfuscation Spoofs Delta, Kohl's for Credential Harvesting

Streamers Ditch Netflix for Dark Web After Password Sharing Ban

Microsoft stashes nearly half a billion in case LinkedIn data drama hits

API security in the spotlight Week in security with Tony Anscombe

Open-Source LLMs

Want Sustainable Security? Find Middle Ground Between Tech & Education

Apple Zero-Days, iMessage Used in 4-Year, Ongoing Spying Effort

How CISOs Can Manage the Intersection of Security, Privacy, And Trust

API security in the spotlight Week in security with Tony Anscombe

In search of the Triangulation: triangle_check utility

New Botnet Malware 'Horabot' Targets Spanish-Speaking Users in Latin America

The Importance of Managing Your Data Security Posture

Camaro Dragon Strikes with New TinyNote Backdoor for Intelligence Gathering

This malicious PyPI package mixed source and compiled code to dodge detection

North Korea's Kimsuky Group Mimics Key Figures in Targeted Cyber Attacks

You might have been phished by the gang that stole North Koreas lousy rocket tech

MOVEit Transfer Under Attack: Zero-Day Vulnerability Actively Being Exploited

Millions of Gigabyte PC motherboards backdoored? What's the actual score?

Cybersecurity Jobs: Cloud Security Analyst (Japanese)

~ 1 Jun 2023 ~

Deployed publicly accessible MOVEit Transfer? Oh no. Mass exploitation underway

Kremlin claims Apple helped NSA spy on diplomats via iPhone backdoor

DNB Strengthens its Network Security Posture and Productivity With Ericsson Security Manager Solution

Cyversity and United Airlines to Provide Cybersecurity Training Scholarships to Cyversity Members