Port 22

~ 22 Sep 2022 ~

Feds Sound Alarm on Rising OT/ICS Threats From APT Groups

Malicious npm Package Poses as Tailwind Tool

Researchers Uncover Years-Long Mobile Spyware Campaign Targeting Uyghurs

The Ungodly Surveillance of Anti-Porn Shameware Apps

Malicious OAuth applications used to compromise email servers and spread spam

Cambodian authorities crack down on cyber slavery amid international pressure

Malicious NPM Package Caught Mimicking Material Tailwind CSS Package

A New Linux Tool Aims to Guard Against Supply Chain Attacks

Allurity Acquires Spanish Multinational Aiuken Cybersecurity

Twitter's Whistleblower Allegations Are a Cautionary Tale for All Businesses

StackHawk Launches Deeper API Security Test Coverage to Improve the Security of APIs

Fake sites fool Zoom users into downloading deadly code

Palo Alto Networks 5G-Native Security Now Available on Microsoft Azure Private Multi-Access Edge Compute

IT Security Takeaways from the Wiseasy Hack

Prompt Injection/Extraction Attacks against AI Systems

Researchers Disclose Critical Vulnerability in Oracle Cloud Infrastructure

Measuresoft ScadaPro Server

Hey WeLiveSecurity, how does biometric authentication work?

15-Year-Old Unpatched Python Vulnerability Potentially Affects Over 350,000 Projects

Hackers Targeting Unpatched Atlassian Confluence Servers to Deploy Crypto Miners

Alert: 15-year-old Python tarfile flaw lurks in 'over 350,000' code projects

NEW SANS DFIR COURSE | FOR577: LINUX Incident Response & Analysis

~ 21 Sep 2022 ~

San Francisco cops can use private cameras to live-monitor 'significant events'

Wintermute DeFi Platform Offers Hacker a Cut in $160M Crypto-Heist

Quantify Risk, Calculate ROI

Threat Actor Abuses LinkedIn's Smart Links Feature to Harvest Credit Cards

Sophisticated Hermit Mobile Spyware Heralds Wave of Government Surveillance

Hackers Paralyze 911 Operations in Suffolk County, NY

Data Scientists Dial Back Use of Open Source Code Due to Security Worries

Rewards plus: Fake mobile banking rewards apps lure users to install info-stealing RAT on Android devices

Don't Wait for a Mobile WannaCry

Cyber Insurers Clamp Down on Clients' Self-Attestation of Security Controls

Cyber Insurers Clamp Down on Clients' Self-Attestation of Security Controls

SIM Swapper Abducted, Beaten, Held for $200k Ransom

The art and science behind Microsoft threat hunting: Part 2

Malwarebytes blocks Google, YouTube as malware

15-Year-Old Python Flaw Slithers into Software Worldwide

'I Don't Care About Cookies' extension sold to Avast

Ransomware: The Latest Chapter

Over 39,000 Unauthenticated Redis Instances Found Exposed on the Internet

Crypto Trading Firm Wintermute Loses $160 Million in Hacking Incident

Why Zero Trust Should be the Foundation of Your Cybersecurity Ecosystem

Automatic Cheating Detection in Human Racing

Shadowy Russian Cell Phone Companies Are Cropping Up in Ukraine

U.S. Adds 2 More Chinese Telecom Firms to National Security Threat List

WAAP it out for application security

ChromeLoader, what took you so long? Malvertising irritant now slings ransomware

Look who's fallen foul of Europe's data retention rules. France and Germany

Record DDoS Attack with 25.3 Billion Requests Abused HTTP/2 Multiplexing

Critical Remote Hack Flaws Found in Dataprobe's Power Distribution Units

Product Review: Stellar Cyber Open XDR Platform

USA adds two more Chinese carriers on 'probably a threat to national security' list

Microsoft Brings Zero Trust to Hardware in Windows 11

~ 20 Sep 2022 ~

Crypto biz Wintermute loses $160m in cyber-heist, tells us not to stress out

ChromeLoader Malware Evolves into Prevalent, More Dangerous Cyber Threat

Meta, Twitter, Apple, Google urged to up encryption game in post-Roe America

2-Step Email Attack Uses Powtoon Video to Execute Payload

Beware of Phish: American Airlines, Revolut Data Breaches Expose Customer Info

Cast AI Introduces Cloud Security Insights for Kubernetes

Spell-Checking in Google Chrome, Microsoft Edge Browsers Leaks Passwords

Survey Shows CISOs Losing Confidence in Ability to Stop Ransomware Attacks

New Windows 11 security features are designed for hybrid work

How to Dodge New Ransomware Tactics

No Enterprise Push for Quantum Without Regulatory Push

New Kaspersky EDR Optimum Further Simplifies Protection Against Evasive Threats

ThreatQuotient Enhances Data-Driven Automation Capabilities With New ThreatQ TDR Orchestrator Features

SASE Bucks Economic Uncertainty With Over 30% Growth in 2Q 2022, According to Dell'Oro Group

Invicti Security and ESG Report on How Companies are Shifting for Higher Quality, Secure Application Code

Byos Releases Free Assessment Tool to Provide Companies With Tailored Network Security Recommendations

Water Sector Will Benefit From Call for Cyber Hardening of Critical Infrastructure

Telegram Has a Serious Doxing Problem

Russian Sandworm Hackers Impersonate Ukrainian Telecoms to Distribute Malware

Credit Card Fraud That Bypasses 2FA

Hitachi Energy PROMOD IV

Hitachi Energy AFF660/665 Series

Medtronic NGP 600 Series Insulin Pumps

Dataprobe iBoot-PDU

Host Engineering Communications Module

MiCODUS MV720 GPS tracker (Update A)

Uber Blames LAPSUS$ Hacking Group for Recent Security Breach

CrowdStrike Investment Spotlights API Security

~ 19 Sep 2022 ~

Uber explains how it was pwned this month, points finger at Lapsus$ gang

Uber: Lapsus$ Targeted External Contractor With MFA Bombing Attack

Rockstar Games Confirms 'Grand Theft Auto 6' Breach

Been hit by LockerGoga ransomware? A free fix is now out

Cyberattackers Make Waves in Hotel Swimming Pool Controls

Rockstar Games Confirms Hacker Stole Early Grand Theft Auto VI Footage

Grand Theft Auto 6 maker confirms source code, vids stolen in cyber-heist

5 Ways to Improve Fraud Detection and User Experience

TPx Introduces Penetration Scanning, Expands Security Advisory Services

External attack surface and ongoing cybercriminal activity in APAC region

Cyberattack Costs for US Businesses up by 80%

GPT-3 'prompt injection' attack causes bad bot manners

Emotet Botnet Started Distributing Quantum and BlackCat Ransomware

Microsoft Teams' GIFShell Attack: What Is It and How You Can Protect Yourself from It

Large-Scale Collection of Cell Phone Data at US Borders

The Deep Roots of Nigerias Cybersecurity Problem

Europol and Bitdefender Release Free Decryptor for LockerGoga Ransomware

Can your iPhone be hacked? What to know about iOS security

Microsoft Warns of Large-Scale Click Fraud Campaign Targeting Gamers