Port 22

~ 7 Oct 2024 ~

Chinese cyberspies reportedly breached Verizon, AT&T, Lumen

Microsoft Defender for Cloud remediated threats 30% faster than other solutions, according to Forrester TEI study

Vulnerable APIs and Bot Attacks Costing Businesses Up to $186 Billion Annually

Largest Recorded DDoS Attack is 3.8 Tbps

Modernization of Authentication: Webinar on MFA, Passwords, and the Shift to Passwordless

Awaken Likho is awake: new techniques of an APT group

New Gorilla Botnet Launches Over 300,000 DDoS Attacks Across 100 Countries

Critical Apache Avro SDK Flaw Allows Remote Code Execution in Java Applications

THN Cybersecurity Recap: Top Threats and Trends (Sep 30 - Oct 6)

Google Blocks Unsafe Android App Sideloading in India for Improved Fraud Protection

Mind the (air) gap: GoldenJackal gooses government guardrails

Embattled users worn down by privacy options? Let them eat code

E.U. Court Limits Meta's Use of Personal Facebook Data for Targeted Ads

~ 5 Oct 2024 ~

Stealthy Malware Has Infected Thousands of Linux Systems for Years

The FBI Still Hasnt Cracked NYC Mayor Eric Adams Phone

Ryanair faces GDPR turbulence over customer ID checks

UK's Sellafield nuke waste processing plant fined 333K for infosec blunders

Apple Releases Critical iOS and iPadOS Updates to Fix VoiceOver Password Vulnerability

~ 4 Oct 2024 ~

Friday Squid Blogging: Map of All Colossal Squid Sightings

About a quarter million Comcast subscribers had their data stolen from debt collector

About a quarter million Comcast subscribers had data stolen from debt collector

U.S. and Microsoft Seize 107 Russian Domains in Major Cyber Fraud Crackdown

The complexities of attack attribution Week in security with Tony Anscombe

Apple fixes bug that let VoiceOver shout your passwords

This Video Game Controller Has Become the US Militarys Weapon of Choice

How to Get Going with CTEM When You Don't Know Where to Start

Cloudflare Thwarts Largest-Ever 3.8 Tbps DDoS Attack Targeting Global Sectors

WordPress LiteSpeed Cache Plugin Security Flaw Exposes Sites to XSS Attacks

Visit CyberThreat 2024 to hone your cybersecurity skills

Scam Information and Event Management

Harvard duo hacks Meta Ray-Bans to dox strangers on sight in seconds

Big names among thousands infected by payment-card-stealing CosmicSting crooks

HUMINT and its Role within Cybersecurity

~ 3 Oct 2024 ~

Android 14 Adds New Security Features to Block 2G Exploits and Baseband Attacks

Disrupting COLDRIVER: U.S. court orders seizure of domains used in Russian cyberattacks

DOJ, Microsoft seize 107 domains used in Russia's Star Blizzard phishing attacks

The Secret Weakness Execs Are Overlooking: Non-Human Identities

New Perfctl Malware Targets Linux Servers for Cryptocurrency Mining and Proxyjacking

Average North American CISO salary now $565K, mainly thanks to one weird trick

A Single Cloud Compromise Can Feed an Army of AI Sex Bots

North Korean Hackers Using New VeilShell Backdoor in Stealthy Cyber Attacks

Two British-Nigerian men sentenced over multimillion-dollar business email scam

Weird Zimbra Vulnerability

License Plate Readers Are Creating a US-Wide Database of Political Lawn Signs and Bumper Stickers

Ransomware crew infects 100+ orgs monthly with new MedusaLocker variant

Brits hate how big tech handles their data, but can't be bothered to do much about it

INTERPOL Arrests 8 in Major Phishing and Romance Fraud Crackdown in West Africa

LockBit Ransomware and Evil Corp Leaders Arrested and Sanctioned in Joint Global Effort

Ivanti Endpoint Manager Flaw Actively Targeted, CISA Warns Agencies to Patch

~ 2 Oct 2024 ~

700K+ DrayTek routers are sitting ducks on the internet, open to remote hijacking

Two simple give-me-control security bugs found in Optigo network switches used in critical manufacturing

Gender-based digital transnational repression as a global authoritarian practice: Article by The Citizen Lab published in Globalizations

Fake Trading Apps Target Victims Globally via Apple App Store and Google Play

China-Linked CeranaKeeper Targeting Southeast Asia with Data Exfiltration

Fake Job Applications Deliver Dangerous More_eggs Malware to HR Professionals

Separating the bee from the panda: CeranaKeeper making a beeline for Thailand

Alert: Over 700,000 DrayTek Routers Exposed to Hacking via 14 New Vulnerabilities

NIST's security flaw database still backlogged with 17K+ unprocessed bugs. Not great

Alert: Adobe Commerce and Magento Stores Under Attack from CosmicSting Exploit

California AI Safety Bill Vetoed

5 Must-Have Tools for Effective Dynamic Malware Analysis

'Patch yesterday': Zimbra mail servers under siege through RCE vuln

Finding a needle in a haystack: Machine learning at the forefront of threat hunting research

Andariel Hacking Group Shifts Focus to Financial Attacks on U.S. Organizations

Protecting private data in AI deployments