Port 22

~ 28 Oct 2024 ~

Feds investigate China's Salt Typhoon amid campaign phone hacks

Chinese Hackers Use CloudScout Toolset to Steal Session Cookies from Cloud Services

Criminals Are Blowing up ATMs in Germany

Brazen crims selling stolen credit cards on Meta's Threads

Delta officially launches lawyers at $500M CrowdStrike problem

Russian Espionage Group Targets Ukrainian Military with Malware via Telegram

BeaverTail Malware Resurfaces in Malicious npm Packages Targeting Developers

Cybercriminals Pose a Greater Threat of Disruptive US Election Hacks Than Russia or China

Dutch cops pwn the Redline and Meta infostealers, leak 'VIP' aliases

THN Cybersecurity Recap: Top Threats, Tools and News (Oct 21 - Oct 27)

Cybercriminals Use Webflow to Deceive Users into Sharing Sensitive Login Credentials

Sailing the Seven Seas Securely from Port to Port OT Access Security for Ships and Cranes

Tony Fadell: Innovating to save our planet | Starmus highlights

CloudScout: Evasive Panda scouting cloud services

WordPress forces user conf organizers to share social media credentials, arousing suspicions

Researchers Uncover OS Downgrade Vulnerability Targeting Microsoft Windows Kernel

A Visual Summary of SANS HackFest Hollywood Summit 2024

~ 27 Oct 2024 ~

Senator accuses sloppy domain registrars of aiding Russian disinfo campaigns

~ 26 Oct 2024 ~

Notorious Hacker Group TeamTNT Launches New Cloud Attacks for Crypto Mining

Four REvil Ransomware Members Sentenced in Rare Russian Cybercrime Convictions

Worker surveillance must comply with credit reporting rules

CERT-UA Identifies Malicious RDP Files in Latest Attack on Ukrainian Entities

~ 25 Oct 2024 ~

Chinese Hackers Target Trump Campaign via Verizon Breach

Friday Squid Blogging: Giant Squid Found on Spanish Beach

Just how private is Apple's Private Cloud Compute? You can test it to find out

Watermark for LLM-Generated Text

Researchers Discover Command Injection Flaw in Wi-Fi Alliance's Test Suite

Apple Opens PCC Source Code for Researchers to Identify Bugs in Cloud AI Security

Eliminating AI Deepfake Threats: Is Your Identity Security AI-Proof?

SEC Charges 4 Companies Over Misleading SolarWinds Cyberattack Disclosures

Irish Watchdog Imposes Record 310 Million Fine on LinkedIn for GDPR Violations

Putin's pro-Trump trolls accuse Harris of poaching rhinos

~ 24 Oct 2024 ~

AWS Cloud Development Kit flaw exposed accounts to full takeover

Emergency patch: Cisco fixes bug under exploit in brute-force attacks

New Qilin.B Ransomware Variant Emerges with Improved Encryption and Evasion Tactics

AWS Cloud Development Kit Vulnerability Exposes Users to Potential Account Takeover Risks

Cisco Issues Urgent Fix for ASA and FTD Software Vulnerability Under Active Attack

VIMESA VHF/FM Transmitter Blue Plus

iniNet Solutions SpiderControl SCADA PC HMI Editor

Deep Sea Electronics DSE855

Bitwarden's FOSS halo slips as new SDK requirement locks down freedoms

Why Phishing-Resistant MFA Is No Longer Optional: The Hidden Risks of Legacy MFA

Ransomware's ripple effect felt across ERs as patient care suffers

Lazarus Group Exploits Google Chrome Vulnerability to Control Infected Devices

Meet ZachXBT, the Masked Vigilante Tracking Down Billions in Crypto Scams and Thefts

ESET Research Podcast: CosmicBeetle

Voice-enabled AI agents can automate everything, even your phone scams

Fortinet Warns of Critical Vulnerability in FortiManager Under Active Exploitation

China's top messaging app WeChat banned from Hong Kong government computers

Anthropic's latest Claude model can interact with computers what could go wrong?

Perfctl malware strikes again as crypto-crooks target Docker Remote API servers

Samsung phone users under attack, Google warns

~ 23 Oct 2024 ~

Penn State pays DoJ $1.25M to settle cybersecurity compliance case

Warning! FortiManager critical vulnerability under active attack

'Satanic' data thief claims to have slipped into 350M Hot Topic shoppers info

Microsoft SharePoint RCE flaw exploits in the wild you've had 3 months to patch

Are Automatic License Plate Scanners Constitutional?

New Grandoreiro Banking Malware Variants Emerge with Advanced Tactics to Evade Detection

Microsoft Warns Foreign Disinformation Is Hitting the US Election From All Directions

Nigeria Drops Charges Against Tigran Gambaryan, Jailed Binance Exec and Former IRS Agent

Permiso State of Identity Security 2024: A Shake-up in Identity Security Is Looming Large

CISA Warns of Active Exploitation of Microsoft SharePoint Vulnerability (CVE-2024-38094)

The Global Surveillance Free-for-All in Mobile Ad Data

The Crypto Game of Lazarus APT: Investors vs. Zero-days

Researchers Reveal 'Deceptive Delight' Method to Jailbreak AI Models

Think Youre Secure? 49% of Enterprises Underestimate SaaS Risks

Ransomware Gangs Use LockBit's Fame to Intimidate Victims in Latest Attacks

Embargo ransomware: RocknRust

Millions of Android and iOS users at risk from hardcoded creds in popular apps

~ 22 Oct 2024 ~

US lawmakers push DOJ to prosecute tax prep firms for leaking taxpayer data to big tech

Grandoreiro, the global trojan with grandiose ambitions

Exposed United Nations Database Left Sensitive Information Accessible Online

TSMC blows whistle on potential sanctions-busting shenanigans from Huawei

Gophish Framework Used in Phishing Campaigns to Deploy Remote Access Trojans

VMware fixes critical RCE, make-me-root bugs in vCenter -for the second time

Tech firms to pay millions in SEC penalties for misleading SolarWinds disclosures

Microsoft Threat Intelligence healthcare ransomware report highlights need for collective industry action

Akira ransomware is encrypting victims again following pure extortion fling

The Shitposting Cartoon Dogs Sending Trucks, Drones, and Weapons to Ukraines Front Lines

Security Flaw in Styra's OPA Exposes NTLM Hashes to Remote Attackers

Cybercriminals Exploiting Docker API Servers for SRBMiner Crypto Mining Attacks

ICONICS and Mitsubishi Electric Products

No, The Chinese Have Not Broken Modern Encryption Systems with a Quantum Computer

A Comprehensive Guide to Finding Service Accounts in Active Directory

Bumblebee and Latrodectus Malware Return with Sophisticated Phishing Strategies

Malicious npm Packages Target Developers' Ethereum Wallets with SSH Backdoor

VMware Releases vCenter Server Update to Fix Critical RCE Vulnerability

Pixel perfect Ghostpulse malware loader hides inside PNG image files

CISA Adds ScienceLogic SL1 Vulnerability to Exploited Catalog After Active Zero-Day Attack

~ 21 Oct 2024 ~

Chinas Spamouflage cranks up trolling of US Senator Rubio as election day looms

Sophos to snatch Secureworks in $859M buyout: Why fight when you can just buy?

Misinformed about misinformation Gabrielle Lims piece for the Harvard Kennedy School Misinformation Review

The Citizen Lab at Regardless of Frontiers: First Amendment & Exchange of Ideas Across Borders

The billionaire behind Trump's 'unhackable' phone is on a mission to fight Tesla's FSD

ICE's $2 Million Contract With a Spyware Vendor Is Under White House Review

macOS HM Surf vuln might already be under exploit by major malware family

Chinese Nation-State Hackers APT41 Hit Gambling Sector for Financial Gain

Guide: The Ultimate Pentest Checklist for Full-Stack Security

THN Cybersecurity Recap: Top Threats, Tools and News (Oct 14 - Oct 20)

AI and the SEC Whistleblower Program