Port 22

~ 2 Oct 2024 ~

The fix for BGP's weaknesses has big, scary, issues of its own, boffins find

Researchers Sound Alarm on Active Attacks Exploiting Critical Zimbra Postjournal Flaw

PyPI Repository Found Hosting Fake Crypto Wallet Recovery Tools That Steal User Data

~ 1 Oct 2024 ~

ICE Signs $2 Million Contract With Spyware Maker Paragon Solutions

Euro cops arrest 4 including suspected LockBit dev chilling on holiday

Notorious Evil Corp Hackers Targeted NATO Allies for Russian Intelligence

AI-Powered Rhadamanthys Stealer Targets Crypto Wallets with Image Recognition

Cybersecurity Awareness Month: Securing our worldtogether

Evil Corp's deep ties with Russia and NATO member attacks exposed

NCA unmasks man it suspects is both 'Evil Corp kingpin' and LockBit affiliate

Why system resilience should mainly be the job of the OS, not just third-party applications

Hacking ChatGPT by Planting False Memories into Its Data

5 Actionable Steps to Prevent GenAI Data Leaks Without Fully Blocking AI Usage

Key Group: another ransomware group using leaked builders

Cybersecurity Awareness Month needs a radical overhaul it needs legislation

Free Sniper Dz Phishing Tools Fuel 140,000+ Cyber Attacks Targeting User Credentials

New Cryptojacking Attack Targets Docker API to Create Malicious Swarm Botnet

U.K. Hacker Charged in $3.75 Million Insider Trading Scheme Using Hacked Executive Emails

Securing the Grid: Lessons from China's Cyberattacks on U.S. Providers

Australian e-tailer digiDirect customers' info allegedly stolen and dumped online

~ 30 Sep 2024 ~

Rackspace monitoring systems hit by zero-day

Ransomware forces hospital to turn away ambulances

T-Mobile US to cough up $31.5M after that long string of security SNAFUs

Crooked Cops, Stolen Laptops & the Ghost of UGNazi

If you're holding important data, Iran is probably trying spearphish it

THN Cybersecurity Recap: Last Week's Top Threats and Trends (September 23-29)

Remote ID verification tech is often biased, bungling, and no good on its own

Critical Flaws in Tank Gauge Systems Expose Gas Stations to Remote Attacks

Cloud threats have execs the most freaked out because they're not prepared

Session Hijacking 2.0 The Latest Way That Attackers are Bypassing MFA

AI and the 2024 US Elections

A Hacker's Era: Why Microsoft 365 Protection Reigns Supreme

The Pig Butchering Invasion Has Begun

Meta Fined 91 Million for Storing Millions of Facebook and Instagram Passwords in Plaintext

AI code helpers just can't stop inventing package names

Forget the Kia Boyz: Hackers could hijack your car with just a smartphone

Binance claims it helped to bust Chinese crypto scam app in India

A Visual Summary of SANS CloudSecNext Summit 2024

~ 29 Sep 2024 ~

Red team hacker on how she 'breaks into buildings and pretends to be the bad guy'

~ 28 Sep 2024 ~

The US Could Finally Ban Inane Forced Password Changes

Crypto Scam App Disguised as WalletConnect Steals $70K in Five-Month Campaign

U.S. Charges Three Iranian Nationals for Election Interference and Cybercrimes

~ 27 Sep 2024 ~

Feds charge 3 Iranians with 'hack-and-leak' of Trump 2024 campaign

Squid Fishing in Japan

Recall that Recall recall? Now Microsoft thinks it can make Windows feature palatable

Progress Software Releases Patches for 6 Flaws in WhatsUp Gold Patch Now

Ransomware gang using stolen Microsoft Entra ID creds to bust into the cloud

Gamaredon's operations under the microscope Week in security with Tony Anscombe

Critical Linux CUPS Printing System Flaws Could Allow Remote Command Execution

How to Plan and Prepare for Penetration Testing

Microsoft Identifies Storm-0501 as Major Threat in Hybrid Cloud Ransomware Attacks

NIST Recommends Some Common-Sense Password Rules

Teslas Cybertruck Goes, Inevitably, to War

Cybersecurity Certifications: The Gateway to Career Advancement

New HTML Smuggling Campaign Delivers DCRat Malware to Russian-Speaking Users

U.S. Sanctions Two Crypto Exchanges for Facilitating Cybercrime and Money Laundering

Critical NVIDIA Container Toolkit Vulnerability Could Grant Full Host Access to Attackers

Advanced Evidence Collection: DFIR's 2024 Mobile and Cloud Shift

~ 26 Sep 2024 ~

Patch now: Critical Nvidia bug allows container escape, complete host takeover

HPE patches three critical security holes in Aruba PAPI

That doomsday critical Linux bug: It's CUPS. May lead to remote hijacking of devices

Doomsday '9.9 RCE bug' could hit every Linux system

Storm-0501: Ransomware attacks expanding to hybrid cloud environments

Hackers Could Have Remotely Controlled Kia Cars Using Only License Plates

U.S. Indicts 2 Top Russian Hackers, Sanctions Cryptex