Port 22

~ 6 Feb 2023 ~

SaaS in the Real World: Who's Responsible to Secure this Data?

OpenSSH Releases Patch for New Pre-Auth Double Free Vulnerability

Trust, not tech, is holding back a safer internet

FormBook Malware Spreads via Malvertising Using MalVirt Loader to Evade Detection

School laptop auction devolves into extortion allegation

Ransomware scum launch wave of attacks on critical, but old, VMWare ESXi vuln

~ 5 Feb 2023 ~

Finlands Most-Wanted Hacker Nabbed in France

Have we learnt nothing from SolarWinds supply chain attacks? Not yet it appears

~ 4 Feb 2023 ~

Googling for Software Downloads Is Extra Risky Right Now

PixPirate: New Android Banking Trojan Targeting Brazilian Financial Institutions

Iran crew stole Charlie Hebdo database, says Microsoft

New Wave of Ransomware Attacks Exploiting VMware Bug to Target ESXi Servers

Warning: Hackers Actively Exploiting Zero-Day in Fortra's GoAnywhere MFT

The Chinese Spy Balloon Shows the Downsides of Spy Balloons

HeadCrab bots pinch 1,000+ Redis servers to mine coins

~ 3 Feb 2023 ~

What CISOs Can Do About Brand Impersonation Scam Sites

Friday Squid Blogging: Studying the Colossal Squid

Iran-Backed Actor Behind 'Holy Souls' Cyberattack on Charlie Hebdo, Microsoft Says

Fast-evolving Prilex POS malware can block contactless payments

A Hackers Mind News

Guy accused of wrecking crypto exchange now hauled into court

Is Your EV Charging Station Safe? New Security Vulnerabilities Uncovered

Post-Macro World Sees Rise in Microsoft OneNote Documents Delivering Malware

How the Cloud Is Shifting CISO Priorities

Key takeaways from ESETs new APT Activity Report Week in security with Tony Anscombe

Congress Has a Lo-Fi Plan to Fix the Classified Documents Mess

Iranian OilRig Hackers Using New Backdoor to Exfiltrate Data from Govt. Organizations

Manipulating Weights in Face-Recognition AI Systems

The Pivot: How MSPs can Turn a Challenge Into a Once-in-a-Decade Opportunity

Another RAC staffer nabbed for storing and sharing road accident data

Atlassian's Jira Software Found Vulnerable to Critical Authentication Vulnerability

LockBit claims responsibility for ION ransomware attack but US/UK hounds are sniffing

New High-Severity Vulnerabilities Discovered in Cisco IOx and F5 BIG-IP Products

Chinese surveillance balloon over US causes fearful gasbagging

CISA Alert: Oracle E-Business Suite and SugarCRM Vulnerabilities Under Attack

MITRE Releases Tool to Design Cyber Resilient Systems

Former Ubiquiti dev pleads guilty in data theft and extortion case

~ 2 Feb 2023 ~

Netflixs US Password-Sharing Crackdown Isnt HappeningYet

Hornetsecurity Combats QR Code Phishing With Launch of New Technology

Korelock Launches IOT Smart Lock Technology Company

Cyberattack on Fintech Firm Disrupts Derivatives Trading Globally

Malvertising attacks are distributing .NET malware loaders

6 Examples of the Evolution of a Scam Site

Rising Firebrick Ostrich BEC Group Launches Industrial-Scale Cyberattacks

Mitigate risk by integrating threat modeling and DevOps processes

Patch Critical Bug Now: QNAP NAS Devices Ripe for the Slaughter

Scores of Redis Servers Infested by Sophisticated Custom-Built Malware

Managing the Governance Model for Software Development in a No-Code Ecosystem

AppSec Playbook 2023: Study of 829M Attacks on 1,400 Websites

Cybersecurity Leaders Launch First Attack Matrix for Software Supply Chain Security

ChatGPT May Already Be Used In Nation State Cyberattacks, Say IT Decision Makers in BlackBerry Global Research

New Russian-Backed Gamaredon's Spyware Variants Targeting Ukrainian Authorities

AIs as Computer Hackers

Super Bock says 'cyber' nasty 'disrupting computer services'

Discrepancies Discovered in Vulnerability Severity Ratings

Is that survey real or fake? How to spot a survey scam

Delta Electronics DIAScreen

Mitsubishi Electric GOT2000 Series and GT SoftGOT2000

Baicells Nova

Delta Electronics DVW-W02W2-E2

Delta Electronics DX-2100-L1-CN

Cybersecurity budgets are going up. So why aren't breaches going down?

North Korean Hackers Exploit Unpatched Zimbra Devices in 'No Pineapple' Campaign

Lazarus Group Rises Again, to Gather Intelligence on Energy, Healthcare Firms

New Threat: Stealthy HeadCrab Malware Compromised Over 1,200 Redis Servers