Port 22

~ 16 Dec 2024 ~

Agile Business, agile security: How AI and Zero Trust work together

DeceptionAds Delivers 1M+ Daily Impressions via 3,000 Sites, Fake CAPTCHA Pages

NoviSpy Spyware Installed on Journalist's Phone After Unlocking It With Cellebrite Tool

THN Weekly Recap: Top Cybersecurity Threats, Tools and Tips

Short-Lived Certificates Coming to Lets Encrypt

The Top Cybersecurity Agency in the US Is Bracing for Donald Trump

Hackers Can Jailbreak Digital License Plates to Make Others Pay Their Tolls and Tickets

Data Governance in DevOps: Ensuring Compliance in the AI Era

New Investment Scam Leverages AI, Social Media Ads to Target Victims Worldwide

Dark web threats and dark market predictions for 2025

New Glutton Malware Exploits Popular PHP Frameworks Like Laravel and ThinkPHP

Ukrainian Minors Recruited for Cyber Ops and Reconnaissance in Russian Airstrikes

~ 15 Dec 2024 ~

Are your Prometheus servers and exporters secure? Probably not

The Simple Math Behind Public Key Cryptography

~ 14 Dec 2024 ~

Upcoming Speaking Events

Germany Disrupts BADBOX Malware on 30,000 Devices Using Sinkhole Action

Microsofts AI Recall Tool Is Still Sucking Up Credit Card and Social Security Numbers

Thai Officials Targeted in Yokai Backdoor Campaign Using DLL Side-Loading Techniques

~ 13 Dec 2024 ~

Iran-linked crew used custom 'cyberweapon' in US critical infrastructure attacks

Scumbag gets 30 years in the clink for running CSAM dark-web chatrooms, abusing kids

Friday Squid Blogging: Biology and Ecology of the Colossal Squid

Google Timeline location purge causes collateral damage

~ 14 Dec 2024 ~

390,000+ WordPress Credentials Stolen via Malicious GitHub Repository Hosting PoC Exploits

~ 13 Dec 2024 ~

The New Jersey Drone Mystery May Not Actually Be That Mysterious

Critical OpenWrt Vulnerability Exposes Devices to Malicious Firmware Injection

Ultralytics Supply-Chain Attack

Why the US Military Can't Just Shoot Down the Mystery Drones

Open letter to Sandvine requesting evidence of the adequacy and effectiveness of the announced reforms

DoJ Indicts 14 North Koreans for $88M IT Worker Fraud Scheme Over Six Years

Cyber protection made intuitive and affordable

Human Misuse Will Make Artificial Intelligence More Dangerous

Iran-Linked IOCONTROL Malware Targets SCADA and Linux-Based IoT Platforms

How to Generate a CrowdStrike RFM Report With AI in Tines

As the Mastermind of Far-Right Active Clubs Goes to Prison, His Violent Movement Goes Global

New Linux Rootkit PUMAKIT Uses Advanced Stealth Techniques to Evade Detection

Taming the multi-vault beast

FBI Busts Rydox Marketplace with 7,600 PII Sales, Cryptocurrency Worth $225K Seized

North Korea's fake IT worker scam hauled in at least $88 million over six years

ICS Cybersecurity Awareness: Strengthening Critical Infrastructure Through Practical Skill Deployment

~ 12 Dec 2024 ~

Rebekah Brown and John Scott-Railton on Distilling Cyber Policy podcast

Convincing a billion users to love passkeys: UX design insights from Microsoft to boost adoption and security

Over 300K Prometheus Instances Exposed: Credentials and API Keys Leaking Online

Apache issues patches for critical Struts 2 RCE bug

Researchers Uncover Symlink Exploit Allowing TCC Bypass in iOS and macOS

Lights out for 18 more DDoS booters in pre-Christmas Operation PowerOFF push

SaaS Budget Planning Guide for IT Professionals

British Army zaps drones out of the sky with laser trucks

Careto is back: whats new after 10 years of silence?

WordPress Hunk Companion Plugin Flaw Exploited to Silently Install Vulnerable Plugins

Firefox ditches Do Not Track because nobody was listening anyway

Europol Dismantles 27 DDoS Attack Platforms Across 15 Nations; Admins Arrested

Citrix goes shopping in Europe and returns with gifts for security-conscious customers

DORA's Role in Enhancing Cybersecurity for EU Finance

~ 11 Dec 2024 ~

Blocking Chinese spies from intercepting calls? There ought to be a law

How Cryptocurrency Turns to Cash in Russian Banks

Krispy Kreme Doughnut Corporation admits to hole in security

Secret Blizzard Deploys Kazuar Backdoor in Ukraine Using Amadey Malware-as-a-Service

Microsoft Defender XDR demonstrates 100% detection coverage across all cyberattack stages in the 2024 MITRE ATT&CK Evaluations: Enterprise

Frequent freeloader part II: Russian actor Secret Blizzard using tools of other groups to attack Ukraine

New Malware Technique Could Exploit Windows UI Framework to Evade EDR Tools

Legal barriers to justice: John Scott-Railton on the legal challenges faced by spyware victims

Microsoft MFA AuthQuake Flaw Enabled Unlimited Brute-Force Attempts Without Alerts

ZLoader Malware Returns With DNS Tunneling to Stealthily Mask C2 Comms

Three more vulns spotted in Ivanti CSA, all critical, one 10/10

Jailbreaking LLM-Controlled Robots