Port 22

~ 18 Sep 2024 ~

Chinese Engineer Charged in U.S. for Years-Long Cyber Espionage Targeting NASA and Military

Scam Funeral Streaming Groups Thrive on Facebook

Cops across the world arrest 51 in orchestrated takedown of Ghost crime platform

Why Pay A Pentester?

Exotic SambaSpy is now dancing with Italian users

North Korean Hackers Target Energy and Aerospace Industries with New MISTPEN Malware

Despite Russia warnings, Western critical infrastructure remains unprepared

Chrome Introduces One-Time Permissions and Enhanced Safety Check for Safer Browsing

Understanding cyber-incident disclosure

Did a Chinese University Hacking Competition Target a Real Victim?

GSMA Plans End-to-End Encryption for Cross-Platform RCS Messaging

Patch Issued for Critical VMware vCenter Flaw Allowing Remote Code Execution

Australian Police conducted supply chain attack on criminal collaborationware

Announcing the Biggest Update Ever to SEC510: Cloud Security Controls and Mitigations

WhatsApp fix to make View Once chats actually disappear is beaten in less than a week

~ 17 Sep 2024 ~

VMware patches over remote make-me-root holes in vCenter Server, Cloud Foundation

Google Cloud Document AI flaw (still) allows data theft despite bounty payout

The Mystery of Hezbollahs Deadly Exploding Pagers

At least nine dead, thousands hurt in Lebanon after Hezbollah pagers explode

Rhysida ransomware gang ships off Port of Seattle data for $6M

Remotely Exploding Pagers

Secure your organization

Predator spyware kingpins added to US sanctions list

Google Chrome Switches to ML-KEM for Post-Quantum Cryptography Defense

U.S. Treasury Sanctions Executives Linked to Intellexa Predator Spyware Operation

Meta to Train AI Models Using Public U.K. Facebook and Instagram Posts

Python Developers Targeted with Malware During Fake Job Interviews

How to Investigate ChatGPT activity in Google Workspace

ESET Research Podcast: EvilVideo

Binance Warns of Rising Clipper Malware Attacks Targeting Cryptocurrency Users

SolarWinds Issues Patch for Critical ARM Vulnerability Enabling RCE Attacks

China claims Starlink signals can reveal stealth aircraft and what that really means

Chinese national accused by Feds of spear-phishing for NASA, military source code

Microsoft confirms IE bug squashed in Patch Tuesday was exploited zero-day

~ 16 Sep 2024 ~

Elon Musk Is a National Security Risk

The empire of C++ strikes back with Safe C++ blueprint

Snowflake slams 'more MFA' button again months after Ticketmaster, Santander breaches

Apples New Passwords App May Solve Your Login Nightmares

Legacy Ivanti Cloud Service Appliance Being Exploited

Germanys CDU still struggling to restore data months after June cyberattack

Google Fixes GCP Composer Flaw That Could've Led to Remote Code Execution

Prison just got rougher as band of heinously violent cybercrims sentenced to lengthy stints

North Korean Hackers Target Cryptocurrency Users on LinkedIn with RustDoor Malware

From Breach to Recovery: Designing an Identity-Focused Incident Response Playbook

Master Your PCI DSS v4 Compliance with Innovative Smart Approvals

AI security bubble already springing leaks

Chinas quantum* crypto tech may be unhackable, but it's hardly a secret

Apple Drops Spyware Case Against NSO Group, Citing Risk of Threat Intelligence Exposure

Cybercriminals Exploit HTTP Headers for Credential Theft via Large-Scale Phishing Attacks

23andMe settles class-action breach lawsuit for $30 million

~ 14 Sep 2024 ~

Upcoming Speaking Engagements

Security News This Week: A Creative Trick Makes ChatGPT Spit Out Bomb-Making Instructions

Ivanti Warns of Active Exploitation of Newly Patched Cloud Appliance Vulnerability

~ 13 Sep 2024 ~

Friday Squid Blogging: Squid as a Legislative Negotiating Tactic

Feeld dating app's security too open-minded as private data swings into public view

My TedXBillings Talk

Terrorgram Charges Show US Has Had Tools to Crack Down on Far-Right Terrorism All Along

Apple Vision Pro Vulnerability Exposed Virtual Keyboard Inputs to Attackers

17-Year-Old Arrested in Connection with Cyber Attack Affecting Transport for London

The Dark Nexus Between Harm Groups and The Com

TrickMo Android Trojan Exploits Accessibility Services for On-Device Banking Fraud

Say Goodbye to Phishing: Must-Haves to Eliminate Credential Theft

Progress WhatsUp Gold Exploited Just Hours After PoC Release for Critical Flaw

CosmicBeetle joins the ranks of RansomHub affiliates Week in security with Tony Anscombe

New Linux Malware Campaign Exploits Oracle Weblogic to Mine Cryptocurrency