Port 22

~ 14 Nov 2024 ~

Siemens TeleControl Server

Kids' shoemaker Start-Rite trips over security again, spilling customer card info

NatWest blocks bevy of apps in clampdown on unmonitorable comms

TikTok Pixel Privacy Nightmare: A New Case Study

More Spyware, Fewer Rules: What Trumps Return Means for US Cybersecurity

New RustyAttr Malware Targets macOS Through Extended Attribute Abuse

Asda security chief replaced, retailer sheds jobs during Walmart tech divorce

rimeware and financial cyberthreats in 2025

Five Eyes infosec agencies list 2024's most exploited software flaws

Five Eyes infosec agencies list 2023's most exploited software flaws

Russian Hackers Exploit New NTLM Flaw to Deploy RAT Malware via Phishing Emails

China-backed crews compromised 'multiple' US telcos in 'significant cyber espionage campaign'

Teen Behind Hundreds of Swatting Attacks Pleads Guilty to Federal Charges

ShrinkLocker ransomware scrambled your files? Free decryption tool to the rescue

~ 13 Nov 2024 ~

Data broker amasses 100M+ records on people then someone snatches, sells it

Ransomware fiends boast they've stolen 1.4TB from US pharmacy network

These Guys Hacked AirPods to Give Their Grandmas Hearing Aids

Microsoft slips Task Manager and processor count fixes into Patch Tuesday

Microsoft Data Security Index annual reporthighlights evolving generative AI security needs

Hamas-Affiliated WIRTE Employs SameCoin Wiper in Disruptive Attacks Against Israel

Free Decryptor Released for BitLocker-Based ShrinkLocker Ransomware Victims

Iranian Hackers Use "Dream Job" Lures to Deploy SnailResin Malware in Aerospace Attacks

Mapping License Plate Scanners in the US

ICE Started Ramping Up Its Surveillance Arsenal Immediately After Donald Trump Won

Comprehensive Guide to Building a Strong Browser Security Program

Threats in space (or rather, on Earth): internet-exposed GNSS receivers

ESET Research Podcast: Gamaredon

OvrC Platform Vulnerabilities Expose IoT Devices to Remote Attacks and Code Execution

Microsoft Fixes 90 New Flaws, Including Actively Exploited NTLM and Task Scheduler Bugs

Admins can give thanks this November for dollops of Microsoft patches

China's Volt Typhoon crew and its botnet surge back with a vengeance

Air National Guardsman gets 15 years after splashing classified docs on Discord

~ 12 Nov 2024 ~

Microsoft Patch Tuesday, November 2024 Edition

Here's what we know about the suspected Snowflake data extortionists

'Cybersecurity issue' at Food Lion parent blamed for US grocery mayhem

HTTP your way into Citrix's Virtual Apps and Desktops with fresh exploit code

Managing third-party risks in complex IT environments

New Flaws in Citrix Virtual Apps Enable RCE Attacks via MSMQ Misconfiguration

New Phishing Tool GoIssue Targets GitHub Developers in Bulk Email Campaigns

Amazon confirms employee data exposed in leak linked to MOVEit vulnerability

North Korean Hackers Target macOS Using Flutter-Embedded Malware

Criminals Exploiting FBI Emergency Data Requests

Subnet Solutions PowerSYSTEM Center

Rockwell Automation FactoryTalk View ME

Hitachi Energy TRO600

The WIRED Guide to Protecting Yourself From Government Surveillance

The Real Problem With Banning Masks at Protests

5 Ways Behavioral Analytics is Revolutionizing Incident Response

Beats by bot: The AI remix revolution

New Ymir Ransomware Exploits Memory for Stealthy Attacks; Targets Corporate Networks

~ 11 Nov 2024 ~

Assistant Professor, Information Security

Assistant Professor, Social Sciences and Digital Technologies

DoD Zero Trust Strategy proves security benchmark years ahead of schedule with Microsoft collaboration

FBI issues warning as crooks ramp up emergency data request scams

Dark web crypto laundering kingpin sentenced to 12.5 years in prison

THN Recap: Top Cybersecurity Threats, Tools, and Practices (Nov 04 - Nov 10)

New GootLoader Campaign Targets Users Searching for Bengal Cat Laws in Australia

The ROI of Security Investments: How Cybersecurity Leaders Prove It

The AI Machine Gun of the Future Is Already Here

Security Flaws in Popular ML Toolkits Enable Server Hijacks, Privilege Escalation

Ymir: new stealthy ransomware in the wild

Beyond the checkbox: Demystifying cybersecurity compliance

HPE Issues Critical Security Patches for Aruba Access Point Vulnerabilities

Cybercriminals Use Excel Exploit to Spread Fileless Remcos RAT Malware

Alleged Snowflake attacker gets busted by Canadians politely, we assume

New FOR518: Mac and iOS Forensic Analysis Poster Update

~ 9 Nov 2024 ~

FBI: Spike in Hacked Police Emails, Fake Subpoenas

Auto-Rebooting iPhones Are Causing Chaos for Cops

Palo Alto Advises Securing PAN-OS Interface Amid Potential RCE Threat Concerns

Bitcoin Fog Founder Sentenced to 12 Years for Cryptocurrency Money Laundering

~ 8 Nov 2024 ~

Friday Squid Blogging: Squid-A-Rama in Des Moines

Irene Poetranto on the panel What the World Can Learn from Indonesias Democracy

Scattered Spider, BlackCat claw their way back from criminal underground

AndroxGh0st Malware Integrates Mozi Botnet to Target IoT and Cloud Services

IcePeony and Transparent Tribe Target Indian Entities with Cloud-Based Tools

AI Industry is Trying to Subvert the Definition of Open Source AI

Malicious NPM Packages Target Roblox Users with Data-Stealing Malware

The vCISO Academy: Transforming MSPs and MSSPs into Cybersecurity Powerhouses

QSC: A multi-plugin framework used by CloudComputating group in cyberespionage campaigns

Life on a crooked RedLine: Analyzing the infamous infostealers backend

Webinar: Learn How Storytelling Can Make Cybersecurity Training Fun and Effective

New CRON#TRAP Malware Infects Windows by Hiding in Linux VM to Evade Antivirus

CISA Alerts to Active Exploitation of Critical Palo Alto Networks Vulnerability

Winos4.0 abuses gaming apps to infect, control Windows machines

Cloud Security Strategy: First Principles and Future Opportunities (Part 5 of 5), Key Insights from Cloud Security Experts: Straight Talk on Cloud Security

Cloud Security Strategy: First Principles and Future Opportunities (Part 4 of 5), Evolving Cloud Security with a Modern Approach

Cloud Security Strategy: First Principles and Future Opportunities (Part 3 of 5), Modernizing Identity: Navigating Challenges and Embracing Cloud Solutions

Cloud Security Strategy: First Principles and Future Opportunities (Part 2 of 5), Secure by Design: Elevating Security Beyond Defaults

Cloud Security Strategy: First Principles and Future Opportunities (Part 1 of 5), Building a Cloud Security Strategy: A Step-by-Step Guide

~ 7 Nov 2024 ~

Don't open that 'copyright infringement' email attachment it's an infostealer

764 Terror Network Member Richard Densmore Sentenced to 30 Years in Prison

More value, less risk: How to implement generative AI across the organization securely and responsibly

Prompt Injection Defenses Against LLM Cyberattacks

North Korean Hackers Target Crypto Firms with Hidden Risk Malware on macOS

Subverting LLM Coders

Delta Electronics DIAScreen

Bosch Rexroth IndraDrive

Beckhoff Automation TwinCAT Package Manager

A Hacker's Guide to Password Cracking

Cisco scores a perfect CVSS 10 with critical flaw in its wireless system