Port 22

~ 9 Sep 2024 ~

1.7M potentially pwned after payment services provider takes a year to notice break-in

Strengthening enterprise storage against cyber threats

Kremlin-linked COLDRIVER crooks take pro-democracy NGOs for phishy ride

One More Tool Will Do It? Reflecting on the CrowdStrike Fallout

Blind Eagle Targets Colombian Insurance Sector with Customized Quasar RAT

Chinese Hackers Exploit Visual Studio Code in Southeast Asian Cyberattacks

Webinar: How to Protect Your Company from GenAI Data Leakage Without Losing Its Productivity Benefits

Australia Threatens to Force Companies to Break Encryption

Wing Security SaaS Pulse: Continuous Security & Actionable Insights For Free

What You Need to Know About Grok AI and Your Privacy

Progress Software Issues Patch for Vulnerability in LoadMaster and MT Hypervisor

Cybersecurity regulation stepping up

New Android SpyAgent Malware Uses OCR to Steal Crypto Wallet Recovery Keys

Loki: a new private agent for the popular Mythic framework

TIDRONE Espionage Group Targets Taiwan Drone Makers in Cyber Campaign

U.S. Offers $10 Million for Info on Russian Cadet Blizzard Hackers Behind Major Attacks

Predator spyware updated withn dangerous new features, also now harder to track

Why ICS Is the Business: Essential Cybersecurity Strategies for Critical Infrastructure

A Visual Summary of SANS AI Cybersecurity Summit 2024

~ 7 Sep 2024 ~

Despite cyberattacks, water security standards remain a pipe dream

Hackers Threaten to Leak Planned Parenthood Data

North Korean Threat Actors Deploy COVERTCATCH Malware via LinkedIn Job Scams

FBI Cracks Down on Dark Web Marketplace Managed by Russian and Kazakh Nationals

~ 6 Sep 2024 ~

Google says replacing C/C++ in firmware with Rust is easy

Live Video of Promachoteuthis Squid

Cisco merch shoppers stung in Magecart attack

Locked In, Locked Out: How Data Breaches Shatter Refugees Safety

SonicWall Urges Users to Patch Critical Firewall Flaw Amid Possible Exploitation

YubiKey Side-Channel Attack

GeoServer Vulnerability Targeted by Hackers to Deliver Backdoors and Botnet Malware

GitHub Actions Vulnerable to Typosquatting, Exposing Developers to Hidden Malicious Code

The NSA Has a PodcastHere's How to Decode It

Therapy Sessions Exposed by Mental Health Care Firms Unsecured Database

Bitcoin ATM scams skyrocket Week in security with Tony Anscombe

The State of the Virtual CISO Report: MSP/MSSP Security Strategies for 2025

To patch this server, we need to get someone drunk

Critical Security Flaw Found in LiteSpeed Cache Plugin for WordPress

Apache OFBiz Update Fixes High-Severity Flaw Leading to Remote Code Execution

Pavel Durov Criticizes Outdated Laws After Arrest Over Telegram Criminal Activity

~ 5 Sep 2024 ~

Homeland security hopes to scuttle maritime cyber-threats with port infosec testbed

White Houses new fix for cyber job gaps: Serve the nation in infosec

YubiKeys Are a Security Gold Standardbut They Can Be Cloned

US charges Russian GRU hackers behind WhisperGate intrusions

Cisco's Smart Licensing Utility flaws suggest it's pretty dumb on security

Russias Most Notorious Special Forces Unit Now Has Its Own Cyber Warfare Team

Chinese-Speaking Hacker Group Targets Human Rights Studies in Middle East

Veeam Releases Security Updates to Fix 18 Flaws, Including 5 Critical Issues

Why It's So Hard to Fully Block X in Brazil

Quantum computing is coming are you ready?

Security boom is over, with over a third of CISOs reporting flat or falling budgets

U.S. Seizes 32 Pro-Russian Propaganda Domains in Major Disinformation Crackdown

Long Analysis of the M-209

We Hunted Hidden Police Signals at the DNC

The fingerpointing starts as cyber incident at London transport body continues

ESET Research Podcast: HotPage

NIST Cybersecurity Framework (CSF) and CTEM Better Together

Tropic Trooper spies on government entities in the Middle East

Malware Attackers Using MacroPack to Deliver Havoc, Brute Ratel, and PhantomCore

New Cross-Platform Malware KTLVdoor Discovered in Attack on Chinese Trading Firm

Cisco Fixes Two Critical Flaws in Smart Licensing Utility to Prevent Remote Attacks

Security biz Verkada to pay $3m penalty under deal that also enforces infosec upgrade

White House seizes 32 domains, issues criminal charges in massive election-meddling crackdown

North Korean scammers plan wave of stealth attacks on crypto companies, FBI warns

Youve Taken a SANS Course Now What?

~ 4 Sep 2024 ~

Palo Alto takes a big bite out of IBM QRadar security