Port 22

~ 7 Nov 2024 ~

ESET APT Activity Report Q2 2024Q3 2024

5 Most Common Malware Techniques in 2024

SteelFox and Rhadamanthys Malware Use Copyright Scams, Driver Exploits to Target Victims

China-Aligned MirrorFace Hackers Target EU Diplomats with World Expo 2025 Bait

Malicious PyPI Package Fabrice Found Stealing AWS Keys from Thousands of Developers

Cisco Releases Patch for Critical URWB Vulnerability in Industrial Wireless Systems

Canada Orders TikTok to Shut Down Canadian Operations Over Security Concerns

Officials warn of Russia's tech-for-troops deal with North Korea amid Ukraine conflict

~ 6 Nov 2024 ~

Cybercrooks are targeting Bengal cat lovers in Australia for some reason

VEILDrive Attack Exploits Microsoft Services to Evade Detection and Distribute Malware

Zero Trust Workshop: Advance your knowledge with an online resource

Operation Synergia II sees Interpol swoop on global cyber crims

Jane Goodall: Reasons for hope | Starmus highlights

New Winos 4.0 Malware Infects Gamers Through Malicious Game Optimization Apps

Cyberattackers stole Microlise staff data following DHL, Serco disruption

IoT Devices in Password-Spraying Botnet

9 Steps to Get CTEM on Your 2025 Budgetary Radar

INTERPOL Disrupts Over 22,000 Malicious Servers in Global Crackdown on Cybercrime

New SteelFox Trojan mimics software activators, stealing sensitive data and mining cryptocurrency

South Korea Fines Meta $15.67M for Illegally Sharing Sensitive User Data with Advertisers

Google Cloud to Enforce Multi-Factor Authentication by 2025 for All Users

China's Volt Typhoon reportedly breached Singtel in 'test-run' for US telecom attacks

Scumbag puts 'stolen' Nokia source code, SSH and RSA keys, more up for sale

~ 5 Nov 2024 ~

Schneider Electric ransomware crew demands $125k paid in baguettes

Russia Is Going All Out on Election Day Interference

A Kansas pig butchering: CEO who defrauded bank, church, friends gets 24 years

Man Arrested for Snowflake Hacking Spree Faces US Extradition

Criminals open DocuSign's Envelope API to make BEC special delivery

FBI Seeks Public Help to Identify Chinese Hackers Behind Global Cyber Intrusions

Canadian Man Arrested in Snowflake Data Extortions

Flaw in Right-Wing Election Integrity App Exposes Voter-Suppression Plan and User Data

Ongoing typosquatting campaign impersonates hundreds of popular npm packages

The Citizen Lab at the Hague Programs 2024 Conference on International Cyber Security

Washington courts grapple with statewide outage after 'unauthorized activity'

New Android Banking Malware 'ToxicPanda' Targets Users with Fraudulent Money Transfers

AIs Discovering Vulnerabilities

Leveraging Wazuh for Zero Trust security

Synology Urges Patch for Critical Zero-Click RCE Flaw Affecting Millions of NAS Devices

Google claims Big Sleep 'first' AI to spot freshly committed security bug that fuzzing missed

Malware Campaign Uses Ethereum Smart Contracts to Control npm Typosquat Packages

Canadian Suspect Arrested Over Snowflake Data Breach and Extortion Attacks

Google Warns of Actively Exploited CVE-2024-43093 Vulnerability in Android System

~ 4 Nov 2024 ~

Columbus, Ohio, confirms 500K people affected by Rhysida ransomware attack

How Microsoft Defender for Office 365 innovated to address QR code phishing attacks

Critical Flaws in Ollama AI Framework Could Enable DoS, Model Theft, and Poisoning

Sophos Versus the Chinese Hackers

German Police Disrupt DDoS-for-Hire Platform dstat[.]cc; Suspects Arrested

Why the long name? Okta discloses auth bypass bug affecting 52-character usernames

THN Recap: Top Cybersecurity Threats, Tools, and Practices (Oct 28 - Nov 03)

Inside the Massive Crime Industry Thats Hacking Billion-Dollar Companies

Cyber Threats That Could Impact the Retail Industry This Holiday Season (and What to Do About It)

Public sector cyber break-ins: Our money, our lives, our right to know

Googles AI Tool Big Sleep Finds Zero-Day Vulnerability in SQLite Database Engine

New FakeCall Malware Variant Hijacks Android Devices for Fraudulent Banking Calls

~ 3 Nov 2024 ~

6 IT contractors arrested for defrauding Uncle Sam out of millions

~ 2 Nov 2024 ~

Florida Man Accused of Hacking Disney World Menus, Changing Font to Wingdings

Financial institutions told to get their house in order before the next CrowdStrike strikes

~ 1 Nov 2024 ~

Booking.com Phishers May Leave You With Reservations

Friday Squid Blogging: Squid Sculpture in Massachusetts Building

Inside Irans Cyber Playbook: AI, Fake Hosting, and Psychological Warfare

UK councils bat away DDoS barrage from pro-Russia keyboard warriors

Massive Git Config Breach Exposes 15,000 Credentials; 10,000 Private Repos Cloned

5 SaaS Misconfigurations Leading to Major Fu*%@ Ups

Zero-Click Flaw Exposes Potentially Millions of Popular Storage Devices to Attack

Microsoft Warns of Chinese Botnet Exploiting Router Flaws for Credential Theft

Microsoft Delays Windows Copilot+ Recall Release Over Privacy Concerns

Hack Nintendo's alarm clock to show cat pics? Let's-a-go!

Stop LUCR-3 Attacks: Learn Key Identity Security Tactics in This Expert Webinar

New Phishing Kit Xi gu Targets Users Across Five Countries With 2,000 Fake Sites

~ 31 Oct 2024 ~

Gang gobbles 15K credentials from cloud and email providers' garbage Git configs

LottieFiles Issues Warning About Compromised "lottie-player" npm Package

Microsoft now a Leader in three major analyst reports for SIEM

Microsoft now a Leader in three major analyst reports for SIEM

Chinese threat actor Storm-0940 uses credentials from password spray attacks from a covert network

7 cybersecurity trends and tips for small and medium businesses to stay protected

Roger Grimes on Prioritizing Cybersecurity Advice

Tracking World Leaders Using Strava

New LightSpy Spyware Version Targets iPhones with Increased Surveillance Tactics

Month in security with Tony Anscombe October 2024 edition

Inside Sophos' 5-Year War With the Chinese Hackers Hijacking Its Devices

Rockwell Automation FactoryTalk ThinManager

LottieFiles supply chain attack exposes users to malicious crypto wallet drainer

Enterprise Identity Threat Report 2024: Unveiling Hidden Threats to Corporate Identities

LiteSpeed Cache Plugin Vulnerability Poses Significant Risk to WordPress Websites

Loose-lipped neural networks and lazy scammers

The Untold Story of Trump's Failed Attempt to Overthrow Venezuela's President

Tower PC case used as 'creative cavity' by drug importer

Chinese attackers accessed Canadian government networks for five years

~ 30 Oct 2024 ~

Windows Themes zero-day bug exposes users to NTLM credential theft

Microsoft Ignite: Sessions and demos to improve your security strategy

North Korean Group Collaborates with Play Ransomware in Significant Cyber Attack

Were a Fortress Now: The Militarization of US Elections Is Here

Fired Disney staffer accused of hacking menu to add profanity, wingdings, while removing allergen info

Simson Garfinkel on Spooky Cryptographic Action at a Distance

Simpson Garfinkel on Spooky Cryptographic Action at a Distance

Change Healthcare Breach Hits 100M Americans

Opera Browser Fixes Big Security Hole That Could Have Exposed Your Information

Malvertising Campaign Hijacks Facebook Accounts to Spread SYS01stealer Malware

Russian spies use remote desktop protocol files in unusual mass phishing drive

Researchers Uncover Python Package Targeting Crypto Wallets with Malicious Code