Port 22

~ 5 Sep 2024 ~

New Cross-Platform Malware KTLVdoor Discovered in Attack on Chinese Trading Firm

Cisco Fixes Two Critical Flaws in Smart Licensing Utility to Prevent Remote Attacks

Security biz Verkada to pay $3m penalty under deal that also enforces infosec upgrade

White House seizes 32 domains, issues criminal charges in massive election-meddling crackdown

North Korean scammers plan wave of stealth attacks on crypto companies, FBI warns

Youve Taken a SANS Course Now What?

~ 4 Sep 2024 ~

Palo Alto takes a big bite out of IBM QRadar security

Copilot for Microsoft 365 might boost productivity if you survive the compliance minefield

Planned Parenthood confirms cyber-attack as RansomHub threatens to leak data

North Korean Hackers Targets Job Seekers with Fake FreeConference App

Cicada ransomware may be a BlackCat/ALPHV rebrand and upgrade

Google Confirms CVE-2024-32896 Exploited in the Wild, Releases Android Security Patch

Hackers Hijack 22,000 Removed PyPI Packages, Spreading Malicious Code to Developers

Zyxel Patches Critical OS Command Injection Flaw in Access Points and Routers

Security Researcher Sued for Disproving Government Statements

The New Effective Way to Prevent Account Takeovers

Mallox ransomware: in-depth analysis and evolution

The key considerations for cyber insurance: A pragmatic approach

Clearview AI Faces 30.5M Fine for Building Illegal Facial Recognition Database

Hackers Use Fake GlobalProtect VPN Software in New WikiLoader Malware Attack

The Japanese Robot Controversy Lurking in Israels Military Supply Chain

Telegram apologizes to South Korea and takes down smutty deepfakes

Why SANS Live Training? Whats in It for You and Your Career?

What to Expect at SANS Live Training Events

Ex-senior New York State staffer charged in cash-for-favors scandal with China

~ 3 Sep 2024 ~

White House thinks it's time to fix the insecure glue of the internet: Yup, BGP

UK trio pleads guilty to operating $10M MFA bypass biz

Spamouflage trolls pretend to be American patriots on X, TikTok ahead of US presidential election

List of Old NSA Training Videos

Sextortion Scams Now Include Photos of Your Home

Data watchdog fines Clearview AI $33M for 'illegal' data collection

Hacktivists Exploits WinRAR Vulnerability in Attacks Against Russia and Belarus

New Rust-Based Ransomware Cicada3301 Targets Windows and Linux Systems

LOYTEC Electronics LINX Series

A deep dive into the most interesting incident response cases of last year

The US Navy Is Going All In on Starlink

Transport for London confirms cyberattack, assures us all is well

Rocinante Trojan Poses as Banking Apps to Steal Sensitive Data from Brazilian Android Users

In plain sight: Malicious ads hiding in search results

Application builders get ready

IT threat evolution in Q2 2024. Non-mobile statistics

IT threat evolution in Q2 2024. Mobile statistics

IT threat evolution Q2 2024

Secrets Exposed: Why Your CISO Should Worry About Slack

New Flaws in Microsoft macOS Apps Could Allow Hackers to Gain Unrestricted Access

Ex-Engineer Charged in Missouri for Failed $750,000 Bitcoin Extortion Attempt

The Top 5 Items to Bring Along to a Live Training Event

~ 2 Sep 2024 ~

Owners of 1-Time Passcode Theft Service Plead Guilty

Telegram CEO was 'too free' on content moderation, says Russian minister

RansomHub Ransomware Group Targets 210 Victims Across Critical Sectors

SQL Injection Attack on Airport Security

Head Mare: adventures of a unicorn in Russia and Belarus

Webinar: Learn to Boost Cybersecurity with AI-Powered Vulnerability Management

Next-Generation Attacks, Same Targets - How to Protect Your Users' Identities

Malicious npm Packages Mimicking 'noblox.js' Compromise Roblox Developers Systems

Novel attack on Windows spotted in phishing campaign run from and targeting China

How to Prepare for Your Upcoming SANS Live Training Event

~ 31 Aug 2024 ~

Check your IP cameras: There's a new Mirai botnet on the rise

North Korean Hackers Deploy FudModule Rootkit via Chrome Zero-Day Exploit

Taylor Swift Concert Terror Plot Was Thwarted by Key CIA Tip

~ 30 Aug 2024 ~

RansomHub hits 210 victims in just 6 months

Friday Squid Blogging: Economic Fallout from Falklands Halting Squid Fishing

Green Berets storm building after hacking its Wi-Fi

Emile Dirks at the 2024 APSA Annual Meeting & Exhibition

North Korean threat actor Citrine Sleet exploiting Chromium zero-day

Tired of airport security queues? SQL inject yourself into the cockpit, claim researchers

Cyberattackers Exploit Google Sheets for Malware Control in Global Espionage Campaign

Iranian Hackers Set Up New Network to Target U.S. Political Campaigns

New Malware Masquerades as Palo Alto VPN Targeting Middle East Users

Breaking Down AD CS Vulnerabilities: Insights for InfoSec Professionals

North Korean Hackers Target Developers with Malicious npm Packages

SANS Institute Unveils Critical Infrastructure Strategy Guide for 2024: A Call to Action for Securing ICS/OT Environments

New Cyberattack Targets Chinese-Speaking Businesses with Cobalt Strike Payloads

Atlassian Confluence Vulnerability Exploited in Crypto Mining Campaigns

Iran hunts down double agents with fake recruiting sites, Mandiant reckons

~ 29 Aug 2024 ~

US indicts duo over alleged Swatting spree that targeted elected officials

Oh, great. Attacks developed by spyware vendors are being re-used by Russia's Cozy Bear cretins

Feds claim sinister sysadmin locked up thousands of Windows workstations, demanded ransom

Enhancing Cybersecurity and Resilience for Transnational Dissidents

Rock Chrome hard enough and get paid half a million

Vietnamese Human Rights Group Targeted in Multi-Year Cyberattack by APT32

Russian Hackers Exploit Safari and Chrome Flaws in High-Profile Cyberattack

Adm. Grace Hoppers 1982 NSA Lecture Has Been Published

Powerful Spyware Exploits Enable a New String of Watering Hole Attacks

Brain Cipher claims attack on Olympic venue, promises 300 GB data leak

Rockwell Automation ThinManager ThinServer

Delta Electronics DTN Soft

U.S. Agencies Warn of Iranian Hacking Group's Ongoing Ransomware Attacks

How AitM Phishing Attacks Bypass MFA and EDRand How to Fight Back

Unpatched AVTECH IP Camera Flaw Exploited by Hackers for Botnet Attacks

Google, Apple, and Discord Let Harmful AI 'Undress' Websites Use Their Sign-On Systems

French Authorities Charge Telegram CEO with Facilitating Criminal Activities on Platform

CrowdStrike's meltdown didn't dent its market dominance yet

~ 28 Aug 2024 ~

When Get-Out-The-Vote Efforts Look Like Phishing

Microsoft hosts a security summit but no press, public allowed

Proof-of-concept code released for zero-click critical Windows vuln

The art and science behind Microsoft threat hunting: Part 3

Iran's Pioneer Kitten hits US networks via buggy Check Point, Palo Alto gear

Dick's Sporting Goods discloses cyberattack

Fortra Issues Patch for High-Risk FileCatalyst Workflow Security Vulnerability