Port 22

~ 26 Oct 2024 ~

CERT-UA Identifies Malicious RDP Files in Latest Attack on Ukrainian Entities

~ 25 Oct 2024 ~

Chinese Hackers Target Trump Campaign via Verizon Breach

Friday Squid Blogging: Giant Squid Found on Spanish Beach

Just how private is Apple's Private Cloud Compute? You can test it to find out

Watermark for LLM-Generated Text

Researchers Discover Command Injection Flaw in Wi-Fi Alliance's Test Suite

Apple Opens PCC Source Code for Researchers to Identify Bugs in Cloud AI Security

Eliminating AI Deepfake Threats: Is Your Identity Security AI-Proof?

SEC Charges 4 Companies Over Misleading SolarWinds Cyberattack Disclosures

Irish Watchdog Imposes Record 310 Million Fine on LinkedIn for GDPR Violations

Putin's pro-Trump trolls accuse Harris of poaching rhinos

~ 24 Oct 2024 ~

AWS Cloud Development Kit flaw exposed accounts to full takeover

Emergency patch: Cisco fixes bug under exploit in brute-force attacks

New Qilin.B Ransomware Variant Emerges with Improved Encryption and Evasion Tactics

AWS Cloud Development Kit Vulnerability Exposes Users to Potential Account Takeover Risks

Cisco Issues Urgent Fix for ASA and FTD Software Vulnerability Under Active Attack

VIMESA VHF/FM Transmitter Blue Plus

iniNet Solutions SpiderControl SCADA PC HMI Editor

Deep Sea Electronics DSE855

Bitwarden's FOSS halo slips as new SDK requirement locks down freedoms

Why Phishing-Resistant MFA Is No Longer Optional: The Hidden Risks of Legacy MFA

Ransomware's ripple effect felt across ERs as patient care suffers

Lazarus Group Exploits Google Chrome Vulnerability to Control Infected Devices

Meet ZachXBT, the Masked Vigilante Tracking Down Billions in Crypto Scams and Thefts

ESET Research Podcast: CosmicBeetle

Voice-enabled AI agents can automate everything, even your phone scams

Fortinet Warns of Critical Vulnerability in FortiManager Under Active Exploitation

China's top messaging app WeChat banned from Hong Kong government computers

Anthropic's latest Claude model can interact with computers what could go wrong?

Perfctl malware strikes again as crypto-crooks target Docker Remote API servers

Samsung phone users under attack, Google warns

~ 23 Oct 2024 ~

Penn State pays DoJ $1.25M to settle cybersecurity compliance case

Warning! FortiManager critical vulnerability under active attack

'Satanic' data thief claims to have slipped into 350M Hot Topic shoppers info

Microsoft SharePoint RCE flaw exploits in the wild you've had 3 months to patch

Are Automatic License Plate Scanners Constitutional?

New Grandoreiro Banking Malware Variants Emerge with Advanced Tactics to Evade Detection

Microsoft Warns Foreign Disinformation Is Hitting the US Election From All Directions

Nigeria Drops Charges Against Tigran Gambaryan, Jailed Binance Exec and Former IRS Agent

Permiso State of Identity Security 2024: A Shake-up in Identity Security Is Looming Large

CISA Warns of Active Exploitation of Microsoft SharePoint Vulnerability (CVE-2024-38094)

The Global Surveillance Free-for-All in Mobile Ad Data

The Crypto Game of Lazarus APT: Investors vs. Zero-days

Researchers Reveal 'Deceptive Delight' Method to Jailbreak AI Models

Think Youre Secure? 49% of Enterprises Underestimate SaaS Risks

Ransomware Gangs Use LockBit's Fame to Intimidate Victims in Latest Attacks

Embargo ransomware: RocknRust

Millions of Android and iOS users at risk from hardcoded creds in popular apps

~ 22 Oct 2024 ~

US lawmakers push DOJ to prosecute tax prep firms for leaking taxpayer data to big tech

Grandoreiro, the global trojan with grandiose ambitions

Exposed United Nations Database Left Sensitive Information Accessible Online

TSMC blows whistle on potential sanctions-busting shenanigans from Huawei

Gophish Framework Used in Phishing Campaigns to Deploy Remote Access Trojans

VMware fixes critical RCE, make-me-root bugs in vCenter -for the second time

Tech firms to pay millions in SEC penalties for misleading SolarWinds disclosures

Microsoft Threat Intelligence healthcare ransomware report highlights need for collective industry action

Akira ransomware is encrypting victims again following pure extortion fling

The Shitposting Cartoon Dogs Sending Trucks, Drones, and Weapons to Ukraines Front Lines

Security Flaw in Styra's OPA Exposes NTLM Hashes to Remote Attackers

Cybercriminals Exploiting Docker API Servers for SRBMiner Crypto Mining Attacks

ICONICS and Mitsubishi Electric Products

No, The Chinese Have Not Broken Modern Encryption Systems with a Quantum Computer

A Comprehensive Guide to Finding Service Accounts in Active Directory

Bumblebee and Latrodectus Malware Return with Sophisticated Phishing Strategies

Malicious npm Packages Target Developers' Ethereum Wallets with SSH Backdoor

VMware Releases vCenter Server Update to Fix Critical RCE Vulnerability

Pixel perfect Ghostpulse malware loader hides inside PNG image files

CISA Adds ScienceLogic SL1 Vulnerability to Exploited Catalog After Active Zero-Day Attack

~ 21 Oct 2024 ~

Chinas Spamouflage cranks up trolling of US Senator Rubio as election day looms

Sophos to snatch Secureworks in $859M buyout: Why fight when you can just buy?

Misinformed about misinformation Gabrielle Lims piece for the Harvard Kennedy School Misinformation Review

The Citizen Lab at Regardless of Frontiers: First Amendment & Exchange of Ideas Across Borders

The billionaire behind Trump's 'unhackable' phone is on a mission to fight Tesla's FSD

ICE's $2 Million Contract With a Spyware Vendor Is Under White House Review

macOS HM Surf vuln might already be under exploit by major malware family

Chinese Nation-State Hackers APT41 Hit Gambling Sector for Financial Gain

Guide: The Ultimate Pentest Checklist for Full-Stack Security

THN Cybersecurity Recap: Top Threats, Tools and News (Oct 14 - Oct 20)

AI and the SEC Whistleblower Program

How a Trump Win Could Unleash Dangerous AI

Stealer here, stealer there, stealers everywhere!

US Government Says Relying on Chinese Lithium Batteries Is Too Risky

Google Voice scams: What are they and how do I avoid them?

Researchers Discover Severe Security Flaws in Major E2EE Cloud Storage Providers

Tesla, Intel, deny they're the foreign company China just accused of making maps that threaten national security

Internet Archive exposed again this time through Zendesk

~ 20 Oct 2024 ~

Open source LLM tool primed to sniff out Python zero-days

Hackers Exploit Roundcube Webmail XSS Vulnerability to Steal Login Credentials

~ 19 Oct 2024 ~

Google Chromes uBlock Origin Purge Has Begun

Acronym Overdose Navigating the Complex Data Security Landscape

Crypt Ghouls Targets Russian Firms with LockBit 3.0 and Babuk Ransomware Attacks

The Disinformation Warning Coming From the Edge of Europe

~ 18 Oct 2024 ~

Jetpack fixes 8-year-old flaw affecting millions of WordPress sites

Friday Squid Blogging: Squid Scarf

Justice Department Indicts Tech CEO for Falsifying Security Certifications

North Korean IT Workers in Western Firms Now Demanding Ransom for Stolen Data

Brazil Arrests USDoD, Hacker in FBI Infragard Breach

Alleged Bitcoin crook faces 5 years after SEC's X account pwned

Threat actors exploiting zero-days faster than ever Week in security with Tony Anscombe

The Ultimate DSPM Guide: Webinar on Building a Strong Data Security Posture