Port 22

~ 21 Aug 2024 ~

How regulatory standards and cyber insurance inform each other

Deadbeat dad faked his own death by hacking government databases

CERT-UA Warns of New Vermin-Linked Phishing Attacks with PoW Bait

GiveWP WordPress Plugin Vulnerability Puts 100,000+ Websites at Risk

Chipmaker Microchip reveals cyber attack whacked manufacturing capacity

~ 20 Aug 2024 ~

An AWS Configuration Issue Could Expose Thousands of Web Apps

~ 21 Aug 2024 ~

Detecting AWS Account Compromise: Key Indicators in CloudTrail Logs for Stolen API Keys

Czech Mobile Users Targeted in New Banking Credential Theft Scheme

~ 20 Aug 2024 ~

Plane-tracking app admits user passwords, SSNs exposed for over 3 years

Approach to mainframe penetration testing on z/OS

Hacking Wireless Bicycle Shifters

Hackers Exploit PHP Vulnerability to Deploy Stealthy Msupedge Backdoor

Anatomy of an Attack

Researchers Uncover TLS Bootstrap Attack on Azure Kubernetes Clusters

Iranian Cyber Group TA453 Targets Jewish Leader with New AnvilEcho Malware

Be careful what you pwish for Phishing in PWA applications

Iran named as source of Trump campaign phish, leaks

Blind Eagle Hackers Exploit Spear-Phishing to Deploy RATs in Latin America

Thousands of Oracle NetSuite Sites at Risk of Exposing Customer Information

CISA Warns of Critical Jenkins Vulnerability Exploited in Ransomware Attacks

Digital wallets can allow purchases with stolen credit cards

~ 19 Aug 2024 ~

OpenAI kills Iranian accounts using ChatGPT to write US election disinfo

Multiple flaws in Microsoft macOS apps unpatched despite potential risks

National Public Data Published Its Own Passwords

National Public Data tells officials 'only' 1.3M people affected by intrusion

New UULoader Malware Distributes Gh0st RAT and Mimikatz in East Asia

Cybercriminals Exploit Popular Software Searches to Spread FakeBat Malware

The State of Ransomware

Xeon Sender Tool Exploits Cloud APIs for Large-Scale SMS Phishing Attacks

BlindEagle flying high in Latin America

The Pentagon Is Planning a Drone Hellscape to Defend Taiwan

Microsoft Patches Zero-Day Flaw Exploited by North Koreas Lazarus Group

Researchers Uncover New Infrastructure Tied to FIN7 Cybercrime Group

RansomHub-linked EDR-killing malware spotted in the wild

Exploring Zero Trust Privileged Access Management: A Fireside Chat

~ 17 Aug 2024 ~

Geofence Warrants Ruled Unconstitutionalbut Thats Not the End of It

OpenAI Blocks Iranian Influence Operation Using ChatGPT for U.S. Election Propaganda

~ 16 Aug 2024 ~

Friday Squid Blog: The Market for Squid Oil Is Growing

After nearly 3B personal records leak online, Florida data broker confirms it was ransacked by cyber-thieves

Unicoin hints at potential data meddling after G-Suite compromise

The Slow-Burn Nightmare of the National Public Data Breach

Attackers Exploit Public .env Files to Breach Cloud and Social Media Accounts

Navigating the future of cybersecurity

Russian Hacker Jailed 3+ Years for Selling Stolen Credentials on Dark Web

Russian Hackers Using Fake Brand Sites to Spread DanaBot and StealC Malware

Multi-Stage ValleyRAT Targets Chinese Users with Advanced Tactics

The Hidden Security Gaps in Your SaaS Apps: Are You Doing Due Diligence?

New Windows IPv6 Zero-Click Vulnerability

How a BEC scam cost a company $60 Million Week in security with Tony Anscombe

New Banshee Stealer Targets 100+ Browser Extensions on Apple macOS Systems

Google Pixel Devices Shipped with Vulnerable App, Leaving Millions at Risk

Best Practices for Securing Your Network with Zero Trust Network Access

~ 15 Aug 2024 ~

NationalPublicData.com Hack Exposes a Nations Data

DARPA, ARPA-H award $14m to 7 AIxCC semifinalists, with a catch

Google raps Iran's APT42 for raining down spear-phishing attacks

Google raps Iran's APT42 for raining down spear-phishing attacks

NIST Releases First Post-Quantum Encryption Algorithms

SolarWinds Releases Patch for Critical Flaw in Web Help Desk Software

Nearly All Google Pixel Phones Exposed by Unpatched Flaw in Hidden Android App

Russian man who sold logins to nearly 3,000 accounts gets 40 months in jail

Tusk: unraveling a complex infostealer campaign

Russian-Linked Hackers Target Eastern European NGOs and Media

Identity Threat Detection and Response Solution Guide

RansomHub Group Deploys New EDR-Killing Tool in Latest Cyber Attacks

Mad Liberator extortion crew emerges on the cyber-crook scene