Port 22

~ 27 Dec 2024 ~

Threat landscape for industrial automation systems in Q3 2024

This month in security with Tony Anscombe December 2024 edition

Palo Alto Releases Patch for PAN-OS DoS Flaw Update Immediately

FICORA and Kaiten Botnets Exploit Old D-Link Vulnerabilities for Global Attacks

Apache MINA CVE-2024-52046: CVSS 10.0 Flaw Enables RCE via Unsafe Serialization

~ 26 Dec 2024 ~

Scams Based on Fake Google Emails

Brazilian Hacker Charged for Extorting $3.2M in Bitcoin After Breaching 300,000 Accounts

The Worst Hacks of 2024

~ 25 Dec 2024 ~

Ruijie Networks' Cloud Platform Flaws Could Expose 50,000 Devices to Remote Attacks

Critical SQL Injection Vulnerability in Apache Traffic Control Rated 9.9 CVSS Patch Now

Former NSA cyberspy's not-so-secret hobby: Hacking Christmas lights

You Need to Create a Secret Password With Your Family

Iran's Charming Kitten Deploys BellaCPP: A New C++ Variant of BellaCiao Malware

~ 24 Dec 2024 ~

How Androxgh0st rose from Mozi's ashes to become 'most prevalent malware'

Researchers Uncover PyPI Packages Stealing Keystrokes and Hijacking Social Accounts

Spyware Maker NSO Group Found Liable for Hacking WhatsApp

What do ransomware and Jesus have in common? A birth month and an unwillingness to die

North Korean Hackers Pull Off $308M Bitcoin Heist from Crypto Firm DMM Bitcoin

One third of adults can't delete device data

CISA Adds Acclaim USAHERDS Vulnerability to KEV Catalog Amid Active Exploitation

Apache Tomcat Vulnerability CVE-2024-56337 Exposes Servers to RCE Attacks

~ 23 Dec 2024 ~

'That's not a bug, it's a feature' takes on a darker tone when malware's involved

Criminal Complaint against LockBit Ransomware Writer

HBO documentary Surveilled investigates the growing business of commercial spyware

AI Could Generate 10,000 Malware Variants, Evading Detection in 88% of Case

Suspected LockBit dev, facing US extradition, 'did it for the money'

THN Weekly Recap: Top Cybersecurity Threats, Tools and Tips

Rockstar2FA Collapse Fuels Expansion of FlowerStorm Phishing-as-a-Service

Cloud Atlas seen using a new tool in its attacks

The Invisible Russia-Ukraine Battlefield

Chris Hadfield: The sky is falling what to do about space junk? | Starmus highlights

Top 10 Cybersecurity Trends to Expect in 2025

UK ICO not happy with Google's plans to allow device fingerprinting

U.S. Judge Rules Against NSO Group in WhatsApp Pegasus Spyware Case

Italy Fines OpenAI 15 Million for ChatGPT GDPR Data Privacy Violations

SANS Threat Analysis Rundown in Review: Breaking Down December 2024s Discussion

~ 21 Dec 2024 ~

Mystery Drone Sightings Lead to FAA Ban Despite No Detected Threats

LockBit Developer Rostislav Panev Charged for Billions in Global Ransomware Damages

~ 20 Dec 2024 ~

Friday Squid Blogging: Squid Sticker

Lazarus Group Spotted Targeting Nuclear Engineers with CookiePlus Malware

BellaCPP: Discovering a new BellaCiao variant written in C++

ESET Research Podcast: Telekopye, again

Rspack npm Packages Compromised with Crypto Mining Malware in Supply Chain Attack

Sophos Issues Hotfixes for Critical Firewall Flaws: Update to Prevent Exploitation

Hackers Exploiting Critical Fortinet EMS Vulnerability to Deploy Remote Access Tools

CISA Adds Critical Flaw in BeyondTrust Software to Exploited Vulnerabilities List

Infosec experts divided on AI's potential to assist red teams

SEC587: Advanced Open-Source Intelligence Course Update Whats New?

~ 19 Dec 2024 ~

Rebekah Brown discusses the global abuse of commercial spyware on TaiwanPlus

Web Hacking Service Araneida Tied to Turkish IT Firm

New Microsoft guidance for the CISA Zero Trust Maturity Model

Mailbox Insecurity

Thousands Download Malicious npm Libraries Impersonating Legitimate Tools

Juniper Warns of Mirai Botnet Targeting SSR Devices with Default Passwords

Attackers exploiting a patched FortiClient EMS vulnerability in the wild

Tibbo AggreGate Network Manager

Siemens User Management Component

Schneider Electric Modicon Controllers

Schneider Electric Accutech Manager

Hitachi Energy SDM600

Hitachi Energy RTU500 series CMU

Delta Electronics DTM Soft

This VPN Lets Anyone Use Your Internet Connection. What Could Go Wrong?

Fortinet Warns of Critical FortiWLM Flaw That Could Lead to Admin Access Exploits

Unwrapping Christmas scams | Unlocked 403 cybersecurity podcast (special edition)

Lazarus group evolves its infection chain with old and new malware

CISA Mandates Cloud Security for Federal Agencies by 2025 Under Binding Directive 25-01

Dutch DPA Fines Netflix 4.75 Million for GDPR Violations Over Data Transparency

UAC-0125 Abuses Cloudflare Workers to Distribute Malware Disguised as Army+ App

Don't fall for a mail asking for rapid Docusign action it may be an Azure account hijack phish

~ 18 Dec 2024 ~

US reportedly mulls TP-Link router ban over national security risk

Congress Again Fails to Limit Scope of Spy Powers in New Defense Bill

The Citizen Lab on CBCs The National: How foreign governments go after people in Canada

Microsoft won't let customers opt out of passkey push

Foundry study highlights the benefits of a unified security platform in new e-book

New Advances in the Understanding of Prime Numbers

Boffins trick AI model into giving up its secrets

INTERPOL Pushes for "Romance Baiting" to Replace "Pig Butchering" in Scam Discourse

HubPhish Exploits HubSpot Tools to Target 20,000 European Users for Credential Theft

How to Lose a Fortune with Just One Bad Click

Not Your Old ActiveState: Introducing our End-to-End OS Platform

APT29 Hackers Target High-Value Victims Using Rogue RDP Servers and PyRDP

ONLY Cynet Delivers 100% Protection and 100% Detection Visibility in the 2024 MITRE ATT&CK Evaluation

Analysis of Cyber Anarchy Squad attacks targeting Russian and Belarusian organizations

Cybersecurity is never out-of-office: Protecting your business anytime, anywhere

BeyondTrust Issues Urgent Patch for Critical Vulnerability in PRA and RS Products

Meta Fined 251 Million for 2018 Data Breach Impacting 29 Million Accounts

Patch Alert: Critical Apache Struts Flaw Found, Exploitation Attempts Detected

Phishers cast wide net with spoofed Google Calendar invites

A Prescription for Windows Prefetch Analysis

~ 17 Dec 2024 ~

Interpol wants everyone to stop saying 'pig butchering'

Critical security hole in Apache Struts under exploit

Hacking Digital License Plates

Microsoft Defender for Cloud named a Leader in Frost Radar for CNAPP for the second year in a row!

Attackers Exploit Microsoft Teams and AnyDesk to Deploy DarkGate Malware

Intel Officials Warned Police That US Cities Arent Ready for Hostile Drones

Ireland fines Meta for 2018 'View As' breach that exposed 30M accounts

Hackers Use Microsoft MSC Files to Deploy Obfuscated Backdoor in Pakistan Attacks

Even Great Companies Get Breached Find Out Why and How to Stop It

Drug Dealers Have Moved Onto Social Media