Port 22

~ 15 Aug 2024 ~

GitHub Vulnerability 'ArtiPACKED' Exposes Repositories to Potential Takeover

New Cyber Threat Targets Azerbaijan and Israel Diplomats, Stealing Sensitive Data

Over 40 million Kakao Pay users' data somehow ended up with Alipay

New Gafgyt Botnet Variant Targets Weak SSH Passwords for GPU Crypto Mining

China-linked cyber-spies infect Russian govt, IT sector

Zero Trust Content Security: A New Frontier in Safeguarding Unstructured Data

~ 14 Aug 2024 ~

A Single Iranian Hacker Group Targeted Both Presidential Campaigns, Google Says

Russian cyber snoops linked to massive credential-stealing campaign

Texas sues GM for selling driver data to analytics, insurance companies

Your Gym Locker May Be Hackable

Black Basta-Linked Attackers Target Users with SystemBC Malware

Enzo Biochem ordered to cough up $4.5 million over lousy security that led to ransomware disaster

Texas Sues GM for Collecting Driving Data without Consent

Upcoming Speaking Engagements

Palo Alto Networks execs apologize for 'hostesses' dressed as lamps at Black Hat booth

Belarusian-Ukrainian Hacker Extradited to U.S. for Ransomware and Cybercrime Charges

EastWind campaign: new CloudSorcerer attacks on government organizations in Russia

Rivers of Phish: Sophisticated Phishing Targets Russias Perceived Enemies Around the Globe

How to Augment Your Password Security with EASM

Want to Win a Bike Race? Hack Your Rivals Wireless Shifters

Is Lenovo a blind spot in US anti-China security measures?

DDoS Attacks Surge 46% in First Half of 2024, Gcore Report Reveals

Indian telcos to cut off scammy, spammy, telemarketers for two whole years

Microsoft Issues Patches for 90 Flaws, Including 10 Critical Zero-Day Exploits

Critical Flaw in Ivanti Virtual Traffic Manager Could Allow Rogue Admin Access

China-Backed Earth Baku Expands Cyber Attacks to Europe, Middle East, and Africa

NIST finalizes trio of post-quantum encryption standards

Navigating Zero Trust in the Hybrid Workforce: Insights from Industry Leaders

How to Become a Cyber Risk and Compliance Analyst

Patch Tuesday brings 90 new Microsoft CVEs, six already under exploit

Microsoft patches scary wormable hijack-my-box-via-IPv6 security bug and others

~ 13 Aug 2024 ~

Six 0-Days Lead Microsofts August 2024 Patch Push

Six ransomware gangs behind over 50% of 2024 attacks

US accuses man of being 'elite' ransomware pioneer they've hunted for years

Feds bust minor league Radar/Dispossessor ransomware gang

GhostWrite: New T-Head CPU Bugs Expose Devices to Unrestricted Attacks

Researchers Uncover Vulnerabilities in AI-Powered Azure Health Bot Service

APT trends report Q2 2024

Orion SA says scammers conned company out of $60 million

On the Voynich Manuscript

Why Hardsec Matters: From Protecting Critical Services to Enhancing Resilience

Who uses LLM prompt injection attacks IRL? Mostly unscrupulous job seekers, jokesters and trolls

FBI Shuts Down Dispossessor Ransomware Group's Servers Across U.S., U.K., and Germany

Why scammers want your phone number

'Digital arrest' scams are big in India and may be spreading

Ukraine Warns of New Phishing Campaign Targeting Government Computers

AMD wont patch Sinkclose security bug on older Zen CPUs

Up and Running with Siftgrab

~ 12 Aug 2024 ~

Attacker steals personal data of 200k+ people with links to Arizona tech school

The great location leak: Privacy risks in dating apps

Mega money, unfathomable violence pervade thriving underground doxxing scene

How Phishing Attacks Adapt Quickly to Capitalize on Current Events

Researchers Uncover Vulnerabilities in Solarman and Deye Solar Systems

The AI Hangover is Here The End of the Beginning

FreeBSD Releases Urgent Patch for High-Severity OpenSSH Vulnerability

Taxonomy of Generative AI Misuse

Indirect prompt injection in the real world: how people manipulate neural networks

Top 6 Craigslist scams: Dont fall for these tricks

Evolve your cloud security knowledge

Industrial Remote Access Tool Ewon Cosy+ Vulnerable to Root Access Attacks

Trump campaign cites Iran election phish claim as evidence leaked docs were stolen

EastWind Attack Deploys PlugY and GrewApacha Backdoors Using Booby-Trapped LNK Files

The UN unanimously agrees that cybercrime is bad, mkay?

~ 11 Aug 2024 ~

Rogue PyPI Library Solana Users, Steals Blockchain Wallet Keys

~ 10 Aug 2024 ~

Thousands of Corporate Secrets Were Left Exposed. This Guy Found Them All