Port 22

~ 8 Aug 2024 ~

Unlock the Future of Cybersecurity: Exclusive, Next Era AI Insights and Cutting-Edge Training at SANS Network Security 2024

FBI and CISA Warn of BlackSuit Ransomware That Demands Up to $500 Million

Critical Security Flaw in WhatsUp Gold Under Active Attack - Patch Now

Cloud storage lockers from Microsoft and Google used to store and spread state-sponsored malware

Samsung boosts bug bug bounty to a cool million for cracks of the Knox Vault subsystem

Samsung boosts bug bounty to a cool million for cracks of the Knox Vault subsystem

Maximizing Vendor Risk Assessments

~ 7 Aug 2024 ~

Inside the Dark World of Doxing for Profit

Cybercrime Rapper Sues Bank over Fraud Investigation

A Flaw in Windows Update Opens the Door to Zombie Exploits

Faulty instructions in Alibaba's T-Head C910 RISC-V CPUs blow away all security

The Citizen Lab at DEF CON 32

Fighting AI fire with AI fire

New Linux Kernel Exploit Technique 'SLUBStick' Discovered by Researchers

Ron Deibert on Sexist falsehoods target Kamala Haris after Biden drops out in the Daily Mail

Roundcube Webmail Flaws Allow Hackers to Steal Emails and Passwords

Small CSS tweaks can help nasty emails slip through Outlook's anti-phishing net

Police take just 2 days to recover $40M stolen in business email scam

Problems with Georgias Voter Registration Portal

New Go-based Backdoor GoGra Targets South Asian Media Organization

CrowdStrike Reveals Root Cause of Global System Outages

EQT buys majority share in Swiss cybersecurity biz Acronis

Why tech-savvy leadership is key to cyber insurance readiness

UK health services call-handling vendor faces $7.7M fine over 2022 ransomware attack

Chameleon Android Banking Trojan Targets Users Through Fake CRM App

Apples New macOS Sequoia Tightens Gatekeeper Controls to Block Unauthorized Software

SharpRhino malware targets IT admins Hunters International gang suspected

Georgia's voter portal gets a crash course in client versus backend input validation

Microsoft punches back at Delta Air Lines and its legal threats

Security Leadership in the Age of AI and Zero Trust: Insights from Industry Experts

How to Become a Cloud Security Engineer

CrowdStrike hires outside security firms to review Falcon code

~ 6 Aug 2024 ~

How Microsoft and NIST are collaborating to advance the Zero Trust Implementation

Google splats device-hijacking exploited-in-the-wild Android kernel bug among others

A New Plan to Break the Cycle of Destructive Critical Infrastructure Hacks

Sonic Automotive says ransomware-linked CDK software outage cost it $30M

INTERPOL Recovers $41 Million in Largest Ever BEC Scam in Singapore

Bad apps bypass Windows security alerts for six years using newly unveiled trick

Users call on Microsoft to update Outlook's friendly name feature

Delta Electronics DIAScreen

Suspicious Minds: Insider Threats in The SaaS World

North Korean Hackers Moonstone Sleet Push Malicious JS Packages to npm Registry

A Better Investigatory Board for Cyber Incidents

New Android Spyware LianSpy Evades Detection Using Yandex Cloud

Billion-dollar bust as international op shutters Cryptonator wallet

Google Patches New Android Kernel Vulnerability Exploited in the Wild

Mobile Guardian attacked, leading to remote wiping of 13,000 devices

New Zero-Day Flaw in Apache OFBiz ERP Allows Remote Code Execution

Illinois relaxes biometric privacy law so snafus won't cost businesses billions

NFL to begin using face scanning tech across all of its stadiums

Cloud Vendor Integrations Gone Wrong

~ 5 Aug 2024 ~

Low-Drama Dark Angels Reap Record Ransoms

That cyber-heist of 2.9B personal records? There's a class-action lawsuit looming for that

Your copilot for improved cyber protection

Sneaky SnakeKeylogger slithers into Windows inboxes to steal sensitive secrets

Researchers Uncover Flaws in Windows Smart App Control and SmartScreen

Kazakh Organizations Targeted by 'Bloody Wolf' Cyber Attacks

CrowdStrike unhappy about Delta's 'litigation threat,' claims airline refused 'free on-site help'

The Loper Bright Decision: How it Impacts Cybersecurity Law

New Patent Application for Car-to-Car Surveillance

How Project 2025 Would Put US Elections at Risk

New Android Trojan "BlankBot" Targets Turkish Users' Financial Data

Enhancing Incident Response Readiness with Wazuh

LianSpy: new Android spyware targeting Russian users

Critical Flaw in Rockwell Automation Devices Allows Unauthorized Access

China starts testing national cyber-ID before consultation on the idea closes

China-Linked Hackers Compromise ISP to Deploy Malicious Software Updates

Google gamed into advertising a malicious version of Authenticator

~ 3 Aug 2024 ~

US Hands Over Russian Cybercriminals in WSJ Reporter Prisoner Swap

DARPA suggests turning old C code automatically into Rust using AI, of course

DOJ and FTC Sue TikTok for Violating Children's Privacy Laws

Hackers Exploit Misconfigured Jupyter Notebooks with Repurposed Minecraft DDoS Tool

~ 2 Aug 2024 ~

Friday Squid Blogging: Treating Squid Parasites

Israeli hacktivist group brags it took down Iran's internet

Sensitive Illinois Voter Data Exposed by Contractors Unsecured Databases

APT41 Hackers Use ShadowPad, Cobalt Strike in Taiwanese Institute Cyber Attack

APT28 Targets Diplomats with HeadLace Malware via Car Sale Phishing Lure

Respect your data, and protect it

Fortune 50 biz coughed up record-breaking $75M ransom to halt leak of stolen data

Webinar: Discover the All-in-One Cybersecurity Solution for SMBs

AI and automation reducing breach costs Week in security with Tony Anscombe

Leaked GitHub Python Token

Mirai Botnet targeting OFBiz Servers Vulnerable to Directory Traversal

UK plans to revamp national cyber defense tools are already in motion

New Windows Backdoor BITSLOTH Exploits BITS for Stealthy Communication

U.S. Releases High-Profile Russian Hackers in Diplomatic Prisoner Exchange

Cybercriminals Abusing Cloudflare Tunnels to Evade Detection and Spread Malware

UK crimebusters shut down global call-spoofing outfit that claimed 170K-plus victims

Japan mandates app to ensure national ID cards aren't forged

India contemplates compulsory dynamic 2FA for digital payments

10 Steps To Implement A Zero Trust Architecture

US sends cybercriminals back to Russia in prisoner swap that freed WSJ journo, others

U.S. Trades Cybercriminals to Russia in Prisoner Swap

U.S. Trades 5 Cybercriminals to Russia in Prisoner Swap

~ 1 Aug 2024 ~

Too late now for canary updates, says pension fund suing CrowdStrike

FBI, CISA remind US voters that DDoS attacks can't touch election systems

How to counter adversarial AI

He Was an FBI Informantand Inspired a Generation of Violent Extremists

Over 1 Million Domains at Risk of 'Sitting Ducks' Domain Hijacking Technique

Hackers Distributing Malicious Python Packages via Popular Developer Q&A Platform