Port 22

~ 12 Dec 2024 ~

Citrix goes shopping in Europe and returns with gifts for security-conscious customers

DORA's Role in Enhancing Cybersecurity for EU Finance

~ 11 Dec 2024 ~

Blocking Chinese spies from intercepting calls? There ought to be a law

How Cryptocurrency Turns to Cash in Russian Banks

Krispy Kreme Doughnut Corporation admits to hole in security

Secret Blizzard Deploys Kazuar Backdoor in Ukraine Using Amadey Malware-as-a-Service

Microsoft Defender XDR demonstrates 100% detection coverage across all cyberattack stages in the 2024 MITRE ATT&CK Evaluations: Enterprise

Frequent freeloader part II: Russian actor Secret Blizzard using tools of other groups to attack Ukraine

New Malware Technique Could Exploit Windows UI Framework to Evade EDR Tools

Legal barriers to justice: John Scott-Railton on the legal challenges faced by spyware victims

Microsoft MFA AuthQuake Flaw Enabled Unlimited Brute-Force Attempts Without Alerts

ZLoader Malware Returns With DNS Tunneling to Stealthily Mask C2 Comms

Three more vulns spotted in Ivanti CSA, all critical, one 10/10

Jailbreaking LLM-Controlled Robots

Chinese EagleMsgSpy Spyware Found Exploiting Mobile Devices Since 2017

Researchers Uncover Espionage Tactics of China-Based APT Groups in Southeast Asia

Microsoft Fixes 72 Flaws, Including Patch for Actively Exploited CLFS Vulnerability

U.S. Charges Chinese Hacker for Exploiting Zero-Day in 81,000 Sophos Firewalls

US names Chinese national it alleges was behind 2020 attack on Sophos firewalls

Ivanti Issues Critical Security Updates for CSA and Connect Secure Vulnerabilities

The Ghost Gun Linked to Luigi Mangione Shows Just How Far 3D-Printed Weapons Have Come

Patch Tuesday, December 2024 Edition

Reflections on the US Governments OIG Report on CISAs Automated Indicator Sharing Program

~ 10 Dec 2024 ~

Microsoft holds last Patch Tuesday of the year with 72 gifts for admins

US military grounds entire Osprey tiltrotor fleet over safety concerns

New Microsoft Purview features help protect and govern your data in the era of AI

The Citizen Labs submission to the Senate Standing Committee on National Security, Defence and Veterans Affairs

AMD secure VM tech undone by DRAM meddling

Cleo File Transfer Vulnerability Under Exploitation Patch Pending, Mitigation Urged

Fake Recruiters Distribute Banking Trojan via Malicious Apps in Phishing Scam

Fully patched Cleo products under renewed 'zero-day-ish' mass attack

Heart surgery device maker's security bypassed, data encrypted and stolen

Poker Cheaters Allegedly Use Tiny Hidden Cameras to Spot Dealt Cards

Full-Face Masks to Frustrate Identification

Schneider Electric FoxRTU Station

Schneider Electric EcoStruxure Foxboro DCS Core Control Services

Rockwell Automation Arena

National Instruments LabVIEW

MOBATIME Network Master Clock

Horner Automation Cscape

The Future of Network Security: Automated Internal and External Pentesting

How cyber-secure is your business? | Unlocked 403 cybersecurity podcast (ep. 8)

Phone Phishing Gang Busted: Eight Arrested in Belgium and Netherlands

Hackers Weaponize Visual Studio Code Remote Tunnels for Cyber Espionage

Bitfinex heist gets the Netflix treatment after 'cringey couple' sentenced

Ongoing Phishing and Malware Campaigns in December 2024

CERT-UA Warns of Phishing Attacks Targeting Ukraines Defense and Security Force

WhatsApp finally fixes View Once flaw that allowed theft of supposedly vanishing pics

Police arrest suspect in murder of UnitedHealthcare CEO, with grainy pics the only tech involved

Top SANS Summit Talks of 2024

Defensible Security Architecture and Engineering: Designing and Building Defenses for the Future (Japanese)

~ 9 Dec 2024 ~

Police Arrest UHC CEO Shooting Suspect, App Developer Luigi Mangione

China's Salt Typhoon recorded top American officials' calls, says White House

Black Basta Ransomware Evolves with Email Bombing, QR Codes, and Social Engineering

Crooks stole AWS credentials from misconfigured sites then kept them in open S3 bucket

OpenWrt orders router firmware updates after supply chain attack scare

THN Recap: Top Cybersecurity Threats, Tools and Tips (Dec 2 - 8)

Trust Issues in AI

Researchers Uncover Prompt Injection Vulnerabilities in DeepSeek and Claude AI

Microsoft dangles $10K for hackers to hijack LLM email service

Seven Bolt-Ons to Make Your Entra ID More Secure for Critical Sessions

Socks5Systemz Botnet Powers Illegal Proxy Service with 85,000+ Hacked Devices

Story of the Year: global IT outages and supply chain attacks

Are pre-owned smartphones safe? How to choose a second-hand phone and avoid security risks

Blue Yonder ransomware termites claim credit

Is Your Organisation Ready for the DORA Deadline?

~ 8 Dec 2024 ~

How Chinese insiders are stealing data scooped up by President Xi's national surveillance system

~ 7 Dec 2024 ~

US Officials Recommend Encryption Apps Amid Chinese Telecom Hacking

Ultralytics AI Library Compromised: Cryptocurrency Miner Found in PyPI Versions

Learn How Experts Secure Privileged AccountsProven PAS Strategies Webinar

Hackers Using Fake Video Conferencing Apps to Steal Web3 Professionals' Data

Romania Cancels Presidential Election Results After Alleged Russian Meddling on TikTok

~ 6 Dec 2024 ~

Micropatchers share 1-instruction fix for NTLM hash leak flaw in Windows 7+

Friday Squid Blogging: Safe Quick Undercarriage Immobilization Device

Facing sale or ban, TikTok tossed under national security bus by appeals court

The Real Story of The Order

Salt Typhoon forces FCC's hand on making telcos secure their networks

FSB Uses Trojan App to Monitor Russian Programmer Accused of Supporting Ukraine

Badass Russian techie outsmarts FSB, flees Putinland all while being tracked with spyware

Detecting Pegasus Infections

Researchers Uncover Flaws in Popular Open-Source Machine Learning Frameworks

Conquering the Complexities of Modern BCDR

Exploits and vulnerabilities in Q3 2024

Protect your clouds

More_eggs MaaS Expands Operations with RevC2 Backdoor and Venom Loader

Hackers Leveraging Cloudflare Tunnels, DNS Fast-Flux to Hide GammaDrop Malware

PoC exploit chains Mitel MiCollab 0-day, auth-bypass bug to access sensitive files

Microsoft: Another Chinese cyberspy crew targeting US critical orgs 'as of yesterday'

How to Prepare for DORA Before the 2025 Deadline

~ 5 Dec 2024 ~

Solana blockchain's popular web3.js npm package backdoored to steal keys, funds

Explore strategies for effective endpoint control

Why security leaders trust Microsoft Sentinel to modernize their SOC

Senior fellow Lex Gill delivers testimony to the Foreign Interference Commission

8 years as a Leader in the Gartner Magic Quadrant for Access Management

This $3,000 Android Trojan Targeting Banks and Cryptocurrency Exchanges

Critical Mitel MiCollab Flaw Exposes Systems to Unauthorized File and Admin Access

Europol Shuts Down Manson Market Fraud Marketplace, Seizes 50 Servers

Hackers Target Uyghurs and Tibetans with MOONSHINE Exploit and DarkNimbus Backdoor

British hospitals hit by cyberattacks still battling to get systems back online

AutomationDirect C-More EA9 Programming Software