Port 22

~ 23 Sep 2024 ~

US proposes ban on Chinese, Russian connected car tech over security fears

Ron Deibert in The Washington Post on Apples decision to drop lawsuit against Israeli spyware firm

Hacking the Bike Angels System for Moving Bikeshares

So how's Microsoft's Secure Future Initiative going?

Securing our future: September 2024 progress update on Microsofts Secure Future Initiative (SFI)

UPS supplier's password policy flip-flops from unlimited, to 32, then 64 characters

THN Cybersecurity Recap: Last Week's Top Threats and Trends (September 16-22)

Why 'Never Expire' Passwords Can Be a Risky Decision

How the Necro Trojan infiltrated Google Play, again

Critical Flaw in Microchip ASF Exposes IoT Devices to Remote Code Execution Risk

Discord Introduces DAVE Protocol for End-to-End Encryption in Audio and Video Calls

Move over, Cobalt Strike. Splinters the new post-exploit menace in town

New PondRAT Malware Hidden in Python Packages Targets Software Developers

Chinese Hackers Exploit GeoServer Flaw to Target APAC Nations with EAGLEDOOR Malware

The Business Risks of Ignoring ICS Security: Five Critical Takeaways from Industry Experts

Apple's latest macOS release is breaking security software, network connections

~ 21 Sep 2024 ~

Hacktivist Group Twelve Targets Russian Entities with Destructive Cyber Attacks

LinkedIn Halts AI Data Processing in UK Amid Privacy Concerns Raised by ICO

Ukraine Bans Telegram Use for Government and Military Personnel

Iranian Hackers Tried to Give Hacked Trump Campaign Emails to Dems

Friday Squid Blogging: Squid Game Season Two Teaser

~ 20 Sep 2024 ~

US indicts two over socially engineered $230M+ crypto heist

Clever Social Engineering Attack Using Captchas

Ivanti patches exploited admin command execution flaw

New Book Chasing Shadows Coming Soon

Europol Shuts Down Major Phishing Scheme Targeting Mobile Phone Credentials

-=TWELVE=- is back

FBI, CISA warning over false claims of hacked voter data Week in security with Tony Anscombe

Passwordless AND Keyless: The Future of (Privileged) Access Management

Iranian APT UNC1860 Linked to MOIS Facilitates Cyber Intrusions in Middle East

Cybercrooks strut away with haute couture Harvey Nichols data

Chrome Users Can Now Sync Passkeys Across Devices with New Google PIN Feature

Critical Ivanti Cloud Appliance Vulnerability Exploited in Active Cyberattacks

CISA boss: Makers of insecure software must stop enabling today's cyber villains

CISA boss: Makers of insecure software are the real cyber villains

~ 19 Sep 2024 ~

Valencia Ransomware crew explodes on the scene, claims California city, fashion giant, more as victims

No way? Big Tech's 'lucrative surveillance' of everyone is terrible for privacy, freedom

Iran's cyber-goons emailed stolen Trump info to Team Biden which ignored them

This Windows PowerShell Phish Has Scary Potential

Wherever There's Ransomware, There's Service Account Compromise. Are You Protected?

1 in 10 orgs dumping their security vendors after CrowdStrike outage

Join us at Microsoft Ignite 2024 and learn to build a security-first culture with AI

Hackers Exploit Default Credentials in FOUNDATION Software to Breach Construction Firms

FBI Shuts Down Chinese Botnet

First Israels Exploding Pagers Maimed and Killed. Now Comes the Paranoia

New Brazilian-Linked SambaSpy Malware Targets Italian Users via Phishing Emails

Thousands of orgs at risk of knowledge base data leaks via ServiceNow misconfigurations

Your Phone Wont Be the Next Exploding Pager

New TeamTNT Cryptojacking Campaign Targets CentOS Servers with Rootkit

UK activists targeted with Pegasus spyware ask police to charge NSO Group

Rockwell Automation RSLogix 5 and RSLogix 500

MegaSys Computer Technologies Telenium Online Web Application

Kastle Systems Access Control System

IDEC PLCs

IDEC CORPORATION WindLDR and WindO/I-NV4

Healthcare's Diagnosis is Critical: The Cure is Cybersecurity Hygiene

Microsoft Warns of New INC Ransomware Targeting U.S. Healthcare Sector

Influencing the influencers | Unlocked 403 cybersecurity podcast (ep. 6)

Tor insists its network is safe after German cops convict CSAM dark-web admin

GitLab Patches Critical SAML Authentication Bypass Flaw in CE and EE Editions

~ 18 Sep 2024 ~

New "Raptor Train" IoT Botnet Compromises Over 200,000 Devices Worldwide

FBI boss says China 'burned down' 260,000-device botnet when confronted by Feds

LockBit boasts of ransoming IRS-authorized eFile.com

Deja blues... LockBit boasts once again of ransoming IRS-authorized eFile.com

Putin really wants Trump back in the White House

Lebanon now hit with deadly walkie-talkie blasts as Israel declares new phase of war

Chinese spies spent months inside aerospace engineering firm's network via legacy IT

Walkie-Talkies Explode in New Attack on Hezbollah

How comprehensive security simplifies the defense of your digital estate

Chinese Engineer Charged in U.S. for Years-Long Cyber Espionage Targeting NASA and Military

Scam Funeral Streaming Groups Thrive on Facebook

Cops across the world arrest 51 in orchestrated takedown of Ghost crime platform

Why Pay A Pentester?

Exotic SambaSpy is now dancing with Italian users

North Korean Hackers Target Energy and Aerospace Industries with New MISTPEN Malware

Despite Russia warnings, Western critical infrastructure remains unprepared

Chrome Introduces One-Time Permissions and Enhanced Safety Check for Safer Browsing

Understanding cyber-incident disclosure

Did a Chinese University Hacking Competition Target a Real Victim?

GSMA Plans End-to-End Encryption for Cross-Platform RCS Messaging

Patch Issued for Critical VMware vCenter Flaw Allowing Remote Code Execution

Australian Police conducted supply chain attack on criminal collaborationware

Announcing the Biggest Update Ever to SEC510: Cloud Security Controls and Mitigations

WhatsApp fix to make View Once chats actually disappear is beaten in less than a week

~ 17 Sep 2024 ~

VMware patches over remote make-me-root holes in vCenter Server, Cloud Foundation

Google Cloud Document AI flaw (still) allows data theft despite bounty payout

The Mystery of Hezbollahs Deadly Exploding Pagers

At least nine dead, thousands hurt in Lebanon after Hezbollah pagers explode

Rhysida ransomware gang ships off Port of Seattle data for $6M

Remotely Exploding Pagers

Secure your organization

Predator spyware kingpins added to US sanctions list

Google Chrome Switches to ML-KEM for Post-Quantum Cryptography Defense

U.S. Treasury Sanctions Executives Linked to Intellexa Predator Spyware Operation

Yokogawa Dual-redundant Platform for Computer (PC2CKM)

Siemens SIMATIC S7-200 SMART Devices

Millbeck Communications Proroute H685t-w

Meta to Train AI Models Using Public U.K. Facebook and Instagram Posts

Python Developers Targeted with Malware During Fake Job Interviews

How to Investigate ChatGPT activity in Google Workspace