Port 22

~ 19 Dec 2024 ~

Web Hacking Service Araneida Tied to Turkish IT Firm

New Microsoft guidance for the CISA Zero Trust Maturity Model

Mailbox Insecurity

Thousands Download Malicious npm Libraries Impersonating Legitimate Tools

Juniper Warns of Mirai Botnet Targeting SSR Devices with Default Passwords

Attackers exploiting a patched FortiClient EMS vulnerability in the wild

Tibbo AggreGate Network Manager

Siemens User Management Component

Schneider Electric Modicon Controllers

Schneider Electric Accutech Manager

Hitachi Energy SDM600

Hitachi Energy RTU500 series CMU

Delta Electronics DTM Soft

This VPN Lets Anyone Use Your Internet Connection. What Could Go Wrong?

Fortinet Warns of Critical FortiWLM Flaw That Could Lead to Admin Access Exploits

Unwrapping Christmas scams | Unlocked 403 cybersecurity podcast (special edition)

Lazarus group evolves its infection chain with old and new malware

CISA Mandates Cloud Security for Federal Agencies by 2025 Under Binding Directive 25-01

Dutch DPA Fines Netflix 4.75 Million for GDPR Violations Over Data Transparency

UAC-0125 Abuses Cloudflare Workers to Distribute Malware Disguised as Army+ App

Don't fall for a mail asking for rapid Docusign action it may be an Azure account hijack phish

~ 18 Dec 2024 ~

US reportedly mulls TP-Link router ban over national security risk

Congress Again Fails to Limit Scope of Spy Powers in New Defense Bill

The Citizen Lab on CBCs The National: How foreign governments go after people in Canada

Microsoft won't let customers opt out of passkey push

Foundry study highlights the benefits of a unified security platform in new e-book

New Advances in the Understanding of Prime Numbers

Boffins trick AI model into giving up its secrets

INTERPOL Pushes for "Romance Baiting" to Replace "Pig Butchering" in Scam Discourse

HubPhish Exploits HubSpot Tools to Target 20,000 European Users for Credential Theft

How to Lose a Fortune with Just One Bad Click

Not Your Old ActiveState: Introducing our End-to-End OS Platform

APT29 Hackers Target High-Value Victims Using Rogue RDP Servers and PyRDP

ONLY Cynet Delivers 100% Protection and 100% Detection Visibility in the 2024 MITRE ATT&CK Evaluation

Analysis of Cyber Anarchy Squad attacks targeting Russian and Belarusian organizations

Cybersecurity is never out-of-office: Protecting your business anytime, anywhere

BeyondTrust Issues Urgent Patch for Critical Vulnerability in PRA and RS Products

Meta Fined 251 Million for 2018 Data Breach Impacting 29 Million Accounts

Patch Alert: Critical Apache Struts Flaw Found, Exploitation Attempts Detected

Phishers cast wide net with spoofed Google Calendar invites

A Prescription for Windows Prefetch Analysis

~ 17 Dec 2024 ~

Interpol wants everyone to stop saying 'pig butchering'

Critical security hole in Apache Struts under exploit

Hacking Digital License Plates

Microsoft Defender for Cloud named a Leader in Frost Radar for CNAPP for the second year in a row!

Attackers Exploit Microsoft Teams and AnyDesk to Deploy DarkGate Malware

Intel Officials Warned Police That US Cities Arent Ready for Hostile Drones

Ireland fines Meta for 2018 'View As' breach that exposed 30M accounts

Hackers Use Microsoft MSC Files to Deploy Obfuscated Backdoor in Pakistan Attacks

Even Great Companies Get Breached Find Out Why and How to Stop It

ThreatQuotient ThreatQ Platform

Stop Calling Online Scams Pig Butchering, Interpol Warns

Schneider Electric Modicon

Rockwell Automation PowerMonitor 1000 Remote

Hitachi Energy TropOS Devices Series 1400/2400/6400

Drug Dealers Have Moved Onto Social Media

Bitter APT Targets Turkish Defense Sector with WmRAT and MiyaRAT Malware

5 Practical Techniques for Effective Cyber Threat Hunting

Hackers Exploit Webview2 to Deploy CoinLurker Malware and Evade Security Detection

Download a banker to track your parcel

The Mask APT Resurfaces with Sophisticated Multi-Platform Malware Arsenal

BlackBerry offloads Cylance's endpoint security products to Arctic Wolf

CISA and FBI Raise Alerts on Exploited Flaws and Expanding HiatusRAT Campaign

Australia moves to drop some cryptography by 2030 before quantum carves it up

~ 16 Dec 2024 ~

Ransomware scum blow holes in Cleo software patches, Cl0p (sort of) claims responsibility

Trump administration wants to go on cyber offensive against China

Deloitte says cyberattack on Rhode Island benefits portal carries 'major security threat'

Agile Business, agile security: How AI and Zero Trust work together

ESET Threat Report H2 2024: Key findings

DeceptionAds Delivers 1M+ Daily Impressions via 3,000 Sites, Fake CAPTCHA Pages

NoviSpy Spyware Installed on Journalist's Phone After Unlocking It With Cellebrite Tool

THN Weekly Recap: Top Cybersecurity Threats, Tools and Tips

Short-Lived Certificates Coming to Lets Encrypt

The Top Cybersecurity Agency in the US Is Bracing for Donald Trump

Hackers Can Jailbreak Digital License Plates to Make Others Pay Their Tolls and Tickets

Data Governance in DevOps: Ensuring Compliance in the AI Era

New Investment Scam Leverages AI, Social Media Ads to Target Victims Worldwide

Dark web threats and dark market predictions for 2025

ESET Threat Report H2 2024

New Glutton Malware Exploits Popular PHP Frameworks Like Laravel and ThinkPHP

Ukrainian Minors Recruited for Cyber Ops and Reconnaissance in Russian Airstrikes

~ 15 Dec 2024 ~

Are your Prometheus servers and exporters secure? Probably not

The Simple Math Behind Public Key Cryptography

~ 14 Dec 2024 ~

Upcoming Speaking Events

Germany Disrupts BADBOX Malware on 30,000 Devices Using Sinkhole Action

Microsofts AI Recall Tool Is Still Sucking Up Credit Card and Social Security Numbers

Thai Officials Targeted in Yokai Backdoor Campaign Using DLL Side-Loading Techniques

~ 13 Dec 2024 ~

Iran-linked crew used custom 'cyberweapon' in US critical infrastructure attacks

Scumbag gets 30 years in the clink for running CSAM dark-web chatrooms, abusing kids

Friday Squid Blogging: Biology and Ecology of the Colossal Squid

Google Timeline location purge causes collateral damage

~ 14 Dec 2024 ~

390,000+ WordPress Credentials Stolen via Malicious GitHub Repository Hosting PoC Exploits

~ 13 Dec 2024 ~

The New Jersey Drone Mystery May Not Actually Be That Mysterious

Critical OpenWrt Vulnerability Exposes Devices to Malicious Firmware Injection

Ultralytics Supply-Chain Attack

Why the US Military Can't Just Shoot Down the Mystery Drones

Open letter to Sandvine requesting evidence of the adequacy and effectiveness of the announced reforms

Black Hat Europe 2024: Hacking a car or rather, its infotainment system

DoJ Indicts 14 North Koreans for $88M IT Worker Fraud Scheme Over Six Years

Cyber protection made intuitive and affordable