Port 22

~ 29 Jul 2024 ~

Meta's AI safety system defeated by the space bar

US border cops really must get a warrant in NY before searching phones, devices

Critical Flaw in Acronis Cyber Infrastructure Exploited in the Wild

Ransomware operators exploit ESXi hypervisor vulnerability for mass encryption

Intruders at HealthEquity rifled through storage, stole 4.3M people's data

Proofpoint Email Routing Flaw Exploited to Send Millions of Spoofed Phishing Emails

Saboteurs Cut Internet Cables in Latest Disruption During Paris Olympics

Google apologizes for breaking password manager for millions of Windows users with iffy Chrome update

How Infostealers Pillaged the Worlds Passwords

New Research in Detecting AI-Generated Videos

How Searchable Encryption Changes the Data Security Game

Mandrake spyware sneaks onto Google Play again, flying under the radar for two years

Beware of fake AI tools masking very real malware threats

'Stargazer Goblin' Creates 3,000 Fake GitHub Accounts for Malware Spread

Post-CrowdStrike, Microsoft to discourage use of kernel drivers by security tools

Microsoft admits 8.5 million CrowdStruck machines estimate was lowballed

China ponders creating a national 'cyberspace ID'

Gh0st RAT Trojan Targets Chinese Windows Users via Fake Chrome Site

Secure Boot useless on hundreds of PCs from major vendors after key leak

~ 27 Jul 2024 ~

Windows Security best practices for integrating and managing security tools

Stop Xs Grok AI From Training on Your Tweets

French Authorities Launch Operation to Remove PlugX Malware from Infected Systems

Malicious PyPI Package Targets macOS to Steal Google Cloud Credentials

~ 26 Jul 2024 ~

Crooks Bypassed Googles Email Verification to Create Workspace Accounts, Access 3rd-Party Services

Friday Squid Blogging: Sunscreen from Squid Pigments

CrowdStrike meets Murphy's Law: Anything that can go wrong will

Compromising the Secure Boot Process

Progress discloses second critical flaw in Telerik Report Server in as many months

This AI-Powered Cybercrime Service Bundles Phishing Kits with Malicious Android Apps

A North Korean Hacker Tricked a US Security Vendor Into Hiring Himand Immediately Tried to Hack Them

Telegram for Android hit by a zero-day exploit Week in security with Tony Anscombe

Offensive AI: The Sine Qua Non of Cybersecurity

Europe Is Pumping Billions Into New Military Tech

U.S. DoJ Indicts North Korean Hacker for Ransomware Attacks on Hospitals

Ongoing Cyberattack Targets Exposed Selenium Grid Services for Crypto Mining

CrowdStrike Warns of New Phishing Scam Targeting German Customers

Critical Flaw in Telerik Report Server Poses Remote Code Execution Risk

North Korean chap charged for attacks on US hospitals, NASA and even China

Malware crew Stargazers Goblin used 3,000 GitHub accounts to make bank

Join the SANS Cloud Security Exchange 2024!

CrowdStrike update blunder may cost world billions and insurance ain't covering it all

~ 25 Jul 2024 ~

Beware of fake CrowdStrike domains pumping out Lumma infostealing malware

FYI: Data from deleted GitHub repos may not actually be deleted

The CrowdStrike Outage and Market-Driven Brittleness

Uncle Sam accuses telco IT pro of decade-long spying campaign for China

Onyx Sleet uses array of malware to gather intelligence for North Korea

North Korean Hackers Shift from Cyber Espionage to Ransomware Attacks

You should probably fix this 5-year-old critical Docker vuln fairly sharpish

Kaspersky says Uncle Sam snubbed proposal to open up its code for third-party review

At The 2024 Summer Olympics, AI Is Watching You

6 Types of Applications Security Testing You Must Know About

Data Wallets Using the Solid Protocol

Meta Removes 63,000 Instagram Accounts Linked to Nigerian Sextortion Scams

Webinar: Securing the Modern Workspace: What Enterprises MUST Know about Enterprise Browser Security

Researchers Reveal ConfusedFunction Vulnerability in Google Cloud Platform

Patch management still seemingly abysmal because no one wants the job

Critical Docker Engine Flaw Allows Attackers to Bypass Authorization Plugins

CISA Warns of Exploitable Vulnerabilities in Popular BIND 9 DNS Software

New Chrome Feature Scans Password-Protected Files for Malicious Content

How a cheap barcode scanner helped fix CrowdStrike'd Windows PCs in a flash

Fatal timeline of CrowdStrike's week from hell Feb to now

~ 24 Jul 2024 ~

Oops. Apple relied on bad code while flaming Google Chrome's Topics ad tech

Uncle Sam opens probe into CrowdStrike turbulence at Delta Air Lines

Zero Trust in the Age of AI: Join our online event to learn how to strengthen your security posture

Robot Dog Internet Jammer