Port 22

~ 16 Nov 2023 ~

FTCs Voice Cloning Challenge

Consumer Software Security Assessment: Should We Follow NHTSA's Lead?

Unpatched Critical Vulnerabilities Open AI Models to Takeover

'Randstorm' Bug: Millions of Crypto Wallets Open to Theft

US Congress Report Calls for Privacy Reforms After FBI Surveillance 'Abuses'

Cybersecurity Investment Involves More Than Just Technology

APTs Swarm Zimbra Zero-Day to Steal Government Info Worldwide

Despite Hype, the Password-Free Workplace Is Still a Long Way Off

Zero-Day Flaw in Zimbra Email Software Exploited by Four Hacker Groups

Running Signal Will Soon Cost $50 Million a Year

Windows Server 2022 update gave ESXi host VMs the blue screen blues

FBI Warns: Five Weeks In, Gaza Email Scams Still Thriving

3 Ways Behavioral Economics Obstructs Cybersecurity

BlackCat plays with malvertising traps to lure corporate victims

Experts Uncover DarkCasino: New Emerging APT Threat Exploiting WinRAR Flaw

Royal Mails recovery from ransomware attack will cost business at least $12M

Leaving Authentication Credentials in Public Code

CISA and FBI Issue Warning About Rhysida Ransomware Double Extortion Attacks

How to Opt Out of Facebooks Latest Two-Factor Authentication Change

How to Automate the Hardest Parts of Employee Offboarding

Hackers Could Exploit Google Workspace and Cloud Platform for Ransomware Attacks

A Spy Agency Leaked People's Data OnlineThen the Data Was Stolen

Is your LinkedIn profile revealing too much?

Is your LinkedIn profile revealing too much?

Russian Hackers Launch 'Largest Ever Cyber Attack' on Danish Critical Infrastructure

Hundreds of websites cloned to run ads for Chinese football gambling outfits

Clorox CISO flushes self after multi-million-dollar cyberattack

A Visual Summary of SANS HackFest Summit 2023

~ 15 Nov 2023 ~

Egress and KnowBe4 Extend Partnership to Offer AI-based Adaptive Email Security and Training

ALTR Closes $25M Series C Financing

Rackspace Ransomware Costs Soar to Nearly $12M

'AlphaLock' Hackers Launch 'Pen-Testing Training' Group

EU Tightens Cybersecurity Requirements for Critical Infrastructure and Services

Google Workspace weaknesses allow plaintext password theft

Googles New Titan Security Key Adds Another Piece to the Password-Killing Puzzle

New SSH Vulnerability

Cyber Resilience Requires Maturity, Persistence & Board Engagement

Qatar & Rwanda Partner to Boost Cybersecurity in Africa

Microsoft unveils expansion of AI for security and security for AI at Microsoft Ignite

After Critical Bug Disclosures, TETRA Emergency Comms Code Goes Public

Oil Giant Aramco Drills Down on Saudi ICS Security

The QAnon Shaman Isnt Even the Most Extreme Candidate in His Race for Congress

U.S. Takes Down IPStorm Botnet, Russian-Moldovan Mastermind Pleads Guilty

Defending Against Attacks on Vulnerable IoT Devices

FBI Director: FISA Section 702 warrant requirement a 'de facto ban'

How cyber training can help you beat the bad guys

New PoC Exploit for Apache ActiveMQ Flaw Could Let Attackers Fly Under the Radar

Combining Agentless and Agent-Based Cloud Security in CNAPPs

Social Media Sleuths, Armed With AI, Are Identifying Dead Bodies

Three Ways Varonis Helps You Fight Insider Threats

Ransomware more efficient than ever, and baddies are still after your logs

Reptar: New Intel CPU Vulnerability Impacts Multi-Tenant Virtualized Environments

Alert: Microsoft Releases Patch Updates for 5 New Zero-Day Vulnerabilities

Urgent: VMware Warns of Unpatched Critical Cloud Director Vulnerability

Another month, another bunch of fixes for Microsoft security bugs exploited in the wild

~ 14 Nov 2023 ~

Russian national pleads guilty to building now-dismantled IPStorm proxy botnet

Microsoft Patch Tuesday, November 2023 Edition

Danish Energy Attacks Portend Targeting More Critical Infrastructure

Microsoft Zero-Days Allow Defender Bypass, Privilege Escalation

Malwarebytes Labs Reveals 50% Uptick in Credit Card Skimming in Advance of the Holiday Shopping Season

LastPass Launches Enhanced User Interface for Mobile Vault

Illumio Delivers the Most Complete Zero-Trust Segmentation Platform With the Addition of CloudSecure

DirectDefense Launches ThreatAdvisor 3.0 to Streamline Security Operations With SOAR Technology

Cycode Introduces Complete Approach to Application Security Posture Management (ASPM)

Beyond Identity Releases New Assessment to Guide Companies Toward Zero Trust