Port 22

~ 21 Nov 2024 ~

Warning: Over 2,000 Palo Alto Networks Devices Hacked in Ongoing Attack Campaign

Chinese APT Gelsemium Targets Linux Systems with New WolfsBane Backdoor

'Alarming' security bugs lay low in Linux's needrestart server utility for 10 years

'Alarming' bugs lay low in Ubuntu Server utility for 10 years

10 Most Impactful PAM Use Cases for Enhancing Organizational Security

North Korean Front Companies Impersonate U.S. IT Firms to Fund Missile Programs

Secret Service Tracking Peoples Locations without Warrant

Schneider Electric PowerLogic PM5300 Series

Schneider Electric Modicon M340, MC80, and Momentum Unity M1E

Schneider Electric Modicon M340, MC80, and Momentum Unity M1E

Schneider Electric EcoStruxure IT Gateway

OSCAT Basic Library

mySCADA myPRO Manager

Automated Logic WebCTRL Premium Server

Chinas Surveillance State Is Selling Citizen Data as a Side Hustle

Over 145,000 Industrial Control Systems Across 175 Countries Found Exposed Online

Now Online Safety Act is law, UK has 'priorities' but still won't explain 'spy clause'

Unveiling WolfsBane: Gelsemiums Linux counterpart to Gelsevirine

5 Scattered Spider Gang Members Indicted in Multi-Million Dollar Cybercrime Scheme

Google's AI-Powered OSS-Fuzz Tool Finds 26 Vulnerabilities in Open-Source Projects

NodeStealer Malware Targets Facebook Ad Accounts, Harvesting Credit Card Data

Put your usernames and passwords in your will, advises Japan's government

Five Scattered Spider suspects indicted for phishing spree and crypto heists

~ 20 Nov 2024 ~

Chinese cyberspies, Musks Beijing ties, labelled real risk to US security by senator

Mega US healthcare payments network restores system 9 months after ransomware attack

Google's AI bug hunters sniff out two dozen-plus code gremlins that humans missed

Steve Bellovins Retirement Talk

D-Link tells users to trash old VPN routers over bug too dangerous to identify

Ghost Tap: Hackers Exploiting NFCGate to Steal Funds via Mobile Payments

NHIs Are the Future of Cybersecurity: Meet NHIDR

Inside the Booming AI Pimping Industry

Kathryn Thornton: Correcting Hubble's vision | Starmus highlights

Decades-Old Security Vulnerabilities Found in Ubuntu's Needrestart Package

Data is the new uranium incredibly powerful and amazingly dangerous

Microsoft Launches Windows Resiliency Initiative to Boost Security and System Integrity

China-Backed Hackers Leverage SIGTRAN, GSM Protocols to Infiltrate Telecom Networks

Apple Releases Urgent Updates to Patch Actively Exploited Zero-Day Vulnerabilities

Oracle Warns of Agile PLM Vulnerability Currently Under Active Exploitation

Anyone Can Buy Data Tracking US Soldiers and Spies to Nuclear Vaults and Brothels in Germany

Fintech Giant Finastra Investigating Data Breach

Healthcare org Equinox notifies 21K patients and staff of data theft

~ 19 Nov 2024 ~

China-linked group abuses Fortinet 0-day with post-exploit VPN-credential stealer

Russian suspected Phobos ransomware admin extradited to US over $16M extortion

America's drinking water systems have a hard-to-swallow cybersecurity problem

Palo Alto Networks tackles firewall-busting zero-days with critical patches

Navigating third-party risks

Ngioweb Botnet Fuels NSOCKS Residential Proxy Network Exploiting IoT Devices

Hackers Hijack Unsecured Jupyter Notebooks to Stream Illegal Sports Broadcasts

AI innovations for a more secure future unveiled at Microsoft Ignite

Crook breaks into AI biz, points $250K wire payment at their own account

Why Italy Sells So Much Spyware

Mitsubishi Electric MELSEC iQ-F Series

Privileged Accounts, Hidden Threats: Why Privileged Access Security Must Be a Top Priority

Scammer Black Friday offers: Online shopping threats and dark web

My information was stolen. Now what?

ICE Can Already Sidestep Sanctuary City Laws Through Data-Sharing Fusion Centers

New 'Helldown' Ransomware Variant Expands Attacks to VMware and Linux Systems

Join in the festive cybersecurity fun

iOS 18 added secret and smart security feature that reboots iThings after three days

Chinese Hackers Exploit T-Mobile and Other U.S. Telecoms in Broader Espionage Campaign

CISA Alert: Active Exploitation of VMware vCenter and Kemp LoadMaster Flaws

~ 18 Nov 2024 ~

Ford 'actively investigating' after employee data allegedly parked on leak site

Critical 9.8-rated VMware vCenter RCE bug exploited after patch fumble

T-Mobile US 'monitoring' China's 'industry-wide attack' amid fresh security breach fears

New Stealthy BabbleLoader Malware Spotted Delivering WhiteSnake and Meduza Stealers

Sweden's 'Doomsday Prep for Dummies' guide hits mailboxes today

Most of 2023s Top Exploited Vulnerabilities Were Zero-Days

Deepen your knowledge of Linux security

The Problem of Permissions and Non-Human Identities - Why Remediating Credentials Takes Longer Than You Think

The Problem of Permissions and Non-Human Identities - Why Remediating Credentials Takes Longer Than You Think

THN Recap: Top Cybersecurity Threats, Tools, and Practices (Nov 11 - Nov 17)

Gmail's New Shielded Email Feature Lets Users Create Aliases for Email Privacy

Fake Discount Sites Exploit Black Friday to Hijack Shopper Information

Beyond Compliance: The Advantage of Year-Round Network Pen Testing

What is Scam Likely? Putting the phone down on unwanted calls

NSO Group Exploited WhatsApp to Install Pegasus Spyware Even After Meta's Lawsuit

Urgent: Critical WordPress Plugin Vulnerability Exposes Over 4 Million Sites

Teen serial swatter-for-hire busted, pleads guilty, could face 20 years

Women In Russian-Speaking Cybercrime: Mythical Creatures or Significant Members of Underground?

~ 17 Nov 2024 ~

Will passkeys ever replace passwords? Can they?

~ 16 Nov 2024 ~

Bitfinex Hacker Gets 5 Years for $10 Billion Bitcoin Heist

Rust haters, unite! Fil-C aims to Make C Great Again

PAN-OS Firewall Vulnerability Under Active Exploitation IoCs Released

Swiss cheesed off as postal service used to spread malware

Warning: DEEPDATA Malware Exploiting Unpatched Fortinet Flaw to Steal VPN Credentials

Bloke behind Helix Bitcoin launderette jailed for three years, hands over $400M

Letting chatbots run robots ends as badly as you'd expect

~ 15 Nov 2024 ~

Friday Squid Blogging: Female Gonatus Onyx Squid Carrying Her Eggs

Mystery Palo Alto Networks hijack-my-firewall zero-day now officially under exploit

Keyboard robbers steal 171k customers' data from AnnieMac mortgage house

Simplifying endpoint security

Bitfinex burglar bags 5 years behind bars for Bitcoin heist

Researchers Warn of Privilege Escalation Risks in Google's Vertex AI ML Platform

Good Essay on the History of Bad Password Policies

Master Certificate Management: Join This Webinar on Crypto Agility and Best Practices

Vietnamese Hacker Group Deploys New PXA Stealer Targeting Europe and Asia

How AI Is Transforming IAM and Identity Security

Iranian Hackers Deploy WezRat Malware in Attacks Targeting Israeli Organizations

High-Severity Flaw in PostgreSQL Allows Hackers to Exploit Environment Variables

Microsoft Power Pages misconfigurations exposing sensitive data