Port 22

~ 10 Sep 2024 ~

Viessmann Climate Solutions SE Vitogate 300

Experts Identify 3 Chinese-Linked Clusters Behind Cyberattacks in Southeast Asia

Shining a Light on Shadow Apps: The Invisible Gateway to SaaS Data Breaches

New Chrome Zero-Day

New PIXHELL Attack Exploits Screen Noise to Exfiltrates Data from Air-Gapped Computers

Mustang Panda Deploys Advanced Malware to Spy on Asia-Pacific Governments

CosmicBeetle steps up: Probation period at RansomHub

Thanks, Edward Snowden: you propelled China to quantum networking leadership

Strengthen Your Supply Chain Security with Effective SBOM Management

Enhance your Cyber Threat Intelligence with the Admiralty System

~ 9 Sep 2024 ~

WhatsApp's 'View Once' could be 'View Whenever' due to a flaw

Russia's top-secret military unit reportedly plots undersea cable 'sabotage'

New RAMBO Attack Uses RAM Radio Signals to Steal Data from Air-Gapped Networks

Avis alerts nearly 300k car renters that crooks stole their info

1.7M potentially pwned after payment services provider takes a year to notice break-in

Strengthening enterprise storage against cyber threats

Kremlin-linked COLDRIVER crooks take pro-democracy NGOs for phishy ride

One More Tool Will Do It? Reflecting on the CrowdStrike Fallout

Blind Eagle Targets Colombian Insurance Sector with Customized Quasar RAT

Chinese Hackers Exploit Visual Studio Code in Southeast Asian Cyberattacks

Webinar: How to Protect Your Company from GenAI Data Leakage Without Losing Its Productivity Benefits

Australia Threatens to Force Companies to Break Encryption

Wing Security SaaS Pulse: Continuous Security & Actionable Insights For Free

What You Need to Know About Grok AI and Your Privacy

Progress Software Issues Patch for Vulnerability in LoadMaster and MT Hypervisor

Cybersecurity regulation stepping up

New Android SpyAgent Malware Uses OCR to Steal Crypto Wallet Recovery Keys

Loki: a new private agent for the popular Mythic framework

TIDRONE Espionage Group Targets Taiwan Drone Makers in Cyber Campaign

U.S. Offers $10 Million for Info on Russian Cadet Blizzard Hackers Behind Major Attacks

Predator spyware updated withn dangerous new features, also now harder to track

Why ICS Is the Business: Essential Cybersecurity Strategies for Critical Infrastructure

A Visual Summary of SANS AI Cybersecurity Summit 2024

~ 7 Sep 2024 ~

Despite cyberattacks, water security standards remain a pipe dream

Hackers Threaten to Leak Planned Parenthood Data

North Korean Threat Actors Deploy COVERTCATCH Malware via LinkedIn Job Scams

FBI Cracks Down on Dark Web Marketplace Managed by Russian and Kazakh Nationals

~ 6 Sep 2024 ~

Google says replacing C/C++ in firmware with Rust is easy

Live Video of Promachoteuthis Squid

Cisco merch shoppers stung in Magecart attack

Locked In, Locked Out: How Data Breaches Shatter Refugees Safety

SonicWall Urges Users to Patch Critical Firewall Flaw Amid Possible Exploitation

YubiKey Side-Channel Attack

GeoServer Vulnerability Targeted by Hackers to Deliver Backdoors and Botnet Malware

GitHub Actions Vulnerable to Typosquatting, Exposing Developers to Hidden Malicious Code

The NSA Has a PodcastHere's How to Decode It

Therapy Sessions Exposed by Mental Health Care Firms Unsecured Database

Bitcoin ATM scams skyrocket Week in security with Tony Anscombe

The State of the Virtual CISO Report: MSP/MSSP Security Strategies for 2025

To patch this server, we need to get someone drunk

Critical Security Flaw Found in LiteSpeed Cache Plugin for WordPress

Apache OFBiz Update Fixes High-Severity Flaw Leading to Remote Code Execution

Pavel Durov Criticizes Outdated Laws After Arrest Over Telegram Criminal Activity

~ 5 Sep 2024 ~

Homeland security hopes to scuttle maritime cyber-threats with port infosec testbed

White Houses new fix for cyber job gaps: Serve the nation in infosec

YubiKeys Are a Security Gold Standardbut They Can Be Cloned

US charges Russian GRU hackers behind WhisperGate intrusions

Cisco's Smart Licensing Utility flaws suggest it's pretty dumb on security

Russias Most Notorious Special Forces Unit Now Has Its Own Cyber Warfare Team

Chinese-Speaking Hacker Group Targets Human Rights Studies in Middle East

Veeam Releases Security Updates to Fix 18 Flaws, Including 5 Critical Issues

Why It's So Hard to Fully Block X in Brazil

Quantum computing is coming are you ready?

Security boom is over, with over a third of CISOs reporting flat or falling budgets

U.S. Seizes 32 Pro-Russian Propaganda Domains in Major Disinformation Crackdown

Hughes Network Systems WL3000 Fusion Software

Long Analysis of the M-209

We Hunted Hidden Police Signals at the DNC

The fingerpointing starts as cyber incident at London transport body continues

ESET Research Podcast: HotPage

NIST Cybersecurity Framework (CSF) and CTEM Better Together

Tropic Trooper spies on government entities in the Middle East

Malware Attackers Using MacroPack to Deliver Havoc, Brute Ratel, and PhantomCore

New Cross-Platform Malware KTLVdoor Discovered in Attack on Chinese Trading Firm

Cisco Fixes Two Critical Flaws in Smart Licensing Utility to Prevent Remote Attacks

Security biz Verkada to pay $3m penalty under deal that also enforces infosec upgrade

White House seizes 32 domains, issues criminal charges in massive election-meddling crackdown

North Korean scammers plan wave of stealth attacks on crypto companies, FBI warns

Youve Taken a SANS Course Now What?

~ 4 Sep 2024 ~

Palo Alto takes a big bite out of IBM QRadar security

Copilot for Microsoft 365 might boost productivity if you survive the compliance minefield

Planned Parenthood confirms cyber-attack as RansomHub threatens to leak data

North Korean Hackers Targets Job Seekers with Fake FreeConference App

Cicada ransomware may be a BlackCat/ALPHV rebrand and upgrade

Google Confirms CVE-2024-32896 Exploited in the Wild, Releases Android Security Patch

Hackers Hijack 22,000 Removed PyPI Packages, Spreading Malicious Code to Developers

Zyxel Patches Critical OS Command Injection Flaw in Access Points and Routers

Security Researcher Sued for Disproving Government Statements

The New Effective Way to Prevent Account Takeovers

Mallox ransomware: in-depth analysis and evolution

The key considerations for cyber insurance: A pragmatic approach

Clearview AI Faces 30.5M Fine for Building Illegal Facial Recognition Database

Hackers Use Fake GlobalProtect VPN Software in New WikiLoader Malware Attack

The Japanese Robot Controversy Lurking in Israels Military Supply Chain

Telegram apologizes to South Korea and takes down smutty deepfakes

Why SANS Live Training? Whats in It for You and Your Career?

What to Expect at SANS Live Training Events

Ex-senior New York State staffer charged in cash-for-favors scandal with China

~ 3 Sep 2024 ~

White House thinks it's time to fix the insecure glue of the internet: Yup, BGP

UK trio pleads guilty to operating $10M MFA bypass biz