Port 22

~ 19 Jul 2024 ~

The complexities of cybersecurity update processes

Safeguard Personal and Corporate Identities with Identity Intelligence

Pro-Houthi Group Targets Yemen Aid Organizations with Android Spyware

Huge Microsoft Outage, Linked to CrowdStrike, Takes Down Computers Around the World

APT41 Infiltrates Networks in Italy, Spain, Taiwan, Turkey, and the U.K.

SolarWinds Patches 11 Critical Flaws in Access Rights Manager Software

CrowdStrike code update bricking Windows machines around the world

North Korea likely behind takedown of Indian crypto exchange WazirX

Beijing's attack gang Volt Typhoon was a false flag inside job conspiracy: China

WazirX Cryptocurrency Exchange Loses $230 Million in Major Security Breach

Strategies for Training and Hiring in the US Government: A Black Rainbow Case Study

~ 18 Jul 2024 ~

Judge mostly drags SEC's lawsuit against SolarWinds into the recycling bin

Citizen Lab at CBC Ideas Week Brave New Worlds: The rights to privacy and the freedom of thought and expression

J.D. Vance Left His Venmo Public. Heres What It Shows

Kaspersky challenges US government to put up or shut up about Kremlin ties

Criminal Gang Physically Assaulting People for Their Cryptocurrency

Noura Al-Jizawi speaks at Montreal Institute of Genocide and Human Rights Studies online event

Russias FIN7 is peddling its EDR-nerfing malware to ransomware gangs

Alert: HotPage Adware Disguised as Ad Blocker Installs Malicious Kernel Driver

Subnet Solutions PowerSYSTEM Center

Mitsubishi Electric MELSOFT MaiLab

AppSec Webinar: How to Turn Developers into Security Champions

Automated Threats Pose Increasing Risk to the Travel Industry

Maximum-severity Cisco vulnerability allows attackers to change admin passwords

SAP AI Core Vulnerabilities Expose Customer Data to Cyber Attacks

HotPage: Story of a signed, vulnerable, ad-injecting driver

TAG-100: New Threat Actor Uses Open-Source Tools for Widespread Attacks

Firms skip security reviews of major app updates about half the time

Meta Halts AI Use in Brazil Following Data Protection Authority's Ban

Cisco Warns of Critical Flaw Affecting On-Prem Smart Software Manager

Release the hounds! Securing datacenters may soon need sniffer dogs

~ 17 Jul 2024 ~

Merged Exabeam and LogRhythm cut jobs, face lawsuit

Alleged Maniac Murder Cult Leader Indicted Over Plot to Kill Jews

Citizen Lab commentary in Brookings: The TikTok debacle: Distinguishing between foreign influence and interference

Kaspersky gives US customers six months of free updates as a parting gift

North Korean Hackers Update BeaverTail Malware to Target MacOS Users

Cloudflare Reports that Almost 7% of All Internet Traffic Is Malicious

Connect with Microsoft Security at Black Hat USA 2024

Ransomware continues to pile on costs for critical infrastructure victims

London council accuses watchdog of 'exaggerating' danger of 2020 raid on residents' data

Navigating Insider Risks: Are your Employees Enabling External Threats?

FIN7 Group Advertises Security-Bypassing Tool on Dark Web Forums

The US Supreme Court Kneecapped US Cyber Strategy

China-linked APT17 Targets Italian Companies with 9002 RAT Malware

Craig Wright admits he isn't the inventor of Bitcoin after High Court judgment in UK

Scattered Spider Adopts RansomHub and Qilin Ransomware for Cyber Attacks

Critical Apache HugeGraph Vulnerability Under Attack - Patch ASAP

Master Cloud Threat Detection with Cutting-Edge Techniques

How SOAR Transforms Security Operations: A Real-World Case Study

Iran's MuddyWater phishes Israeli orgs with custom BugSleep backdoor

~ 16 Jul 2024 ~

Scattered Spider's fave new ransomware tools are RansomHub and Qilin

Vulnerabilities in VPNs: Paper presented at the Privacy Enhancing Technologies Symposium 2024

Microsoft Purview Data Governance will be generally available September 1, 2024

Dont be complacent on cybersecurity resilience

'Konfety' Ad Fraud Uses 250+ Google Play Decoy Apps to Hide Malicious Twins

Rockwell Automation Pavilion 8

Privacy group complains to UK regulator about Meta scraping user data to train AI

Threat Prevention & Detection in SaaS Environments - 101

Malicious npm Packages Found Using Image Files to Hide Backdoor Code

Small but mighty: Top 5 pocket-sized gadgets to boost your ethical hacking skills

Iranian Hackers Deploy New BugSleep Backdoor in Middle East Cyber Attacks

Void Banshee APT Exploits Microsoft MHTML Flaw to Spread Atlantida Stealer

Kaspersky Exits U.S. Market Following Commerce Department Ban

CISA Warns of Actively Exploited RCE Flaw in GeoServer GeoTools Software

FBI gains access to Trump rally shooter's phone

Lessons Learned on the Impact of Training on Hiring Success: A Mastercard Use Case

How to Become a SOC Analyst

Developing Successful Cybersecurity Maturity Models: A Microsoft Use Case

DarkGate, the evil Swiss Army knife of malware, sees boom after rival Qbot crushed

~ 15 Jul 2024 ~

Kaspersky culls staff, closes doors in US amid Biden's ban

Hackers Claim to Have Leaked 1.1 TB of Disney Slack Messages

US Senators Secretly Work to Block Safeguards Against Surveillance Abuse

Hacking Scientific Citations

GitHub Token Leak Exposes Python's Core Repositories to Potential Attacks

Researchers: Weak Security Defaults Enabled Squarespace Domains Hijacks

ZDI shames Microsoft for yet another coordinated vulnerability disclosure snafu

Infoseccers claim Squarespace migration linked to DNS hijackings at Web3 firms

Hello, is it me youre looking for? How scammers get your phone number

10,000 Victims a Day: Infostealer Garden of Low-Hanging Fruit

CRYSTALRAY Hackers Infect Over 1,500 Victims Using Network Mapping Tool

Singapore Banks to Phase Out OTPs for Online Logins Within 3 Months

New HardBit Ransomware 4.0 Uses Passphrase Protection to Evade Detection

Google reportedly in talks to buy infosec outfit Wiz for $23 billion

I spy another mSpy breach: Millions more stalkerware buyers exposed

Defending Against SCATTERED SPIDER and The Com with Cybercrime Intelligence

UK cyber-boss slams China's bug-hoarding laws

~ 14 Jul 2024 ~

AT&T Paid a Hacker $370,000 to Delete Stolen Phone Records

Upcoming Speaking Engagements

~ 13 Jul 2024 ~

Three words to send a chill down your spine: Snowflake. Intrusion. Alert

Spyware Users Exposed in Major Data Breach

AT&T Confirms Data Breach Affecting Nearly All Wireless Customers

~ 12 Jul 2024 ~

Car dealer software slinger CDK Global said to have paid $25M ransom after cyberattack

Friday Squid Blogging: 1994 Lair of Squid Game

White House urged to double check Microsoft isn't funneling AI to China via G42 deal

Hackers Steal Phone, SMS Records for Nearly All AT&T Customers

CISA broke into a US federal agency, and no one noticed for a full 5 months

The Sweeping Danger of the AT&T Phone Records Breach

DarkGate Malware Exploits Samba File Shares in Short-Lived Campaign

Identity: the new security perimeter

Break-in at 'third-party cloud platform' leaked 110M customer records, says AT&T