Port 22

~ 14 Jun 2024 ~

ESET Research Podcast: APT Activity Report Q4 2023Q1 2024

ZKTeco Biometric System Found Vulnerable to 24 Critical Security Flaws

North Korean Hackers Target Brazilian Fintech with Sophisticated Phishing Tactics

Microsoft Delays AI-Powered Recall Feature for Copilot+ PCs Amid Security Concerns

Microsoft bigwig says the Feds catching Chinese spies in Exchange Online is the cloud working as intended

~ 13 Jun 2024 ~

US Space Force wanted $77M to reinforce GPS and Congress shot it down

Oracle Ads have had it: $2B operation shuts down after dwindling to $300M

Ukrainian cops collar Kyiv programmer believed to be Conti, LockBit linchpin

New Attack Technique 'Sleepy Pickle' Targets Machine Learning Models

Arid Viper Launches Mobile Espionage Campaign with AridSpy Malware

Google's Privacy Sandbox more like a privacy mirage, campaigners claim

Siemens TIA Administrator

Siemens Teamcenter Visualization and JT2Go

Siemens ST7 ScadaConnect

Siemens SITOP UPS1600

Siemens SINEC Traffic Analyzer

Siemens SIMATIC S7-200 SMART Devices

Siemens SIMATIC and SIPLUS

Siemens SCALANCE XM-400, XR-500

Siemens PowerSys

Siemens Mendix Applications

Rockwell Automation FactoryTalk View SE

Fuji Electric Tellus Lite V-Simulator

Student's flimsy bin bags blamed for latest NHS data breach

Why SaaS Security is Suddenly Hot: Racing to Defend and Comply

AI and the Indian Election

Pakistan-linked Malware Campaign Evolves to Target Windows, Android, and macOS

Cybercriminals Employ PhantomLoader to Distribute SSLoad Malware

Cinterion EHS5 3G UMTS/HSPA Module Research

Arid Viper poisons Android apps with AridSpy

Ukraine Police Arrest Suspect Linked to LockBit and Conti Ransomware Groups

Google Warns of Pixel Firmware Security Flaw Exploited as Zero-Day

New Cross-Platform Malware 'Noodle RAT' Targets Windows and Linux Systems

Time to zero in on Zero Trust?

Crooks crack customer info at tracking device vendor Tile, issue 'extortion' demands

~ 12 Jun 2024 ~

Ransomware crew may have exploited Windows make-me-admin bug as a zero-day

White House report dishes deets on all 11 major government breaches from 2023

Microsoft Incident Response tips for managing a mass password reset

How to achieve cloud-native endpoint management with Microsoft Intune

China's FortiGate attacks more extensive than first thought

Cryptojacking Campaign Targets Misconfigured Kubernetes Clusters

Lessons from the Ticketmaster-Snowflake Breach

Black Basta Ransomware May Have Exploited MS Windows Zero-Day Flaw

Using AI for Political Polling

Medical-Targeted Ransomware Is Breaking Records After Change Healthcares $22M Payout

New Phishing Campaign Deploys WARMCOOKIE Backdoor Targeting Job Seekers

China-Backed Hackers Exploit Fortinet Flaw, Infecting 20,000 Systems Globally

Microsoft Issues Patches for 51 Flaws, Including Critical MSMQ Vulnerability

Allianz Cyber Talent Academy - The First Foundation to Bridge the Cybersecurity Skills Shortage

Let's kick off our summer with a pwn-me-by-Wi-Fi bug in Microsoft Windows

~ 11 Jun 2024 ~

Patch Tuesday, June 2024 Recall Edition

Pure Storage pwned, claims data plundered by crims who broke into Snowflake workspace

Cylance clarifies data breach details, except where the data came from

US Leaders Dodge Questions About Israels Influence Campaign

How Cynet Makes MSPs Rich & Their Clients Secure

Chinese Actor SecShow Conducts Massive DNS Probing on Global Scale

UK and Canada's data chiefs join forces to investigate 23andMe mega-breach

Rockwell Automation ControlLogix, GuardLogix, and CompactLogix

Intrado 911 Emergency Gateway

AVEVA PI Web API

AVEVA PI Asset Framework Client

LLMs Acting Deceptively

Top 10 Critical Pentest Findings 2024: What You Need to Know

Apple Integrates OpenAI's ChatGPT into Siri for iOS, iPadOS, and macOS

China-Linked ValleyRAT Malware Resurfaces with Advanced Data Theft Tactics

QR code SQL injection and other vulnerabilities in a popular biometric terminal

Snowflake Breach Exposes 165 Customers' Data in Ongoing Extortion Campaign

Arm Warns of Actively Exploited Zero-Day Vulnerability in Mali GPU Drivers

Snowflake customers not using MFA are not unique over 165 of them have been compromised

Cyber attack flattens Japanese vid-sharing site Niconico and others

~ 10 Jun 2024 ~

Christie's confirms RansomHub crooks stole data on 45K clients

More_eggs Malware Disguised as Resumes Targets Recruiters in Phishing Attack

WeLiveSecurity wins Best Cybersecurity Vendor Blog award!

Ransomware Is More Brutal Than Ever in 2024

Snowflake tells customers to enable MFA as investigations continue

Two cuffed over suspected smishing campaign using 'text message blaster'

Two arrested in UK over fake cell tower-powered smishing campaign

Cybersecurity CPEs: Unraveling the What, Why & How

Azure Service Tags Vulnerability: Microsoft Warns of Potential Abuse by Hackers

Exploiting Mistyped URLs

Google Takes Down Influence Campaigns Tied to China, Indonesia, and Russia

Bypassing 2FA with phishing and OTP bots

Sticky Werewolf Expands Cyber Attack Targets in Russia and Belarus

~ 9 Jun 2024 ~

Akira: Perhaps the next big thing in ransomware, says Tidal threat intelligence chief

~ 8 Jun 2024 ~

Uber ex-CSO Joe Sullivan: We need security leaders running to work, not giving up

Apple Is Coming for Your Password Manager

New PHP Vulnerability Exposes Windows Servers to Remote Code Execution

Microsoft Revamps Controversial AI-Powered Recall Feature Amid Privacy Concerns

~ 7 Jun 2024 ~

'New York Times source code' leaks online via 4chan

FCC takes some action against notorious BGP

Friday Squid Blogging: Squid Catch Quotas in Peru

Security and Human Behavior (SHB) 2024

Defiant Microsoft pushes ahead with controversial Recall tho as an opt-in

Op-ed by Kate Robertson and Ron Deibert in The Globe and Mail

Frontier Communications: 750k people's data stolen in April attack on systems

Microsoft Will Switch Off Recall by Default After Security Backlash

Ultimate Cyber Hygiene Guide: Learn How to Simplify Your Security Efforts

LightSpy Spyware's macOS Variant Found with Advanced Surveillance Capabilities

How to navigate NIS2 and secure your vulnerabilities

Cisco fixes WebEx flaw that allowed government, military meetings to be spied on