Port 22

~ 7 Jun 2024 ~

560 million Ticketmaster customer data for sale? Week in security with Tony Anscombe

Cyber Landscape is Evolving - So Should Your SCA

The AI Debate: Google's Guidelines, Meta's GDPR Dispute, Microsoft's Recall Backlash

The Justice Department Took Down the 911 S5 Botnet

Russian hacktivists vow mass attacks against EU elections

FBI Distributes 7,000 LockBit Ransomware Decryption Keys to Help Victims

SPECTR Malware Targets Ukraine Defense Forces in SickSync Campaign

Spam blocklist SORBS closed by its owner, Proofpoint

Commando Cat Cryptojacking Attacks Target Misconfigured Docker Instances

POC exploit code published for 9.8-rated Apache HugeGraph RCE flaw

Microsoft's Recall Feature Is Even More Hackable Than You Thought

~ 6 Jun 2024 ~

FBI encourages LockBit victims to step right up for free encryption keys

FBI encourages LockBit victims to step right up for free decryption keys

The Snowflake Attack May Be Turning Into One of the Largest Data Breaches Ever

Espionage with a Drone

Uncle Sam seeks to claw back $5M+ stolen from trade union through spoofed email

Muhstik Botnet Exploiting Apache RocketMQ Flaw to Expand DDoS Attacks

Microsoft shows venerable and vulnerable NTLM security protocol the door

Mitsubishi Electric CC-Link IE TSN Industrial Managed Switch

Johnson Controls Software House iStar Pro Door Controller

Emerson PACSystem and Fanuc

Emerson Ovation

Third-Party Cyber Attacks: The Threat No One Sees Coming Here's How to Stop Them

Hackers Target Python Developers with Fake "Crytic-Compilers" Package on PyPI

7-year-old Oracle WebLogic bug under active exploitation

The Lords of Silicon Valley Are Thrilled to Present a Handheld Iron Dome

Prevent Account Takeover with Better Password Security

Hackers Exploit Legitimate Packer Software to Spread Malware Undetected

The job hunters guide: Separating genuine offers from scams

Microsoft Research chief scientist has no issue with Windows Recall

Google Maps Timeline Data to be Stored Locally on Your Device for Privacy

How to Lead an Army of Digital Sleuths in the Age of AI

~ 5 Jun 2024 ~

TikTok confirms CNN, other high-profile accounts hijacked via zero-day vulnerability

Who are these RansomHub cyber-thieves? Looks like a Knight ransomware reboot

Emergency patches released for critical vulns impacting EOL Zyxel NAS boxes

4 cuffed following probe into holiday scheme for cybercrooks

Chinese State-Backed Cyber Espionage Targets Southeast Asian Government

Online Privacy and Overfishing

Unpacking 2024's SaaS Threat Predictions

Rebranded Knight Ransomware Targeting Healthcare and Businesses Worldwide

The Age of the Drone Police Is Here

An American Company Enabled a North Korean Scam That Raised Money for WMDs

Zyxel Releases Patches for Firmware Vulnerabilities in EoL NAS Models

Microsoft paid Tenable a bug bounty for an Azure flaw it says doesn't need a fix, just better documentation

Celebrity TikTok Accounts Compromised Using Zero-Click Attack via DMs

Essential Cybersecurity Practices for Protecting Industrial Infrastructure

~ 4 Jun 2024 ~

Command senior chief busted for secretly setting up Wi-Fi on US Navy combat ship

Pentagon 'doubling down' on Microsoft despite 'massive hack,' senators complain

TikTok Hack Targets High-Profile Users via DMs

AI jailbreaks: What they are and how they can be mitigated

The four stages of creating a trust fabric with identity and network security

London hospitals declare critical incident after service partner ransomware attack

Russian Power Companies, IT Firms, and Govt Agencies Hit by Decoy Dog Trojan

This Hacker Tool Extracts All the Data Collected by Windows New Recall AI

Telerik Report Server Flaw Could Let Attackers Create Rogue Admin Accounts

Christie's stolen data sold to highest bidder rather than leaked, RansomHub claims

Microsoft accused of tracking kids with education software

Cybercrooks get cozy with BoxedApp to dodge detection

Uniview NVR301-04S2-P4

The Next Generation of RBI (Remote Browser Isolation)

Breaking a Password Manager

Hackers Use MS Excel Macro to Launch Multi-Stage Malware Attack in Ukraine

AI Is Your Coworker Now. Can You Trust It?

Snowflake Warns: Targeted Credential Theft Campaign Hits Cloud Customers

Inside the Biggest FBI Sting Operation in History

Russians Love YouTube. Thats a Problem for the Kremlin

DarkGate Malware Replaces AutoIt with AutoHotkey in Latest Cyber Attacks

Oracle WebLogic Server OS Command Injection Flaw Under Active Attack

Hudson Rock yanks report fingering Snowflake employee creds snafu for mega-leak

CISOs Navigating the GenAI Tide: Actionable Insights from SANS Institute

~ 3 Jun 2024 ~

NIST turns to IT consultants to clear National Vulnerability Database backlog

Crooks threaten to leak 3B personal records 'stolen from background check firm'

Microsoft is named a leader in the Forrester Wave for XDR

Microsoft is again named the overall leader in the Forrester Wave for XDR

Russia takes gold for disinformation as Olympics approach

Researchers Uncover RAT-Dropping npm Package Targeting Gulp Users

Authorities Ramp Up Efforts to Capture the Mastermind Behind Emotet

Check Point warns customers to patch VPN vulnerability under active exploitation

Seeing Like a Data Structure

AI Will Increase the Quantityand Qualityof Phishing Scams

SASE Threat Report: 8 Key Findings for Enterprise Security

How Donald Trump Could Weaponize US Surveillance in a Second Term

Researcher Uncovers Flaws in Cox Modems, Potentially Impacting Millions

IT threat evolution in Q1 2024. Mobile statistics

IT threat evolution Q1 2024

IT threat evolution in Q1 2024. Non-mobile statistics

The murky world of password leaks and how to check if youve been hit

Derisking your CNI

Andariel Hackers Target South Korean Institutes with New Dora RAT Malware

Researchers crash Baidu robo-cars with tinfoil and paint daubed on cardboard

Beware: Fake Browser Updates Deliver BitRAT and Lumma Stealer Malware

The NIS2 Mandate: What Every Organization Needs to Know

~ 1 Jun 2024 ~

The Ticketmaster Data Breach May Be Just the Beginning

Mysterious Hack Destroyed 600,000 Internet Routers

AI Company Hugging Face Notifies Users of Suspected Unauthorized Access

~ 31 May 2024 ~

Twitch ditches Safety Advisory Council, relaunches with vetted 'ambassadors'

Snowflake denies miscreants melted its security to steal data from top customers

US senator claims UnitedHealth's CEO, board appointed 'unqualified' CISO

Friday Squid Blogging: Baby Colossal Squid

Cyber cops plead for info on elusive Emotet mastermind