Port 22

~ 11 Oct 2024 ~

More on My AI and Democracy Book

GitHub, Telegram Bots, and QR Codes Abused in New Wave of Phishing Attacks

Microsofts guidance to help mitigate Kerberoasting

GoldenJackal jumps the air gap twice Week in security with Tony Anscombe

RAC duo busted for stealing and selling crash victims' data

Keir Starmer hands ex-Darktrace boss investment minister gig

IronNet Has Shut Down

How Hybrid Password Attacks Work and How to Defend Against Them

CISA Warns of Threat Actors Exploiting F5 BIG-IP Cookies for Network Reconnaissance

New Critical GitLab Vulnerability Could Allow Arbitrary CI/CD Pipeline Execution

Bohemia and Cannabia Dark Web Markets Taken Down After Joint Police Operation

FBI created a cryptocurrency so it could watch it being abused

Healthcare attacks spread beyond US just ask India's Star Health

~ 10 Oct 2024 ~

Crooks stole personal info of 77k Fidelity Investments customers

Secure your AI initiatives

Fore-get about privacy, golf tech biz leaves 32M data records on the fairway

CISA adds fresh Ivanti vuln, critical Fortinet bug to hall of shame

OpenAI Blocks 20 Global Malicious Campaigns Using AI for Cybercrime and Disinformation

Experts Warn of Critical Unpatched Vulnerability in Linear eMerge E3 Systems

Siemens Tecnomatix Plant Simulation

Siemens Teamcenter Visualization and JT2Go

Siemens SINEC Security Monitor

Siemens Simcenter Nastran

Siemens SIMATIC S7-1500 CPUs

Siemens SIMATIC S7-1500 and S7-1200 CPUs

Siemens Sentron Powercenter 1000

Siemens SENTRON PAC3200 Devices

Siemens RUGGEDCOM APE1808

Siemens Questa and ModelSim

Siemens PSS SINCAL

Siemens JT2Go

Siemens HiMed Cockpit

Schneider Electric Zelio Soft 2

Rockwell Automation Verve Asset Manager

Rockwell Automation PowerFlex 6000T

Rockwell Automation Logix Controllers

Rockwell Automation DataMosaix Private Cloud

Rockwell Automation DataMosaix Private Cloud

Rockwell Automation ControlLogix

Delta Electronics CNCSoft-G2

Mozilla patches critical Firefox vuln that attackers are already exploiting

Deebot Robot Vacuums Are Using Photos and Audio to Train Their AI

Cyber Signals Issue 8 | Education under siege: How cybercriminals target our schools

6 Simple Steps to Eliminate SOC Analyst Burnout

Telekopye transitions to targeting tourists via hotel booking scam

How to enable secure use of AI

How should CISOs respond to the rise of GenAI?

Cybercriminals Use Unicode to Hide Mongolian Skimmer in E-Commerce Platforms

Dutch cops reveal takedown of 'world's largest dark web market'

CISA Warns of Critical Fortinet Flaw as Palo Alto and Cisco Issue Urgent Security Patches

Firefox Zero-Day Under Attack: Update Your Browser Immediately

Internet Archive Breach Exposes 31 Million Users

Internet Archive user info stolen in cyberattack, succumbs to DDoS

Internet Archive leaks user info and succumbs to DDoS

~ 9 Oct 2024 ~

Moscow-adjacent GoldenJackal gang strikes air-gapped systems with custom malware

Smart TVs are spying on everyone

Marriott settles for a piddly $52M after series of breaches affecting millions

National Public Data files for bankruptcy, admits 'hundreds of millions' potentially affected

Lamborghini Carjackers Lured by $243M Cyberheist

Google Joins Forces with GASA and DNS RF to Tackle Online Scams at Scale

69,000 Bitcoins Are Headed for the US TreasuryWhile the Agent Who Seized Them Is in Jail

Researchers Uncover Major Security Vulnerabilities in Industrial MMS Protocol Libraries

Microsoft cleans up hot mess of Patch Tuesday preview

Ransomware gang Trinity joins pile of scumbags targeting healthcare

N. Korean Hackers Use Fake Interviews to Infect Developers with Cross-Platform Malware

Auto-Identification Smart Glasses

Social Media Accounts: The Weak Link in Organizational SaaS Security

Microsoft Issues Security Update Fixing 118 Flaws, Two Actively Exploited in the Wild

Microsoft Detects Growing Use of File Hosting Services in Business Email Compromise Attacks

Key Insights from Steve Sims' Keynote on the Current Threat Landscape and AI in Cybersecurity

~ 8 Oct 2024 ~

Microsoft issues 117 patches some for flaws already under attack

Patch Tuesday, October 2024 Edition

Qualcomm urges device makers to push patches after 'targeted' exploitation

Using iPhone Mirroring at work? You might have just overshared to your boss

Zero-Day Alert: Three Critical Ivanti CSA Vulnerabilities Actively Exploited

Gamers Tricked Into Downloading Lua-Based Malware via Fake Cheating Script Engines

File hosting services misused for identity phishing

What Google's U-Turn on Third-Party Cookies Means for Chrome Privacy

Cyberattack Group 'Awaken Likho' Targets Russian Government with Advanced Tools

China Possibly Hacking US Lawful Access Backdoor

New Case Study: The Evil Twin Checkout Page

The Value of AI-Powered Identity

GoldenJackal Target Embassies and Air-Gapped Systems Using Malware Toolsets

Cyber insurance, human risk, and the potential for cyber-ratings

Happy birthday, Putin you've been pwned

Pro-Ukrainian Hackers Strike Russian State TV on Putin's Birthday

Qualcomm Urges OEMs to Patch Critical DSP and WLAN Flaws Amid Active Exploits

Google brings better bricking to Androids, to curtail crims

Feds reach for sliver of crypto-cash nicked by North Korea's notorious Lazarus Group

~ 7 Oct 2024 ~

American Water stops billing for H2O due to 'cybersecurity incident'

American Water rinsed in cyberattack, turns off app

Cops love facial recognition, and withholding info on its use from the courts

Chinese cyberspies reportedly breached Verizon, AT&T, Lumen

Microsoft Defender for Cloud remediated threats 30% faster than other solutions, according to Forrester TEI study

Vulnerable APIs and Bot Attacks Costing Businesses Up to $186 Billion Annually

Largest Recorded DDoS Attack is 3.8 Tbps

Modernization of Authentication: Webinar on MFA, Passwords, and the Shift to Passwordless

Awaken Likho is awake: new techniques of an APT group

New Gorilla Botnet Launches Over 300,000 DDoS Attacks Across 100 Countries

Critical Apache Avro SDK Flaw Allows Remote Code Execution in Java Applications