Port 22

~ 31 May 2024 ~

Twitch ditches Safety Advisory Council, relaunches with vetted 'ambassadors'

Snowflake denies miscreants melted its security to steal data from top customers

US senator claims UnitedHealth's CEO, board appointed 'unqualified' CISO

Friday Squid Blogging: Baby Colossal Squid

Cyber cops plead for info on elusive Emotet mastermind

Mysterious Cyber Attack Took Down 600,000+ Routers in the U.S.

New Nork-ish cyberespionage outfit uncovered after three years

What happens when facial recognition gets it wrong Week in security with Tony Anscombe

Microsoft Warns of Surge in Cyber Attacks Targeting Internet-Exposed OT Devices

Google to push ahead with Chrome's ad-blocker extension overhaul in earnest

How AI Will Change Democracy

Beyond Threat Detection A Race to Digital Security

Russian Hackers Target Europe with HeadLace Malware and Credential Harvesting

OpenAI, Meta, TikTok Disrupt Multiple AI-Powered Disinformation Campaigns

FlyingYeti phishing crew grounded after abominable Ukraine attacks

Mystery attacker remotely bricked 600,000 SOHO routers with malicious firmware update

~ 30 May 2024 ~

OpenAI is very smug after thwarting five ineffective AI covert influence ops

US Treasury says NFTs 'highly susceptible' to fraud, but ignored by high-tier criminals

Ecuador Is Literally Powerless in the Face of Drought

Euro cops disrupt malware droppers, seize thousands of domains

CISA Alerts Federal Agencies to Patch Actively Exploited Linux Kernel Flaw

Exposed and vulnerable: Recent attacks highlight critical need to protect internet-exposed OT devices

FlyingYeti Exploits WinRAR Vulnerability to Deliver COOKBOX Malware in Ukraine

Cyber Espionage Alert: LilacSquid Targets IT, Energy, and Pharma Sectors

Operation Endgame Hits Malware Delivery Platforms

RedTail Crypto-Mining Malware Exploiting Palo Alto Networks Firewall Vulnerability

Cybercriminals raid BBC pension database, steal records of over 25,000 people

Researchers Uncover Active Exploitation of WordPress Plugin Vulnerabilities

IT worker sued over vengeful cyber harassment of policeman who issued a jaywalking ticket

Westermo EDW-100

LenelS2 NetBox

Inosoft VisiWin

Fuji Electric Monitouch V-SFT

By Whose Authority? Pegasus targeting of Russian & Belarusian-speaking opposition activists and independent media in Europe

How to Build Your Autonomous SOC Strategy

IBM spin-off Kyndryl accused of discriminating on basis of age, race, disability

Supply Chain Attack against Courtroom Software

Europol Shuts Down 100+ Servers Linked to IcedID, TrickBot, and Other Malware

Pretty much all of the headaches affecting MSPs are due to cybersecurity

The Unusual Espionage Act Case Against a Drone Photographer

AI in HR: Is artificial intelligence changing how we hire employees forever?

U.S. Dismantles World's Largest 911 S5 Botnet, with 19 Million Infected Devices

Okta Warns of Credential Stuffing Attacks Targeting Customer Identity Cloud

Indian stock exchange finally encrypting all messages to traders

~ 29 May 2024 ~

Chinese national cuffed on charges of running 'likely the world's largest botnet ever'

Miscreants claim they've snatched 560M people's info from Ticketmaster

Largest Botnet Ever Tied to Billions in Stolen Covid-19 Relief Funds

Multi-day DDoS storm batters Internet Archive

Is Your Computer Part of The Largest Botnet Ever?

Cybercriminals Abuse StackOverflow to Promote Malicious Python Package

6 insights from Microsofts 2024 state of multicloud risk report to evolve your security strategy

Check Point Warns of Zero-Day Attacks on its VPN Gateway Products

Brazilian Banks Targeted by New AllaKore RAT Variant Called AllaSenha

North Korea building cash reserves using ransomware, video games

U.S. Sentences 31-Year-Old to 10 Years for Laundering $4.5M in Email Scams

New Research Warns About Weak Offboarding Management and Insider Risks

Privacy Implications of Tracking Wireless Access Points

Microsoft Uncovers 'Moonstone Sleet' New North Korean Hacker Group

ESET World 2024: Big on prevention, even bigger on AI

BreachForums Returns Just Weeks After FBI Seizure - Honeypot or Blunder?

What is Your Definition of Insider Threat?

How to Strengthen Your Cybersecurity Posture with the Updated SEC401 Labs

A Visual Summary of SANS Ransomware Summit 2024

Unraveling the Mysteries of Digital Forensics: A Blog on the "Secret Life of Devices" Workshop Series

~ 28 May 2024 ~

2.8M US folks learn their personal info was swiped months ago in Sav-Rx IT heist

Treasury Sanctions Creators of 911 S5 Proxy Botnet

BreachForums returns, just weeks after FBI-led takedown

SpiderOak One customers threaten to jump ship following datacenter upgrade

Moonstone Sleet emerges as new North Korean threat actor with new bag of tricks

Auction house Christies confirms criminals stole some client data

Indian National Pleads Guilty to $37 Million Cryptocurrency Theft Scheme

Campbell Scientific CSI Web Server

How Researchers Cracked an 11-Year-Old Password to a $3 Million Crypto Wallet

4-Step Approach to Mapping and Securing Your Organization's Most Critical Assets

Lattice-Based Cryptosystems and Quantum Cryptanalysis

Researchers Warn of CatDDoS Botnet and DNSBomb DDoS Attack Technique

Trusted relationship attacks: trust, but verify

Cops Are Just Trolling Cybercriminals Now

Beyond the buzz: Understanding AI and its role in cybersecurity

Take two APIs and call me in the morning: How healthcare research can cure cyber crime

WordPress Plugin Exploited to Steal Credit Card Data from E-commerce Sites

TP-Link Gaming Router Vulnerability Exposes Users to Remote Code Attacks

ICS/OT Cybersecurity & AI: Considerations for Now and the Future (Part I)

Boosting Cyber Resilience with Effective Staffing Strategies

~ 27 May 2024 ~

How's Uncle Sam getting on with Biden's AI exec order? Pretty good, we're told

Message board scams

Moroccan Cybercrime Group Steals Up to $100K Daily Through Gift Card Fraud

Report: The Dark Side of Phishing Protection

Threat landscape for industrial automation systems, Q1 2024

New Tricks in the Phishing Playbook: Cloudflare Workers, HTML Smuggling, GenAI

Pakistan-linked Hackers Deploy Python, Golang, and Rust Malware on Indian Targets

Bayer and 12 other major drug companies caught up in Cencora data loss

NIS2 Unveiled: Three Critical Changes Impacting Your Cybersecurity Strategy

~ 25 May 2024 ~

Microsofts New Recall AI Tool May Be a Privacy Nightmare

Experts Find Flaw in Replicate AI Service Exposing Customers' Models and Data

~ 24 May 2024 ~

Man behind deepfake Biden robocall indicted on felony charges, faces $6M fine

Best Buy and Geek Squad were most impersonated orgs by scammers in 2023

Friday Squid Blogging: Dana Squid Attacking Camera

Suspected supply chain attack backdoors courtroom recording software

Hackers Created Rogue VMs to Evade Detection in Recent MITRE Cyber Attack