Port 22

~ 7 Oct 2024 ~

Critical Apache Avro SDK Flaw Allows Remote Code Execution in Java Applications

THN Cybersecurity Recap: Top Threats and Trends (Sep 30 - Oct 6)

Google Blocks Unsafe Android App Sideloading in India for Improved Fraud Protection

Mind the (air) gap: GoldenJackal gooses government guardrails

Embattled users worn down by privacy options? Let them eat code

E.U. Court Limits Meta's Use of Personal Facebook Data for Targeted Ads

~ 5 Oct 2024 ~

Stealthy Malware Has Infected Thousands of Linux Systems for Years

The FBI Still Hasnt Cracked NYC Mayor Eric Adams Phone

Ryanair faces GDPR turbulence over customer ID checks

UK's Sellafield nuke waste processing plant fined 333K for infosec blunders

Apple Releases Critical iOS and iPadOS Updates to Fix VoiceOver Password Vulnerability

~ 4 Oct 2024 ~

Friday Squid Blogging: Map of All Colossal Squid Sightings

About a quarter million Comcast subscribers had their data stolen from debt collector

About a quarter million Comcast subscribers had data stolen from debt collector

U.S. and Microsoft Seize 107 Russian Domains in Major Cyber Fraud Crackdown

The complexities of attack attribution Week in security with Tony Anscombe

Apple fixes bug that let VoiceOver shout your passwords

This Video Game Controller Has Become the US Militarys Weapon of Choice

How to Get Going with CTEM When You Don't Know Where to Start

Cloudflare Thwarts Largest-Ever 3.8 Tbps DDoS Attack Targeting Global Sectors

WordPress LiteSpeed Cache Plugin Security Flaw Exposes Sites to XSS Attacks

Visit CyberThreat 2024 to hone your cybersecurity skills

Scam Information and Event Management

Harvard duo hacks Meta Ray-Bans to dox strangers on sight in seconds

Big names among thousands infected by payment-card-stealing CosmicSting crooks

HUMINT and its Role within Cybersecurity

~ 3 Oct 2024 ~

Android 14 Adds New Security Features to Block 2G Exploits and Baseband Attacks

Disrupting COLDRIVER: U.S. court orders seizure of domains used in Russian cyberattacks

DOJ, Microsoft seize 107 domains used in Russia's Star Blizzard phishing attacks

The Secret Weakness Execs Are Overlooking: Non-Human Identities

New Perfctl Malware Targets Linux Servers for Cryptocurrency Mining and Proxyjacking

Average North American CISO salary now $565K, mainly thanks to one weird trick

A Single Cloud Compromise Can Feed an Army of AI Sex Bots

North Korean Hackers Using New VeilShell Backdoor in Stealthy Cyber Attacks

Two British-Nigerian men sentenced over multimillion-dollar business email scam

TEM Opera Plus FM Family Transmitter

Subnet Solutions Inc. PowerSYSTEM Center

Delta Electronics DIAEnergie

Weird Zimbra Vulnerability

License Plate Readers Are Creating a US-Wide Database of Political Lawn Signs and Bumper Stickers

Ransomware crew infects 100+ orgs monthly with new MedusaLocker variant

Brits hate how big tech handles their data, but can't be bothered to do much about it

INTERPOL Arrests 8 in Major Phishing and Romance Fraud Crackdown in West Africa

LockBit Ransomware and Evil Corp Leaders Arrested and Sanctioned in Joint Global Effort

Ivanti Endpoint Manager Flaw Actively Targeted, CISA Warns Agencies to Patch

~ 2 Oct 2024 ~

700K+ DrayTek routers are sitting ducks on the internet, open to remote hijacking

Two simple give-me-control security bugs found in Optigo network switches used in critical manufacturing

Gender-based digital transnational repression as a global authoritarian practice: Article by The Citizen Lab published in Globalizations

Fake Trading Apps Target Victims Globally via Apple App Store and Google Play

China-Linked CeranaKeeper Targeting Southeast Asia with Data Exfiltration

Fake Job Applications Deliver Dangerous More_eggs Malware to HR Professionals

Separating the bee from the panda: CeranaKeeper making a beeline for Thailand

Alert: Over 700,000 DrayTek Routers Exposed to Hacking via 14 New Vulnerabilities

NIST's security flaw database still backlogged with 17K+ unprocessed bugs. Not great

Alert: Adobe Commerce and Magento Stores Under Attack from CosmicSting Exploit

California AI Safety Bill Vetoed

5 Must-Have Tools for Effective Dynamic Malware Analysis

'Patch yesterday': Zimbra mail servers under siege through RCE vuln

Finding a needle in a haystack: Machine learning at the forefront of threat hunting research

Andariel Hacking Group Shifts Focus to Financial Attacks on U.S. Organizations

Protecting private data in AI deployments

The fix for BGP's weaknesses has big, scary, issues of its own, boffins find

Researchers Sound Alarm on Active Attacks Exploiting Critical Zimbra Postjournal Flaw

PyPI Repository Found Hosting Fake Crypto Wallet Recovery Tools That Steal User Data

~ 1 Oct 2024 ~

ICE Signs $2 Million Contract With Spyware Maker Paragon Solutions

Euro cops arrest 4 including suspected LockBit dev chilling on holiday

Notorious Evil Corp Hackers Targeted NATO Allies for Russian Intelligence

AI-Powered Rhadamanthys Stealer Targets Crypto Wallets with Image Recognition

Cybersecurity Awareness Month: Securing our worldtogether

Evil Corp's deep ties with Russia and NATO member attacks exposed

NCA unmasks man it suspects is both 'Evil Corp kingpin' and LockBit affiliate

Why system resilience should mainly be the job of the OS, not just third-party applications

Optigo Networks ONS-S8 Spectra Aggregation Switch

Mitsubishi Electric MELSEC iQ-F FX5-OPC

Hacking ChatGPT by Planting False Memories into Its Data

5 Actionable Steps to Prevent GenAI Data Leaks Without Fully Blocking AI Usage

Key Group: another ransomware group using leaked builders

Cybersecurity Awareness Month needs a radical overhaul it needs legislation

Free Sniper Dz Phishing Tools Fuel 140,000+ Cyber Attacks Targeting User Credentials

New Cryptojacking Attack Targets Docker API to Create Malicious Swarm Botnet

U.K. Hacker Charged in $3.75 Million Insider Trading Scheme Using Hacked Executive Emails

Securing the Grid: Lessons from China's Cyberattacks on U.S. Providers

Australian e-tailer digiDirect customers' info allegedly stolen and dumped online

~ 30 Sep 2024 ~

Rackspace monitoring systems hit by zero-day

Ransomware forces hospital to turn away ambulances

T-Mobile US to cough up $31.5M after that long string of security SNAFUs

Crooked Cops, Stolen Laptops & the Ghost of UGNazi

If you're holding important data, Iran is probably trying spearphish it

THN Cybersecurity Recap: Last Week's Top Threats and Trends (September 23-29)

Remote ID verification tech is often biased, bungling, and no good on its own

Critical Flaws in Tank Gauge Systems Expose Gas Stations to Remote Attacks

Cloud threats have execs the most freaked out because they're not prepared

Session Hijacking 2.0 The Latest Way That Attackers are Bypassing MFA

AI and the 2024 US Elections

A Hacker's Era: Why Microsoft 365 Protection Reigns Supreme

The Pig Butchering Invasion Has Begun

Meta Fined 91 Million for Storing Millions of Facebook and Instagram Passwords in Plaintext

AI code helpers just can't stop inventing package names

Forget the Kia Boyz: Hackers could hijack your car with just a smartphone

Binance claims it helped to bust Chinese crypto scam app in India