Port 22

~ 20 Jun 2024 ~

French Diplomatic Entities Targeted in Russian-Linked Cyber Attacks

Russia's cyber spies still threatening French national security, democracy

Recovering Public Keys from Signatures

Tool Overload: Why MSPs Are Still Drowning with Countless Cybersecurity Tools in 2024

Qilin: We knew our Synnovis attack would cause a healthcare crisis at London hospitals

Chinese Cyber Espionage Targets Telecom Operators in Asia Since 2021

My health information has been stolen. Now what?

New Rust-based Fickle Malware Uses PowerShell for UAC Bypass and Data Exfiltration

Experts Uncover New Evasive SquidLoader Malware Targeting Chinese Organizations

~ 19 Jun 2024 ~

New Blog Moderation Policy

Kraken Crypto Exchange Hit by $3 Million Theft Exploiting Zero-Day Flaw

Chinese Cyber Espionage Group Exploits Fortinet, Ivanti and VMware Zero-Days

Amtrak confirms crooks are breaking into user accounts, derailing email addresses

Perplexity Is a Bullshit Machine

The Hacking of Culture and the Creation of Socio-Technical Debt

New Case Study: Unmanaged GTM Tags Become a Security Nightmare

Void Arachne Uses Deepfakes and AI to Deliver Malicious VPNs to Chinese Users

Warning: Markopolo's Scam Targeting Crypto Users via Fake Meeting Software

This Is What Would Happen if China Invaded Taiwan

Hacktivism is evolving and that could be bad news for organizations everywhere

Mailcow Mail Server Flaws Expose Servers to Remote Code Execution

That PowerShell 'fix' for your root cert 'problem' is a malware loader in disguise

~ 18 Jun 2024 ~

Rogue uni IT director pleads guilty after fraudulently buying $2.1M of tech

Dark-web kingpin puts 'stolen' internal AMD databases, source code up for sale

EU attempt to sneak through new encryption-busting law slammed by Signal, politicians

Signal Foundation Warns Against EU's Plan to Scan Private Messages for CSAM

CHERI Alliance formed to promote memory security tech ... but where's Arm?

Cybercriminals Exploit Free Software Lures to Deploy Hijack Loader and Vidar Stealer

Uncle Sam ends financial support to orgs hurt by Change Healthcare attack

Microsoft Defender Experts for XDR recognized in the latest MITRE Engenuity ATT&CK Evaluation for Managed Services

Analysis of user password strength

Analysis of user password strength

NHS boss says Scottish trust didn't meet attackers' demands

The Annual SaaS Security Report: 2025 CISO Plans and Priorities

Rethinking Democracy for the Age of AI

New Malware Targets Exposed Docker APIs for Cryptocurrency Mining

VMware Issues Patches for Cloud Foundation, vCenter Server, and vSphere ESXi

Singapore Police Extradites Malaysians Linked to Android Malware Fraud

VMware by Broadcom warns of two critical vCenter flaws, plus a nasty sudo bug

Arm security defense shattered by speculative execution 95% of the time

NIS2 Compliance for OT: Strategic Implementation of ICS Controls

Instructor Spotlight: Sean Thomas

~ 17 Jun 2024 ~

Shoddy infosec costs PwC spinoff and NMA $11.3M in settlement with Uncle Sam

Feds cuff suspected bosses of underworld Empire Market

Blackbaud has to cough up a few million dollars more over 2020 ransomware attack

ASUS Patches Critical Authentication Bypass Flaw in Multiple Router Models

Cops cuff 22-year-old Brit suspected of being Scattered Spider leader

China-Linked Hackers Infiltrate East Asian Firm for 3 Years Using F5 Devices

What is DevSecOps and Why is it Essential for Secure Software Delivery?

AWS is pushing ahead with MFA for privileged accounts. What that means for you ...

Using LLMs to Exploit Vulnerabilities

UK's Total Fitness exposed nearly 500k images of members and staff through unprotected database

Preventative defense tactics in the real world

Hackers Detail How They Allegedly Stole Ticketmaster Data From Snowflake

Amazon-Powered AI Cameras Used to Detect Emotions of Unwitting UK Train Passengers

Notorious cyber gang UNC3944 attacks vSphere and Azure to run VMs inside victims' infrastructure

Hackers Exploit Legitimate Websites to Deliver BadSpace Windows Backdoor

NiceRAT Malware Targets South Korean Users via Cracked Software

That didn't take long: replacement for SORBS spam blacklist arises ... sort of

Eight Essential Lessons for Resilient Supply Chain Security

A Visual Summary of SANS ICS Summit 2024

Japan's space junk cleaner hunts down major target

~ 16 Jun 2024 ~

How to Spot a Business Email Compromise Scam

Let Slip the Robot Dogs of War

U.K. Hacker Linked to Notorious Scattered Spider Group Arrested in Spain