Port 22

~ 27 Oct 2023 ~

Hacktivist Activity Related to Gaza Conflict Dwindles

Healey-Driscoll Awards $2.3M to CyberTrust Massachusetts to Strengthen Municipal Cybersecurity Efforts

N. Korean Lazarus Group Targets Software Vendor Using Known Flaws

What Lurks in the Dark: Taking Aim at Shadow AI

Roundcube Webmail servers under attack Week in security with Tony Anscombe

Microsoft unveils shady shenanigans of Octo Tempest and their cyber-trickery toolkit

Messaging Service Wiretap Discovered through Expired TLS Cert

How to Keep Your Business Running in a Contested Environment

Google Expands Its Bug Bounty Program to Tackle Artificial Intelligence Threats

King Charles III signs off on UK Online Safety Act, with unenforceable spying clause

A cascade of compromise: unveiling Lazarus new campaign

F5 Issues Warning: BIG-IP Vulnerability Allows Remote Code Execution

whats-new-sec510

~ 26 Oct 2023 ~

SMBs Need to Balance Cybersecurity Needs and Resources

SonicWall Data Confirms That Ransomware Is Still the Enterprise's Biggest Fear

IriusRisk Brings Threat Modeling to Machine Learning Systems

Cranium Announces $25 Million in Series A Funding to Secure AI

Lumen Q3 DDoS Report: Banking Was the Most Targeted Industry for the First Time

WatchGuard Launches MDR Service, Helps MSPs Accelerate Cybersecurity Service Delivery

Malwarebytes Announces Consumer Identity Theft Protection Solution

Apple drops urgent patch against obtuse TriangleDB iPhone malware

Darktrace Unveils Cloud-Native Security Solution Using AI

70% of Crypto Companies Report Deepfake Fraud Rise

Forget the outside hacker, the bigger threat is inside by the coffee machine

Rockwell's Verve Buy Enlivens Critical Infrastructure Security

Iran APT Targets the Mediterranean With Watering-Hole Attacks

Microsoft: 0ktapus Cyberattackers Evolve to 'Most Dangerous' Status

TikTok Streamers Are Staging Israel vs. Palestine Live Matches to Cash In on Virtual Gifts

Finding You: The Network Effect of Telecommunications Vulnerabilities for Location Disclosure

Side channel attacks take bite out of Apple silicon with iLeakage exploit

Longer Support Periods Raise the Bar for Mobile Security

iLeakage: New Safari Exploit Impacts Apple iPhones and Macs with A and M-Series CPUs

An integrated incident response solution with Microsoft and PwC

Nigerian Cybercrime Hub Shut Down With 6 Arrests

Maine Mass Shooting Disinformation Floods Social Media as Suspect Remains at Large

What Would a Government Shutdown Mean for Cybersecurity?

Microsoft Warns as Scattered Spider Expands from SIM Swaps to Ransomware

Complex Spy Platform StripedFly Bites 1M Victims

Record-Breaking 100 Million RPS DDoS Attack Exploits HTTP/2 Rapid Reset Flaw

The Danger of Forgotten Pixels on Websites: A New Case Study

New NSA Information from (and About) Snowden

How to catch a wild triangle

ESET APT Activity Report Q2Q3 2023

ServiceNow quietly addresses unauthenticated data exposure flaw from 2015

Iranian Group Tortoiseshell Launches New Wave of IMAPLoader Malware Attacks

Critical Flaw in NextGen's Mirth Connect Could Expose Healthcare Data

YoroTrooper: Researchers Warn of Kazakhstan's Stealthy Cyber Espionage Group

StripedFly: Perennially flying under the radar

Leveraging Artificial Intelligence (AI) to Manage Human Risk: Part 3 Issues and Limitations

~ 25 Oct 2023 ~

BHI Energy Releases Details of Akira Ransomware Attack

As Citrix Urges Its Clients to Patch, Researchers Release an Exploit

Canada goosed as attackers shutter hospitals and China deepfakes its politicians

Virtual Alarm: VMware Issues Major Security Advisory

Okta's Latest Security Breach Is Haunted by the Ghost of Incidents Past

Kazakh Attackers, Disguised as Azerbaijanis, Hit Former Soviet States

Cybersecurity Awareness Doesn't Cut It; It's Time to Focus on Behavior

Pro-Russia group exploits Roundcube zero-day in attacks on European government emails

Octo Tempest crosses boundaries to facilitate extortion, encryption, and destruction

Top insights and best practices from the new Microsoft Data Security Index report

Winter Vivern APT Blasts Webmail Zero-Day Bug With One-Click Exploit

A Cybersecurity Framework for Mitigating Risks to Satellite Systems

Nation State Hackers Exploiting Zero-Day in Roundcube Webmail Software

Critical OAuth Flaws Uncovered in Grammarly, Vidio, and Bukalapak Platforms

A fortified data vault to give you peace of mind

The Rise of S3 Ransomware: How to Identify and Combat It