Port 22

~ 23 Aug 2024 ~

Latvian Hacker Extradited to U.S. for Role in Karakurt Cybercrime Group

Uniting the brightest minds in security, network and cloud

Surveillance Watch

~ 22 Aug 2024 ~

SolarWinds left critical hardcoded credentials in its Web Help Desk product

A Global Treaty to Fight CybercrimeWithout Combating Mercenary Spyware: Article by Kate Robertson in Lawfare

CrowdStrike deja vu as 'performance issue' leaves systems sluggish

Hardware Backdoor Discovered in RFID Cards Used in Hotels and Offices Worldwide

Halliburton probes 'an issue' disrupting business ops

Hardcoded Credential Vulnerability Found in SolarWinds Web Help Desk

Chinese Hackers Exploit Zero-Day Cisco Switch Flaw to Gain System Control

Microsoft AI Tour: Hear the latest product innovations to elevate your security strategy

New 'ALBeast' Vulnerability Exposes Weakness in AWS Application Load Balancer

Ransomware batters critical industries, but takedowns hint at relief

This uni thought it would be a good idea to do a phishing test with a fake Ebola scare

The Facts About Continuous Penetration Testing and Why Its Important

Memory corruption vulnerabilities in Suricata and FreeRDP

NGate Android malware relays NFC traffic to steal cash

Kick off early Octoberfest with an EUC-fest

Cisco calls for United Nations to revisit cyber crime Convention

Google Fixes High-Severity Chrome Flaw Actively Exploited in the Wild

Critical Flaw in WordPress LiteSpeed Cache Plugin Allows Hackers Admin Access

GitHub Patches Critical Security Flaw in Enterprise Server Granting Admin Privileges

New Malware PG_MEM Targets PostgreSQL Databases for Crypto Mining

Foiling bot attacks with AI-powered telemetry

A Visual Summary of SANS DFIR Summit 2024

~ 21 Aug 2024 ~

You probably want to patch this critical GitHub Enterprise Server bug now

Stadiums Are Embracing Face Recognition. Privacy Advocates Say They Should Stick to Sports

110K domains targeted in 'sophisticated' AWS cloud extortion campaign

Microsoft Patches Critical Copilot Studio Vulnerability Exposing Sensitive Data

Microsoft again ranked number one in modern endpoint security market share

North Korean Hackers Deploy New MoonPeak Trojan in Cyber Campaign

The US Government Wants YouYes, Youto Hunt Down Generative AI Flaws

Russia tells citizens to switch off home surveillance because the Ukrainians are coming

Story of an Undercover CIA Agent who Penetrated Al Qaeda

It's Time To Untangle the SaaS Ball of Yarn

Styx Stealer Creator's OPSEC Fail Leaks Client List and Profit Details

New macOS Malware TodoSwift Linked to North Korean Hacking Groups

Exploits and vulnerabilities in Q2 2024

How regulatory standards and cyber insurance inform each other

Deadbeat dad faked his own death by hacking government databases

CERT-UA Warns of New Vermin-Linked Phishing Attacks with PoW Bait

GiveWP WordPress Plugin Vulnerability Puts 100,000+ Websites at Risk

Chipmaker Microchip reveals cyber attack whacked manufacturing capacity

~ 20 Aug 2024 ~

An AWS Configuration Issue Could Expose Thousands of Web Apps

~ 21 Aug 2024 ~

Detecting AWS Account Compromise: Key Indicators in CloudTrail Logs for Stolen API Keys

Czech Mobile Users Targeted in New Banking Credential Theft Scheme

~ 20 Aug 2024 ~

Plane-tracking app admits user passwords, SSNs exposed for over 3 years

Approach to mainframe penetration testing on z/OS

Hacking Wireless Bicycle Shifters

Hackers Exploit PHP Vulnerability to Deploy Stealthy Msupedge Backdoor

Anatomy of an Attack

Researchers Uncover TLS Bootstrap Attack on Azure Kubernetes Clusters

Iranian Cyber Group TA453 Targets Jewish Leader with New AnvilEcho Malware

Be careful what you pwish for Phishing in PWA applications

Iran named as source of Trump campaign phish, leaks

Blind Eagle Hackers Exploit Spear-Phishing to Deploy RATs in Latin America

Thousands of Oracle NetSuite Sites at Risk of Exposing Customer Information

CISA Warns of Critical Jenkins Vulnerability Exploited in Ransomware Attacks

Digital wallets can allow purchases with stolen credit cards

~ 19 Aug 2024 ~

OpenAI kills Iranian accounts using ChatGPT to write US election disinfo

Multiple flaws in Microsoft macOS apps unpatched despite potential risks

National Public Data Published Its Own Passwords

National Public Data tells officials 'only' 1.3M people affected by intrusion

New UULoader Malware Distributes Gh0st RAT and Mimikatz in East Asia

Cybercriminals Exploit Popular Software Searches to Spread FakeBat Malware