Port 22

~ 19 Oct 2024 ~

Google Chromes uBlock Origin Purge Has Begun

Acronym Overdose Navigating the Complex Data Security Landscape

Crypt Ghouls Targets Russian Firms with LockBit 3.0 and Babuk Ransomware Attacks

The Disinformation Warning Coming From the Edge of Europe

~ 18 Oct 2024 ~

Jetpack fixes 8-year-old flaw affecting millions of WordPress sites

Friday Squid Blogging: Squid Scarf

Justice Department Indicts Tech CEO for Falsifying Security Certifications

North Korean IT Workers in Western Firms Now Demanding Ransom for Stolen Data

Brazil Arrests USDoD, Hacker in FBI Infragard Breach

Alleged Bitcoin crook faces 5 years after SEC's X account pwned

Threat actors exploiting zero-days faster than ever Week in security with Tony Anscombe

The Ultimate DSPM Guide: Webinar on Building a Strong Data Security Posture

ESET denies it was compromised as Israeli orgs targeted with 'ESET-branded' wipers

U.S. and Allies Warn of Iranian Cyberattacks on Critical Infrastructure in Year-Long Campaign

Analysis of the Crypt Ghouls group: continuing the investigation into a series of attacks on Russia

Beware: Fake Google Meet Pages Deliver Infostealers in Ongoing ClickFix Campaign

What the US Armys 1959 Soldier of Tomorrow Got Right About the Future of Warfare

Microsoft Reveals macOS Vulnerability that Bypasses Privacy Controls in Safari Browser

Intel robustly refutes China's accusations it bakes in NSA backdoors

Intel lightly hits back at China's accusations it bakes in NSA backdoors

Biz hired, and fired, a fake North Korean IT worker then the ransom demands began

Uncle Sam puts $10M bounty on Russian troll farm Rybar

~ 17 Oct 2024 ~

Troubled US insurance giant hit by extortion after data leak

Russian RomCom Attacks Target Ukrainian Government with New SingleCamper RAT Variant

New macOS vulnerability, HM Surf, could lead to unauthorized data access

Sudanese Brothers Arrested in AnonSudan Takedown

Brazilian police claim they've cuffed serial cybercrook behind FBI and Airbus attacks

Researchers Uncover Cicada3301 Ransomware Operations and Its Affiliate Program

Mitsubishi Electric CNC Series

LCDS LAquis SCADA

Kieback&Peter DDC4000 Series

HMS Networks EWON FLEXY 202

Elvaco M-Bus Metering Gateway CMe3100

GPS Jamming Is Screwing With Norwegian Planes

This Prompt Can Make an AI Chatbot Identify and Extract Personal Details From Your Chats

SideWinder APT Strikes Middle East and Africa With Stealthy Multi-Stage Attack

SAS CTF and the many ways to persist a kernel shellcode on Windows 7

U.S. Charges Two Sudanese Brothers for Record 35,000 DDoS Attacks

WeChat devs introduced security flaws when they modded TLS, say researchers

Anonymous Sudan isn't any more: two alleged operators named, charged

Critical Kubernetes Image Builder Vulnerability Exposes Nodes to Root Access Risk

~ 16 Oct 2024 ~

US contractor pays $300k to settle accusation it didn't properly look after Medicare users' data

Critical default credential bug in Kubernetes Image Builder allows SSH root access

Volkswagen monitoring data dump threat from 8Base ransomware crew

SolarWinds critical hardcoded credential bug under active exploit

Chinas infosec leads accuse Intel of NSA backdoor, cite chip security flaws

Hacker Charged With Seeking to Kill Using Cyberattacks on Hospitals

Hackers Abuse EDRSilencer Tool to Bypass Security and Hide Malicious Activity

FIDO Alliance Drafts New Protocol to Simplify Passkey Transfers Across Different Platforms

From Misuse to Abuse: AI Risks and Attacks

Cheating at Conkers

North Korean ScarCruft Exploits Windows Zero-Day to Spread RokRAT Malware

5 Techniques for Collecting Cyber Threat Intelligence

Protecting children from grooming | Unlocked 403 cybersecurity podcast (ep. 7)

Strengthen your cybersecurity with automation

Internet Archive wobbles back online, with limited functionality

Astaroth Banking Malware Resurfaces in Brazil via Spear-Phishing Attack

IBM acquires Indian SaaS startup Prescinto to shine a light on renewable energy assets

GitHub Patches Critical Flaw in Enterprise Server Allowing Unauthorized Instance Access

CISA Warns of Active Exploitation in SolarWinds Help Desk Software Vulnerability

WhatsApp may expose the OS you use to run it which could expose you to crooks

The 2024 State of ICS/OT Cybersecurity: Our Past and Our Future

ICS/OT Cybersecurity & AI: Considerations for Now and the Future (Part II)

~ 15 Oct 2024 ~

Cisco confirms 'ongoing investigation' after crims brag about selling tons of data

Should We Chat, Too? FAQ

Should We Chat, Too? Security Analysis of WeChats MMTLS Encryption Protocol

Microsoft says more ransomware stopped before reaching encryption

TrickMo Banking Trojan Can Now Capture Android PINs and Unlock Patterns

New Malware Campaign Uses PureCrypter Loader to Deliver DarkVision RAT

New Linux Variant of FASTCash Malware Targets Payment Switches in ATM Heists

Escalating cyber threats demand stronger global defense and cooperation

Siemens Siveillance Video Camera

Schneider Electric Data Center Expert

More Details on Israel Sabotaging Hezbollah Pagers and Walkie-Talkies

The Rise of Zero-Day Vulnerabilities: Why Traditional Security Solutions Fall Short

It Seemed Like an AI Crime-Fighting Super Tool. Then Defense Attorneys Started Asking Questions

Millions of People Are Using Abusive AI Nudify Bots on Telegram

Beyond the Surface: the evolution and expansion of the SideWinder APT group

Quishing attacks are targeting electric car owners: Heres how to slam on the brakes

China Accuses U.S. of Fabricating Volt Typhoon to Hide Its Own Hacking Campaigns

Researchers Uncover Hijack Loader Malware Using Stolen Code-Signing Certificates

WordPress Plugin Jetpack Patches Major Vulnerability Affecting 27 Million Sites

AI amplifies systemic risk to financial sector, says India's Reserve Bank boss

China again claims Volt Typhoon hack gang was invented by the US to discredit it

~ 14 Oct 2024 ~

US healthcare org admits up to 400,000 people's personal info was snatched

Upcoming Speaking Engagements

Leveraging AI/ML for next-gen SOC environments

Trump campaign arms up with 'unhackable' phones after Iranian intrusion

The War on Passwords Is One Step Closer to Being Over

Thousands of Fortinet instances vulnerable to actively exploited flaw

Nation-State Attackers Exploiting Ivanti CSA Flaws for Network Infiltration

5 Steps to Boost Detection and Response in a Multi-Layered Cloud

Supply Chain Attacks Exploit Entry Points in Python, npm, and Open-Source Ecosystems

Perfectl Malware

THN Cybersecurity Recap: Top Threats, Tools and Trends (Oct 7 - Oct 13)

How to head off data breaches with CIAM

Aspiring digital defender? Explore cybersecurity internships, scholarships and apprenticeships