Port 22

~ 24 May 2024 ~

Suspected supply chain attack backdoors courtroom recording software

Hackers Created Rogue VMs to Evade Detection in Recent MITRE Cyber Attack

Mandatory reporting for ransomware attacks? Week in security with Tony Anscombe

Fake Antivirus Websites Deliver Malware to Android and Windows Devices

How Do Hackers Blend In So Well? Learn Their Tricks in This Expert Webinar

On the Zero-Day Market

DevOps Dilemma: How Can CISOs Regain Control in the Age of Speed?

Google Detects 4th Chrome Zero-Day in May Actively Under Attack - Update ASAP

Courtroom Software Backdoored to Deliver RustDoor Malware in Supply Chain Attack

Japanese Experts Warn of BLOODALCHEMY Malware Targeting Government Agencies

The Evolution of Enterprise Threat Hunting: Detailed Insights from the SANS 2024 Survey

2024 Recap of Windows Patch Tuesdays: Enhancements in Security and New Challenges

Three-year-old Apache Flink flaw under active attack

~ 23 May 2024 ~

Stark Industries Solutions: An Iron Hammer in the Cloud

Here's yet more ransomware using BitLocker against Microsoft's own users

Casino cyberattacks put a bullseye on Scattered Spider and the FBI is closing in

Google guru roasts useless phishing tests, calls for fire drill-style overhaul

He Trained Crypto Cops to Fight Crypto Crimeand Allegedly Ran a $100M Dark Web Drug Market

Ransomware Attacks Exploit VMware ESXi Vulnerabilities in Alarming Pattern

CISA Warns of Actively Exploited Apache Flink Security Vulnerability

A Leak of Biometric Police Data Is a Sign of Things to Come

Veeam says critical flaw can't be abused to trash backups

New Frontiers, Old Tactics: Chinese Espionage Group Targets Africa & Caribbean Govts

70% of CISOs worry their org is at risk of a material cyber attack

Cyber Signals: Inside the growing risk of gift card fraud

ShrinkLocker: Turning BitLocker into ransomware

AutomationDirect Productivity PLCs

Inside Operation Diplomatic Specter: Chinese APT Group's Stealthy Tactics Exposed

Are Your SaaS Backups as Secure as Your Production Data?

Personal AI Assistants and Privacy

Introducing Nimfilt: A reverse-engineering tool for Nim-compiled binaries

Ivanti Patches Critical Remote Code Execution Flaws in Endpoint Manager

A journey into forgotten Null Session and MS-RPC interfaces

UK data watchdog wants six figures from N Ireland cops after 2023 data leak

How Apple Wi-Fi Positioning System can be abused to track people around the globe

Would you buy Pegasus spyware from this scammer?

The End of an Era: Microsoft Phases Out VBScript for JavaScript and PowerShell

'China-aligned' spyware slingers operating since 2018 unmasked at last

Lawmakers advance bill to tighten White House grip on AI model exports

~ 22 May 2024 ~

Go after UnitedHealth, not us, 100+ medical groups urge Uncle Sam

Canada's London Drugs confirms ransomware attack after LockBit demands $25M

NYSE parent gets $10M wrist tap for failing to report 2021 systems break-in

Laundering cash from healthcare, romance scams lands US man in prison for a decade

Confused by the SEC's breach reporting rules? Read this

Stopping ransomware in multicloud environments

Researchers Warn of Chinese-Aligned Hackers Targeting South China Sea Countries

Teslas Can Still Be Stolen With a Cheap Radio HackDespite New Keyless Tech

Rockwell Advises Disconnecting Internet-Facing ICS Devices Amid Cyber Threats

Unredacting Pixelated Text

LockBit dethroned as leading ransomware gang for first time post-takedown

The Ultimate SaaS Security Posture Management Checklist, 2025 Edition

Stealers, stealers and more stealers

What happens when AI goes rogue (and how to stop it)

GHOSTENGINE Exploits Vulnerable Drivers to Disable EDRs in Cryptojacking Attack

MS Exchange Server Flaws Exploited to Deploy Keylogger in Targeted Attacks

GitHub Enterprise Server patches 10-outta-10 critical hole

QNAP Patches New Flaws in QTS and QuTS hero Impacting NAS Appliances

Zoom Adopts NIST-Approved Post-Quantum End-to-End Encryption for Meetings

Critical Veeam Backup Enterprise Manager Flaw Allows Authentication Bypass

Understanding the Core of OT: Components, Systems, and Security

OT Threat Hunting: More Critical Than Ever

Uncle Sam to inject $50M into auto-patcher for hospital IT

~ 21 May 2024 ~

Zoom adds 'post-quantum' encryption for video nattering

Critical Fluent Bit bug affects all major cloud providers, say researchers

Why Your Wi-Fi Router Doubles as an Apple AirTag

Critical GitHub Enterprise Server Flaw Allows Authentication Bypass

Malware Delivery via Cloud Services Exploits Unicode Trick to Deceive Users

SolarMarker Malware Evolves to Resist Takedown Attempts with Multi-Tiered Infrastructure

"Linguistic Lumberjack" Vulnerability Discovered in Popular Logging Utility Fluent Bit

LCDS LAquis SCADA

Five Core Tenets Of Highly Effective DevSecOps Practices

Detecting Malicious Trackers

With ransomware whales becoming so dominant, would-be challengers ask 'what's the point?'

Eventbrite Promoted Illegal Opioid Sales to People Searching for Addiction Recovery Help

Achieve security compliance with Wazuh File Integrity Monitoring

Researchers Uncover Flaws in Python Package for AI Models and PDF.js Used by Firefox

Streamlining IT Security Compliance Using the Wazuh FIM Capability

Untangling the hiring dilemma: How security solutions free up HR processes

Windows 11 to Deprecate NTLM, Add AI-Powered App Controls and Security Defenses

NextGen Healthcare Mirth Connect Under Attack - CISA Issues Urgent Warning

Big Tech is not much help when fighting a junta, and FOSS doesn't ride to the rescue

Instructor Spotlight: Rich Greene

Emulating Teaching Hospital Concepts in Cybersecurity Hiring

~ 20 May 2024 ~

OpenSSF sings a Siren song to steer developers away from buggy FOSS

Julian Assange can appeal extradition to the US, London High Court rules

New Windows 11 features strengthen security to address evolving cyberthreat landscape

Google takes shots at Microsoft for shoddy security record with enterprise apps

Can I phone a friend? How cops circumvent face recognition bans

Iranian MOIS-Linked Hackers Behind Destructive Attacks on Albania and Israel

Researchers call out QNAP for dragging its heels on patch development

DoJ, ByteDance ask court: Hurry up and rule on TikTok ban already

WikiLeaks' Julian Assange Can Appeal His Extradition to the US, British Court Says

Foxit PDF Reader Flaw Exploited by Hackers to Deliver Diverse Malware Arsenal

IBM Sells Cybersecurity Group

Defending Your Commits From Known CVEs With GitGuardian SCA And Git Hooks

British Library's candid ransomware comms driven by 'emotional intelligence'

Cyber Criminals Exploit GitHub and FileZilla to Deliver Cocktail Malware

Chinese telco gear may become <i>verboten</i> on German networks

Latrodectus Malware Loader Emerges as IcedID's Successor in Phishing Campaigns

Nissan infosec in the spotlight again after breach affecting more than 50K US employees