Port 22

~ 11 Jul 2024 ~

Siemens TIA Portal and SIMATIC STEP 7

Siemens Teamcenter Visualization and JT2Go

Streamlined Security Solutions: PAM for Small to Medium-sized Businesses

Privacy expert put away for 9 years after 'grotesque' cyberstalking campaign

New Poco RAT Targets Spanish-Speaking Victims in Phishing Campaign

When spear phishing met mass phishing

You had a year to patch this Veeam flaw and now it's going to hurt

Japanese space agency spotted zero-day attacks while cleaning up attack on M365

PHP Vulnerability Exploited to Spread Malware and Launch DDoS Attacks

GitLab Patches Critical Flaw Allowing Unauthorized Pipeline Jobs

~ 10 Jul 2024 ~

Snowflake lets admins make MFA mandatory across all user accounts

The Stark Truth Behind the Resurgence of Russias Fin7

RADIUS Vulnerability

Malware that is 'not ransomware' wormed its way through Fujitsu Japan's systems

New Ransomware Group Exploiting Veeam Backup Software Vulnerability

Smash-and-Grab Extortion

Microsoft's July Update Patches 143 Flaws, Including Two Actively Exploited

True Protection or False Promise? The Ultimate ITDR Shortlisting Guide

Google Adds Passkeys to Advanced Protection Program for High-Risk Users

Ransomware crews investing in custom data stealing malware

Google Is Adding Passkey Support for Its Most Vulnerable Users

Understanding IoT security risks and how to mitigate them | Cybersecurity podcast

Big Tech's eventual response to my LLM-crasher bug report was dire

Crypto Analysts Expose HuiOne Guarantee's $11 Billion Cybercrime Transactions

The $11 Billion Marketplace Enabling the Crypto Scam Economy

ViperSoftX variant spotted abusing .NET runtime to disguise data theft

ViperSoftX Malware Disguises as eBooks on Torrents to Spread Stealthy Attacks

New OpenSSH Vulnerability Discovered: Potential Remote Code Execution Risk

RADIUS networking protocol blasted into submission through MD5-based flaw

Institutionalizing a Strong Security Culture

Critical Windows licensing bugs plus two others under attack top Patch Tuesday

~ 9 Jul 2024 ~

FBI, cyber-cops zap ~1K Russian AI disinfo Twitter bots

Microsoft Patch Tuesday, July 2024 Edition

Reverse-Engineering Ticketmasters Barcode System

Elexon's Insight into UK electricity felled by expired certificate

Evolve Bank & Trust confirms LockBit stole 7.6 million people's data

Developing and prioritizing a detection engineering backlog based on MITRE ATT&CK

RADIUS Protocol Vulnerability Exposes Networks to MitM Attacks

Mitsubishi Electric MELIPC Series MI5122-VW

Johnson Controls Software House CCURE 9000

Johnson Controls Software House CCURE 9000

Johnson Controls Illustra Pro Gen 4

Delta Electronics CNCSoft-G2

Hackers Exploiting Jenkins Script Console for Cryptocurrency Mining Attacks

HUMINT: Diving Deep into the Dark Web

Houthi rebels are operating their own GuardZoo spyware

GuardZoo Malware Targets Over 450 Middle Eastern Military Personnel

5 common Ticketmaster scams: How fraudsters steal the show

Microsoft China staff can't log on with an Android, so Redmond buys them iThings

Scammers double-scam victims by offering to help recover from scams

Cybersecurity Agencies Warn of China-linked APT40's Rapid Exploit Adaptation

Trojanized jQuery Packages Found on npm, GitHub, and jsDelivr Code Repositories

China's APT40 gang is ready to attack vulns within hours or days of public release.

~ 8 Jul 2024 ~

New APT Group "CloudSorcerer" Targets Russian Government Entities

On the CSRBs Non-Investigation of the SolarWinds Attack

Dark Web Malware Logs Expose 3,300 Users Linked to Child Abuse Sites

Microsoft forgets about SwiftKey's support site

New Ransomware-as-a-Service 'Eldorado' Targets Windows and Linux Systems

Avast secretly gave DoNex ransomware decryptors to victims before crims vanished

5 Key Questions CISOs Must Ask Themselves About Their Cybersecurity Strategy

AI-Powered Super Soldiers Are More Than Just a Pipe Dream

Experts Warn of Mekotio Banking Trojan Targeting Latin American Countries

Navigating Europes digital identity crossroads

CloudSorcerer A new APT targeting Russian government entities

Critical Unpatched Flaws Disclosed in Popular Gogs Open-Source Git Service

Apple Removes VPN Apps from Russian App Store Amid Government Pressure

Selfie-based authentication raises eyebrows among infosec experts

Not-so-OpenAI allegedly never bothered to report 2023 data breach

A decade after collapsing, crypto exchange Mt Gox repays some investors

~ 6 Jul 2024 ~

Hackers Leaking Taylor Swift Tickets? Dont Get Your Hopes Up

~ 5 Jul 2024 ~

Friday Squid Blogging: Newly Discovered Vampire Squid

Devs claim Apple is banning VPNs in Russia 'more effectively' than Putin

Cancer patient forced to make terrible decision after Qilin attack on London hospitals

Latest Ghostscript vulnerability haunts experts as the next big breach enabler

Webinar Alert: Learn How ITDR Solutions Stop Sophisticated Identity Attacks

OVHcloud Hit with Record 840 Million PPS DDoS Attack Using MikroTik Routers

The Worlds Most Popular 3D-Printed Gun Was Designed by an Aspiring Terrorist

Blueprint for Success: Implementing a CTEM Operation

GootLoader Malware Still Active, Deploys New Versions for Enhanced Attacks

Europol says mobile roaming tech is making its job too hard

Polyfill[.]io Attack Impacts Over 380,000 Hosts, Including Major Companies

New Golang-Based Zergeca Botnet Capable of Powerful DDoS Attacks

~ 4 Jul 2024 ~

Social media and teen mental health Week in security with Tony Anscombe

How Apple Intelligences Privacy Stacks Up Against Androids Hybrid AI

Microsoft Uncovers Critical Flaws in Rockwell Automation PanelView Plus

Europol nukes nearly 600 IP addresses in Cobalt Strike crackdown

Brazil Halts Meta's AI Data Processing Amid Privacy Concerns

Ransomware scum who hit Indonesian government apologizes, hands over encryption key

Global Police Operation Shuts Down 600 Cybercrime Servers Linked to Cobalt Strike

Twilio's Authy App Breach Exposes Millions of Phone Numbers

~ 3 Jul 2024 ~

Citizen Lab submission to the United Nations Special Rapporteur on human rights defenders: Challenges faced by women human rights defenders working in conflict, post-conflict or crisis-affected settings

The Not-So-Secret Network Access Broker x999xx

Traeger security bugs bad news for grillers with neighborly beef

New Open SSH Vulnerability

The Emerging Role of AI in Open-Source Intelligence

Proton Is Launching Encrypted Documents to Take On Google Docs

Microsoft MSHTML Flaw Exploited to Deliver MerkSpy Spyware Tool

No room for error: Dont get stung by these common Booking.com scams

FakeBat Loader Malware Spreads Widely Through Drive-by Download Attacks

Israeli Entities Targeted by Cyberattack Using Donut and Sliver Frameworks