Port 22

~ 24 Sep 2024 ~

OPW Fuel Management Systems SiteSentinel

Kaspersky Exits U.S., Automatically Replaces Software With UltraAV, Raising Concerns

Russia-Backed Media Outlets Are Under Fire in the USbut Still Trusted Worldwide

Israels Pager Attacks and Supply Chain Vulnerabilities

The SSPM Justification Kit

Web tracking report: who monitored users online activities in 20232024 the most

New Octo2 Android Banking Trojan Emerges with Device Takeover Capabilities

A data leak and a data breach

Time to engage: How parents can help keep their children safe on Snapchat

Telegram Agrees to Share User Data With Authorities for Criminal Investigations

Some US Kaspersky customers find their security software replaced by 'UltraAV'

~ 23 Sep 2024 ~

Telegram will now hand over IP addresses, phone numbers of suspects to cops

'Cybersecurity issue' takes MoneyGram offline for three days and counting

Necro malware continues to haunt side-loaders of dodgy Android mods

US proposes ban on Chinese, Russian connected car tech over security fears

Ron Deibert in The Washington Post on Apples decision to drop lawsuit against Israeli spyware firm

Hacking the Bike Angels System for Moving Bikeshares

So how's Microsoft's Secure Future Initiative going?

Securing our future: September 2024 progress update on Microsofts Secure Future Initiative (SFI)

UPS supplier's password policy flip-flops from unlimited, to 32, then 64 characters

THN Cybersecurity Recap: Last Week's Top Threats and Trends (September 16-22)

Why 'Never Expire' Passwords Can Be a Risky Decision

How the Necro Trojan infiltrated Google Play, again

Critical Flaw in Microchip ASF Exposes IoT Devices to Remote Code Execution Risk

Discord Introduces DAVE Protocol for End-to-End Encryption in Audio and Video Calls

Move over, Cobalt Strike. Splinters the new post-exploit menace in town

New PondRAT Malware Hidden in Python Packages Targets Software Developers

Chinese Hackers Exploit GeoServer Flaw to Target APAC Nations with EAGLEDOOR Malware

The Business Risks of Ignoring ICS Security: Five Critical Takeaways from Industry Experts

Apple's latest macOS release is breaking security software, network connections

~ 21 Sep 2024 ~

Hacktivist Group Twelve Targets Russian Entities with Destructive Cyber Attacks

LinkedIn Halts AI Data Processing in UK Amid Privacy Concerns Raised by ICO

Ukraine Bans Telegram Use for Government and Military Personnel

Iranian Hackers Tried to Give Hacked Trump Campaign Emails to Dems

Friday Squid Blogging: Squid Game Season Two Teaser

~ 20 Sep 2024 ~

US indicts two over socially engineered $230M+ crypto heist

Clever Social Engineering Attack Using Captchas

Ivanti patches exploited admin command execution flaw

New Book Chasing Shadows Coming Soon

Europol Shuts Down Major Phishing Scheme Targeting Mobile Phone Credentials

-=TWELVE=- is back

FBI, CISA warning over false claims of hacked voter data Week in security with Tony Anscombe

Passwordless AND Keyless: The Future of (Privileged) Access Management

Iranian APT UNC1860 Linked to MOIS Facilitates Cyber Intrusions in Middle East

Cybercrooks strut away with haute couture Harvey Nichols data

Chrome Users Can Now Sync Passkeys Across Devices with New Google PIN Feature

Critical Ivanti Cloud Appliance Vulnerability Exploited in Active Cyberattacks

CISA boss: Makers of insecure software must stop enabling today's cyber villains

CISA boss: Makers of insecure software are the real cyber villains

~ 19 Sep 2024 ~

Valencia Ransomware crew explodes on the scene, claims California city, fashion giant, more as victims

No way? Big Tech's 'lucrative surveillance' of everyone is terrible for privacy, freedom

Iran's cyber-goons emailed stolen Trump info to Team Biden which ignored them

This Windows PowerShell Phish Has Scary Potential

Wherever There's Ransomware, There's Service Account Compromise. Are You Protected?

1 in 10 orgs dumping their security vendors after CrowdStrike outage

Join us at Microsoft Ignite 2024 and learn to build a security-first culture with AI

Hackers Exploit Default Credentials in FOUNDATION Software to Breach Construction Firms

FBI Shuts Down Chinese Botnet

First Israels Exploding Pagers Maimed and Killed. Now Comes the Paranoia

New Brazilian-Linked SambaSpy Malware Targets Italian Users via Phishing Emails

Thousands of orgs at risk of knowledge base data leaks via ServiceNow misconfigurations

Your Phone Wont Be the Next Exploding Pager

New TeamTNT Cryptojacking Campaign Targets CentOS Servers with Rootkit

UK activists targeted with Pegasus spyware ask police to charge NSO Group

Rockwell Automation RSLogix 5 and RSLogix 500

MegaSys Computer Technologies Telenium Online Web Application

Kastle Systems Access Control System

IDEC PLCs

IDEC CORPORATION WindLDR and WindO/I-NV4

Healthcare's Diagnosis is Critical: The Cure is Cybersecurity Hygiene

Microsoft Warns of New INC Ransomware Targeting U.S. Healthcare Sector

Influencing the influencers | Unlocked 403 cybersecurity podcast (ep. 6)

Tor insists its network is safe after German cops convict CSAM dark-web admin

GitLab Patches Critical SAML Authentication Bypass Flaw in CE and EE Editions

~ 18 Sep 2024 ~

New "Raptor Train" IoT Botnet Compromises Over 200,000 Devices Worldwide

FBI boss says China 'burned down' 260,000-device botnet when confronted by Feds

LockBit boasts of ransoming IRS-authorized eFile.com

Deja blues... LockBit boasts once again of ransoming IRS-authorized eFile.com

Putin really wants Trump back in the White House

Lebanon now hit with deadly walkie-talkie blasts as Israel declares new phase of war

Chinese spies spent months inside aerospace engineering firm's network via legacy IT

Walkie-Talkies Explode in New Attack on Hezbollah

How comprehensive security simplifies the defense of your digital estate

Chinese Engineer Charged in U.S. for Years-Long Cyber Espionage Targeting NASA and Military

Scam Funeral Streaming Groups Thrive on Facebook

Cops across the world arrest 51 in orchestrated takedown of Ghost crime platform

Why Pay A Pentester?

Exotic SambaSpy is now dancing with Italian users

North Korean Hackers Target Energy and Aerospace Industries with New MISTPEN Malware

Despite Russia warnings, Western critical infrastructure remains unprepared

Chrome Introduces One-Time Permissions and Enhanced Safety Check for Safer Browsing

Understanding cyber-incident disclosure

Did a Chinese University Hacking Competition Target a Real Victim?

GSMA Plans End-to-End Encryption for Cross-Platform RCS Messaging

Patch Issued for Critical VMware vCenter Flaw Allowing Remote Code Execution

Australian Police conducted supply chain attack on criminal collaborationware

Announcing the Biggest Update Ever to SEC510: Cloud Security Controls and Mitigations

WhatsApp fix to make View Once chats actually disappear is beaten in less than a week

~ 17 Sep 2024 ~

VMware patches over remote make-me-root holes in vCenter Server, Cloud Foundation

Google Cloud Document AI flaw (still) allows data theft despite bounty payout