Port 22

~ 29 Apr 2024 ~

Insane Incident Incursion Recursion: Mastering Incident Response Reporting Regulations

~ 28 Apr 2024 ~

Okta Warns of Unprecedented Surge in Proxy-Driven Credential Stuffing Attacks

~ 27 Apr 2024 ~

Ukraine Targeted in Cyberattack Exploiting 7-Year-Old Microsoft Office Flaw

School Employee Allegedly Framed a Principal With Racist Deepfake Rant

Russia Vetoed a UN Resolution to Ban Space Nukes

Bogus npm Packages Used to Trick Software Developers into Installing Malware

~ 26 Apr 2024 ~

Friday Squid Blogging: Searching for the Colossal Squid

Kaiser Permanente shared 13.4M people's data with Microsoft Bing, Google, others

Second time lucky for Thoma Bravo, which scoops up Darktrace for $5.3B

Severe Flaws Disclosed in Brocade SANnav SAN Management Software

Major phishing-as-a-service platform disrupted Week in security with Tony Anscombe

UK's Investigatory Powers Bill to become law despite tech world opposition

Long Article on GM Spying on Its Cars Drivers

10 Critical Endpoint Security Tips You Should Know

New 'Brokewell' Android Malware Spread Through Fake Browser Updates

Palo Alto Networks Outlines Remediation for Critical PAN-OS Flaw Under Attack

Four trends to top the CISOs packed agenda

Hackers Exploiting WP-Automatic Plugin Bug to Create Admin Accounts on WordPress Sites

Flaws in Chinese keyboard apps leave 750 million users open to snooping, researchers claim

Spring 2024 Update: Explore the Latest Enhancements to SANS FOR585: Smartphone Forensic Analysis In-Depth

~ 25 Apr 2024 ~

Cops cuff man for allegedly framing colleague with AI-generated hate speech clip

Ring dinged for $5.6M after, among other claims, rogue insider spied on 'pretty girls'

Two cuffed in Samourai Wallet crypto dirty money sting

North Korea's Lazarus Group Deploys New Kaolin RAT via Fake Job Lures

Investigating industrial control systems using Microsofts ICSpector open-source framework

Russia, Iran pose most aggressive threat to 2024 elections, say infoseccers

Siemens RUGGEDCOM APE1808 Devices Configured with Palo Alto Networks Virtual NGFW

Multiple Vulnerabilities in Hitachi Energy RTU500 Series

Honeywell Experion PKS, Experion LX, PlantCruise by Experion, Safety Manager, Safety Manager SC

Hitachi Energy MACH SCM

Network Threats: A Step-by-Step Attack Demonstration

The Rise of Large-Language-Model Optimization

DOJ Arrests Founders of Crypto Mixer Samourai for $2 Billion in Illegal Transactions

Gripped by Python: 5 reasons why Python is popular among cybersecurity professionals

What to do in the age of the critical breach

Google Postpones Third-Party Cookie Deprecation Amid U.K. Regulatory Scrutiny

Indian banks IT is so shabby its been banned from opening new accounts

State-Sponsored Hackers Exploit Two Cisco Zero-Day Vulnerabilities for Espionage

Australias spies and cops want accountable encryption - aka access to backdoors

~ 24 Apr 2024 ~

Governments issue alerts after 'sophisticated' state-backed actor found exploiting flaws in Cisco security boxes

Shouldn't Teams, Zoom, Slack all interoperate securely for the Feds? Wyden is asking

Microsoft cannot keep its own security in order, so what hope for its add-ons customers?

5 ways a CNAPP can strengthen your multicloud security environment

'ArcaneDoor' Cyberspies Hacked Cisco Firewalls to Access Government Networks

Management company settles for $18.4M after nuclear weapons plant staff fudged their timesheets

Google cools on cookie phase-out while regulators chew on plans

US charges Iranians with cyber snooping on government, companies

U.S. Treasury Sanctions Iranian Firms and Individuals Tied to Cyber Attacks

Researchers Detail Multistage Attack Hijacking Systems with SSLoad, Cobalt Strike

Dan Solove on Privacy Regulation

Assessing the Y, and How, of the XZ Utils incident

ShotSpotter Keeps Listening for Gunfire After Contracts Expire

Major Security Flaws Expose Keystrokes of Over 1 Billion Chinese Keyboard App Users

What makes Starmus unique? A Q&A with award-winning filmmaker Todd Miller

If Britain is so bothered by China, why do these .gov.uk sites use Chinese ad brokers?

eScan Antivirus Update Mechanism Exploited to Spread Backdoors and Miners

CoralRaider Malware Campaign Exploits CDN Cache to Spread Info-Stealers

~ 23 Apr 2024 ~

New Microsoft Incident Response guide helps simplify cyberthreat investigations

Apache Cordova App Harness Targeted in Dependency Confusion Attack

How technology drives progress A Q&A with Nobel laureate Michel Mayor

Mandiant: Orgs are detecting cybercriminals faster than ever

UnitedHealth admits breach could 'cover substantial proportion of people in America'

Chinese Keyboard App Vulnerabilities Explained

The not-so-silent type: Vulnerabilities across keyboard apps reveal keystrokes to network eavesdroppers

Webinar: Learn Proactive Supply Chain Threat Hunting Techniques

Microsoft and Security Incentives

Leicester streetlights take ransomware attack personally, shine on 24/7

Police Chiefs Call for Solutions to Access Encrypted Data in Serious Crime Cases

Unmasking the True Cost of Cyberattacks: Beyond Ransom and Recovery

German Authorities Issue Arrest Warrants for Three Suspected Chinese Spies

The vision behind Starmus A Q&A with the festivals co-founder Garik Israelian

Over a million Neighbourhood Watch members exposed through web app bug

U.S. Imposes Visa Restrictions on 13 Linked to Commercial Spyware Misuse

Misconfigured cloud server leaked clues of North Korean animation scam

Russia's APT28 Exploited Windows Print Spooler Flaw to Deploy 'GooseEgg' Malware

Change Healthcare Finally Admits It Paid Ransomware Hackersand Still Faces a Patient Data Leak

Old Windows print spooler bug is latest target of Russia's Fancy Bear gang

The Ripple Effect: NIS2's Impact on Cybersecurity Practices Across the EU

~ 22 Apr 2024 ~

FBI and friends get two more years of warrantless FISA Section 702 snooping

Russian FSB Counterintelligence Chief Gets 9 Years in Cybercrime Bribery Scheme

The Next US President Will Have Troubling New Surveillance Powers

Europol becomes latest law enforcement group to plead with big tech to ditch E2EE

Analyzing Forest Blizzards custom post-compromise tool for exploiting CVE-2022-38028 to obtain credentials

Germany arrests trio accused of trying to smuggle naval military tech to China

Using Legitimate GitHub URLs for Malware

Russian Hacker Group ToddyCat Uses Advanced Tools for Industrial-Scale Data Theft

Watchdog tells Dutch govt: 'Do not use Facebook if there is uncertainty about privacy'

US House of Representatives passes new TikTok ban bill to Senate

Pentera's 2024 Report Reveals Hundreds of Security Events per Week, Highlighting the Criticality of Continuous Validation

UK data watchdog questions how private Google's Privacy Sandbox is

MITRE Corporation Breached by Nation-State Hackers Exploiting Ivanti Flaws

Has the ever-present cyber danger just got worse?

Ransomware Double-Dip: Re-Victimization in Cyber Extortion

ToddyCat is making holes in your infrastructure

Researchers Uncover Windows Flaws Granting Hackers Rootkit-Like Powers

Google all at sea over rising tide of robo-spam

Rarest, strangest, form of Windows saved techie from moment of security madness

Microsoft Warns: North Korean Hackers Turn to AI-Fueled Cyber Espionage