Port 22

~ 23 May 2024 ~

Stark Industries Solutions: An Iron Hammer in the Cloud

Here's yet more ransomware using BitLocker against Microsoft's own users

Casino cyberattacks put a bullseye on Scattered Spider and the FBI is closing in

Google guru roasts useless phishing tests, calls for fire drill-style overhaul

He Trained Crypto Cops to Fight Crypto Crimeand Allegedly Ran a $100M Dark Web Drug Market

Ransomware Attacks Exploit VMware ESXi Vulnerabilities in Alarming Pattern

CISA Warns of Actively Exploited Apache Flink Security Vulnerability

A Leak of Biometric Police Data Is a Sign of Things to Come

Veeam says critical flaw can't be abused to trash backups

New Frontiers, Old Tactics: Chinese Espionage Group Targets Africa & Caribbean Govts

70% of CISOs worry their org is at risk of a material cyber attack

Cyber Signals: Inside the growing risk of gift card fraud

ShrinkLocker: Turning BitLocker into ransomware

Inside Operation Diplomatic Specter: Chinese APT Group's Stealthy Tactics Exposed

Are Your SaaS Backups as Secure as Your Production Data?

Personal AI Assistants and Privacy

Introducing Nimfilt: A reverse-engineering tool for Nim-compiled binaries

Ivanti Patches Critical Remote Code Execution Flaws in Endpoint Manager

A journey into forgotten Null Session and MS-RPC interfaces

UK data watchdog wants six figures from N Ireland cops after 2023 data leak

How Apple Wi-Fi Positioning System can be abused to track people around the globe

Would you buy Pegasus spyware from this scammer?

The End of an Era: Microsoft Phases Out VBScript for JavaScript and PowerShell

'China-aligned' spyware slingers operating since 2018 unmasked at last

Lawmakers advance bill to tighten White House grip on AI model exports

~ 22 May 2024 ~

Go after UnitedHealth, not us, 100+ medical groups urge Uncle Sam

Canada's London Drugs confirms ransomware attack after LockBit demands $25M

NYSE parent gets $10M wrist tap for failing to report 2021 systems break-in

Laundering cash from healthcare, romance scams lands US man in prison for a decade

Confused by the SEC's breach reporting rules? Read this

Stopping ransomware in multicloud environments

Researchers Warn of Chinese-Aligned Hackers Targeting South China Sea Countries

Teslas Can Still Be Stolen With a Cheap Radio HackDespite New Keyless Tech

Rockwell Advises Disconnecting Internet-Facing ICS Devices Amid Cyber Threats

Unredacting Pixelated Text

LockBit dethroned as leading ransomware gang for first time post-takedown

The Ultimate SaaS Security Posture Management Checklist, 2025 Edition

Stealers, stealers and more stealers

What happens when AI goes rogue (and how to stop it)

GHOSTENGINE Exploits Vulnerable Drivers to Disable EDRs in Cryptojacking Attack

MS Exchange Server Flaws Exploited to Deploy Keylogger in Targeted Attacks

GitHub Enterprise Server patches 10-outta-10 critical hole

QNAP Patches New Flaws in QTS and QuTS hero Impacting NAS Appliances

Zoom Adopts NIST-Approved Post-Quantum End-to-End Encryption for Meetings

Critical Veeam Backup Enterprise Manager Flaw Allows Authentication Bypass

Understanding the Core of OT: Components, Systems, and Security

OT Threat Hunting: More Critical Than Ever

Uncle Sam to inject $50M into auto-patcher for hospital IT

~ 21 May 2024 ~

Zoom adds 'post-quantum' encryption for video nattering

Critical Fluent Bit bug affects all major cloud providers, say researchers

Why Your Wi-Fi Router Doubles as an Apple AirTag

Critical GitHub Enterprise Server Flaw Allows Authentication Bypass

Malware Delivery via Cloud Services Exploits Unicode Trick to Deceive Users

SolarMarker Malware Evolves to Resist Takedown Attempts with Multi-Tiered Infrastructure

Five Core Tenets Of Highly Effective DevSecOps Practices

Detecting Malicious Trackers

With ransomware whales becoming so dominant, would-be challengers ask 'what's the point?'

Eventbrite Promoted Illegal Opioid Sales to People Searching for Addiction Recovery Help

Achieve security compliance with Wazuh File Integrity Monitoring

Researchers Uncover Flaws in Python Package for AI Models and PDF.js Used by Firefox

Streamlining IT Security Compliance Using the Wazuh FIM Capability

Untangling the hiring dilemma: How security solutions free up HR processes

Windows 11 to Deprecate NTLM, Add AI-Powered App Controls and Security Defenses

NextGen Healthcare Mirth Connect Under Attack - CISA Issues Urgent Warning

Big Tech is not much help when fighting a junta, and FOSS doesn't ride to the rescue