Port 22

~ 11 Nov 2024 ~

DoD Zero Trust Strategy proves security benchmark years ahead of schedule with Microsoft collaboration

FBI issues warning as crooks ramp up emergency data request scams

Dark web crypto laundering kingpin sentenced to 12.5 years in prison

THN Recap: Top Cybersecurity Threats, Tools, and Practices (Nov 04 - Nov 10)

New GootLoader Campaign Targets Users Searching for Bengal Cat Laws in Australia

The ROI of Security Investments: How Cybersecurity Leaders Prove It

The AI Machine Gun of the Future Is Already Here

Security Flaws in Popular ML Toolkits Enable Server Hijacks, Privilege Escalation

Ymir: new stealthy ransomware in the wild

Beyond the checkbox: Demystifying cybersecurity compliance

HPE Issues Critical Security Patches for Aruba Access Point Vulnerabilities

Cybercriminals Use Excel Exploit to Spread Fileless Remcos RAT Malware

Alleged Snowflake attacker gets busted by Canadians politely, we assume

New FOR518: Mac and iOS Forensic Analysis Poster Update

~ 9 Nov 2024 ~

FBI: Spike in Hacked Police Emails, Fake Subpoenas

Auto-Rebooting iPhones Are Causing Chaos for Cops

Palo Alto Advises Securing PAN-OS Interface Amid Potential RCE Threat Concerns

Bitcoin Fog Founder Sentenced to 12 Years for Cryptocurrency Money Laundering

~ 8 Nov 2024 ~

Friday Squid Blogging: Squid-A-Rama in Des Moines

Irene Poetranto on the panel What the World Can Learn from Indonesias Democracy

Scattered Spider, BlackCat claw their way back from criminal underground

AndroxGh0st Malware Integrates Mozi Botnet to Target IoT and Cloud Services

IcePeony and Transparent Tribe Target Indian Entities with Cloud-Based Tools

AI Industry is Trying to Subvert the Definition of Open Source AI

Malicious NPM Packages Target Roblox Users with Data-Stealing Malware

The vCISO Academy: Transforming MSPs and MSSPs into Cybersecurity Powerhouses

QSC: A multi-plugin framework used by CloudComputating group in cyberespionage campaigns

Life on a crooked RedLine: Analyzing the infamous infostealers backend

Webinar: Learn How Storytelling Can Make Cybersecurity Training Fun and Effective

New CRON#TRAP Malware Infects Windows by Hiding in Linux VM to Evade Antivirus

CISA Alerts to Active Exploitation of Critical Palo Alto Networks Vulnerability

Winos4.0 abuses gaming apps to infect, control Windows machines

Cloud Security Strategy: First Principles and Future Opportunities (Part 5 of 5), Key Insights from Cloud Security Experts: Straight Talk on Cloud Security

Cloud Security Strategy: First Principles and Future Opportunities (Part 4 of 5), Evolving Cloud Security with a Modern Approach

Cloud Security Strategy: First Principles and Future Opportunities (Part 3 of 5), Modernizing Identity: Navigating Challenges and Embracing Cloud Solutions

Cloud Security Strategy: First Principles and Future Opportunities (Part 2 of 5), Secure by Design: Elevating Security Beyond Defaults

Cloud Security Strategy: First Principles and Future Opportunities (Part 1 of 5), Building a Cloud Security Strategy: A Step-by-Step Guide

~ 7 Nov 2024 ~

Don't open that 'copyright infringement' email attachment it's an infostealer

764 Terror Network Member Richard Densmore Sentenced to 30 Years in Prison

More value, less risk: How to implement generative AI across the organization securely and responsibly

Prompt Injection Defenses Against LLM Cyberattacks

North Korean Hackers Target Crypto Firms with Hidden Risk Malware on macOS

Subverting LLM Coders

Delta Electronics DIAScreen

Bosch Rexroth IndraDrive

Beckhoff Automation TwinCAT Package Manager

A Hacker's Guide to Password Cracking

Cisco scores a perfect CVSS 10 with critical flaw in its wireless system

ESET APT Activity Report Q2 2024Q3 2024

5 Most Common Malware Techniques in 2024

SteelFox and Rhadamanthys Malware Use Copyright Scams, Driver Exploits to Target Victims

China-Aligned MirrorFace Hackers Target EU Diplomats with World Expo 2025 Bait

Malicious PyPI Package Fabrice Found Stealing AWS Keys from Thousands of Developers

Cisco Releases Patch for Critical URWB Vulnerability in Industrial Wireless Systems

Canada Orders TikTok to Shut Down Canadian Operations Over Security Concerns

Officials warn of Russia's tech-for-troops deal with North Korea amid Ukraine conflict

~ 6 Nov 2024 ~

Cybercrooks are targeting Bengal cat lovers in Australia for some reason

VEILDrive Attack Exploits Microsoft Services to Evade Detection and Distribute Malware

Zero Trust Workshop: Advance your knowledge with an online resource

Operation Synergia II sees Interpol swoop on global cyber crims

Jane Goodall: Reasons for hope | Starmus highlights

New Winos 4.0 Malware Infects Gamers Through Malicious Game Optimization Apps

Cyberattackers stole Microlise staff data following DHL, Serco disruption

IoT Devices in Password-Spraying Botnet

9 Steps to Get CTEM on Your 2025 Budgetary Radar

INTERPOL Disrupts Over 22,000 Malicious Servers in Global Crackdown on Cybercrime

New SteelFox Trojan mimics software activators, stealing sensitive data and mining cryptocurrency

South Korea Fines Meta $15.67M for Illegally Sharing Sensitive User Data with Advertisers

Google Cloud to Enforce Multi-Factor Authentication by 2025 for All Users

China's Volt Typhoon reportedly breached Singtel in 'test-run' for US telecom attacks

Scumbag puts 'stolen' Nokia source code, SSH and RSA keys, more up for sale

~ 5 Nov 2024 ~

Schneider Electric ransomware crew demands $125k paid in baguettes

Russia Is Going All Out on Election Day Interference

A Kansas pig butchering: CEO who defrauded bank, church, friends gets 24 years

Man Arrested for Snowflake Hacking Spree Faces US Extradition

Criminals open DocuSign's Envelope API to make BEC special delivery

FBI Seeks Public Help to Identify Chinese Hackers Behind Global Cyber Intrusions

Canadian Man Arrested in Snowflake Data Extortions

Flaw in Right-Wing Election Integrity App Exposes Voter-Suppression Plan and User Data

Ongoing typosquatting campaign impersonates hundreds of popular npm packages

The Citizen Lab at the Hague Programs 2024 Conference on International Cyber Security

Washington courts grapple with statewide outage after 'unauthorized activity'

New Android Banking Malware 'ToxicPanda' Targets Users with Fraudulent Money Transfers

AIs Discovering Vulnerabilities

Leveraging Wazuh for Zero Trust security

Synology Urges Patch for Critical Zero-Click RCE Flaw Affecting Millions of NAS Devices

Google claims Big Sleep 'first' AI to spot freshly committed security bug that fuzzing missed

Malware Campaign Uses Ethereum Smart Contracts to Control npm Typosquat Packages

Canadian Suspect Arrested Over Snowflake Data Breach and Extortion Attacks

Google Warns of Actively Exploited CVE-2024-43093 Vulnerability in Android System

~ 4 Nov 2024 ~

Columbus, Ohio, confirms 500K people affected by Rhysida ransomware attack

How Microsoft Defender for Office 365 innovated to address QR code phishing attacks

Critical Flaws in Ollama AI Framework Could Enable DoS, Model Theft, and Poisoning

Sophos Versus the Chinese Hackers

German Police Disrupt DDoS-for-Hire Platform dstat[.]cc; Suspects Arrested

Why the long name? Okta discloses auth bypass bug affecting 52-character usernames

THN Recap: Top Cybersecurity Threats, Tools, and Practices (Oct 28 - Nov 03)

Inside the Massive Crime Industry Thats Hacking Billion-Dollar Companies

Cyber Threats That Could Impact the Retail Industry This Holiday Season (and What to Do About It)

Public sector cyber break-ins: Our money, our lives, our right to know