Port 22

~ 11 Sep 2024 ~

Hunters International claims ransom on Chinese mega-bank's London HQ

Quad7 Botnet Expands to Target SOHO Routers and VPN Appliances

DragonRank Black Hat SEO Campaign Targeting IIS Servers Across Asia and Europe

So you paid a ransom demand and now the decryptor doesn't work

Singapore Police Arrest Six Hackers Linked to Global Cybercrime Syndicate

Evaluating the Effectiveness of Reward Modeling of Generative AI Systems

How $20 and a lapsed domain allowed security pros to undermine internet integrity

Why Is It So Challenging to Go Passwordless?

Mind the talent gap: Infosec vacancies abound, but hiring is flat

Developers Beware: Lazarus Group Uses Fake Coding Tests to Spread Malware

6 common Geek Squad scams and how to defend against them

Microsoft Issues Patches for 79 Flaws, Including 3 Actively Exploited Windows Flaws

Ivanti Releases Urgent Security Updates for Endpoint Manager Vulnerabilities

India to train 5000 'Cyber Commandos'

Microsoft says it broke some Windows 10 patching as it fixes flaws under attack

~ 10 Sep 2024 ~

Bug Left Some Windows PCs Dangerously Unpatched

Lex Gill at CBC Ideas at Crows Theatre: Making Justice Imaginable

CosmicBeetle Deploys Custom ScRansom Ransomware, Partnering with RansomHub

Crypto scams rake in $5.6B a year for cyberscum lowlifes, FBI says

Viessmann Climate Solutions SE Vitogate 300

Rockwell Automation SequenceManager

iniNet Solutions SpiderControl SCADA Web Server

Experts Identify 3 Chinese-Linked Clusters Behind Cyberattacks in Southeast Asia

Shining a Light on Shadow Apps: The Invisible Gateway to SaaS Data Breaches

New Chrome Zero-Day

New PIXHELL Attack Exploits Screen Noise to Exfiltrates Data from Air-Gapped Computers

Mustang Panda Deploys Advanced Malware to Spy on Asia-Pacific Governments

CosmicBeetle steps up: Probation period at RansomHub

Thanks, Edward Snowden: you propelled China to quantum networking leadership

Strengthen Your Supply Chain Security with Effective SBOM Management

Enhance your Cyber Threat Intelligence with the Admiralty System

~ 9 Sep 2024 ~

WhatsApp's 'View Once' could be 'View Whenever' due to a flaw

Russia's top-secret military unit reportedly plots undersea cable 'sabotage'

New RAMBO Attack Uses RAM Radio Signals to Steal Data from Air-Gapped Networks

Avis alerts nearly 300k car renters that crooks stole their info

1.7M potentially pwned after payment services provider takes a year to notice break-in

Strengthening enterprise storage against cyber threats

Kremlin-linked COLDRIVER crooks take pro-democracy NGOs for phishy ride

One More Tool Will Do It? Reflecting on the CrowdStrike Fallout

Blind Eagle Targets Colombian Insurance Sector with Customized Quasar RAT

Chinese Hackers Exploit Visual Studio Code in Southeast Asian Cyberattacks

Webinar: How to Protect Your Company from GenAI Data Leakage Without Losing Its Productivity Benefits

Australia Threatens to Force Companies to Break Encryption

Wing Security SaaS Pulse: Continuous Security & Actionable Insights For Free

What You Need to Know About Grok AI and Your Privacy

Progress Software Issues Patch for Vulnerability in LoadMaster and MT Hypervisor

Cybersecurity regulation stepping up

New Android SpyAgent Malware Uses OCR to Steal Crypto Wallet Recovery Keys

Loki: a new private agent for the popular Mythic framework

TIDRONE Espionage Group Targets Taiwan Drone Makers in Cyber Campaign

U.S. Offers $10 Million for Info on Russian Cadet Blizzard Hackers Behind Major Attacks

Predator spyware updated withn dangerous new features, also now harder to track

Why ICS Is the Business: Essential Cybersecurity Strategies for Critical Infrastructure

A Visual Summary of SANS AI Cybersecurity Summit 2024

~ 7 Sep 2024 ~

Despite cyberattacks, water security standards remain a pipe dream

Hackers Threaten to Leak Planned Parenthood Data

North Korean Threat Actors Deploy COVERTCATCH Malware via LinkedIn Job Scams

FBI Cracks Down on Dark Web Marketplace Managed by Russian and Kazakh Nationals

~ 6 Sep 2024 ~

Google says replacing C/C++ in firmware with Rust is easy

Live Video of Promachoteuthis Squid

Cisco merch shoppers stung in Magecart attack

Locked In, Locked Out: How Data Breaches Shatter Refugees Safety

SonicWall Urges Users to Patch Critical Firewall Flaw Amid Possible Exploitation

YubiKey Side-Channel Attack

GeoServer Vulnerability Targeted by Hackers to Deliver Backdoors and Botnet Malware

GitHub Actions Vulnerable to Typosquatting, Exposing Developers to Hidden Malicious Code

The NSA Has a PodcastHere's How to Decode It

Therapy Sessions Exposed by Mental Health Care Firms Unsecured Database

Bitcoin ATM scams skyrocket Week in security with Tony Anscombe

The State of the Virtual CISO Report: MSP/MSSP Security Strategies for 2025

To patch this server, we need to get someone drunk

Critical Security Flaw Found in LiteSpeed Cache Plugin for WordPress

Apache OFBiz Update Fixes High-Severity Flaw Leading to Remote Code Execution

Pavel Durov Criticizes Outdated Laws After Arrest Over Telegram Criminal Activity

~ 5 Sep 2024 ~

Homeland security hopes to scuttle maritime cyber-threats with port infosec testbed

White Houses new fix for cyber job gaps: Serve the nation in infosec

YubiKeys Are a Security Gold Standardbut They Can Be Cloned

US charges Russian GRU hackers behind WhisperGate intrusions

Cisco's Smart Licensing Utility flaws suggest it's pretty dumb on security

Russias Most Notorious Special Forces Unit Now Has Its Own Cyber Warfare Team

Chinese-Speaking Hacker Group Targets Human Rights Studies in Middle East

Veeam Releases Security Updates to Fix 18 Flaws, Including 5 Critical Issues

Why It's So Hard to Fully Block X in Brazil

Quantum computing is coming are you ready?

Security boom is over, with over a third of CISOs reporting flat or falling budgets

U.S. Seizes 32 Pro-Russian Propaganda Domains in Major Disinformation Crackdown

Hughes Network Systems WL3000 Fusion Software

Long Analysis of the M-209

We Hunted Hidden Police Signals at the DNC

The fingerpointing starts as cyber incident at London transport body continues

ESET Research Podcast: HotPage

NIST Cybersecurity Framework (CSF) and CTEM Better Together

Tropic Trooper spies on government entities in the Middle East

Malware Attackers Using MacroPack to Deliver Havoc, Brute Ratel, and PhantomCore

New Cross-Platform Malware KTLVdoor Discovered in Attack on Chinese Trading Firm

Cisco Fixes Two Critical Flaws in Smart Licensing Utility to Prevent Remote Attacks

Security biz Verkada to pay $3m penalty under deal that also enforces infosec upgrade

White House seizes 32 domains, issues criminal charges in massive election-meddling crackdown

North Korean scammers plan wave of stealth attacks on crypto companies, FBI warns

Youve Taken a SANS Course Now What?