Port 22

~ 11 Oct 2023 ~

Microsoft Defender for Endpoint now stops human-operated attacks on its own

Automatic disruption of human-operated attacks through containment of compromised user accounts

Data Thieves Test-Drive Unique Certificate Abuse Tactic

CISOs' salary growth slows with pay gap widening

Reassessing the Impacts of Risk Management With NIST Framework 2.0

From chaos to cadence: Celebrating two decades of Microsoft's Patch Tuesday

Over 17,000 WordPress Sites Compromised by Balada Injector in September 2023

U.S. Cybersecurity Agency Warns of Actively Exploited Adobe Acrobat Reader Vulnerability

Take an Offensive Approach to Password Security by Continuously Monitoring for Breached Passwords

A Frontline Report of Chinese Threat Actor Tactics and Techniques

Virus Bulletin building digital armies

Cisco Cant Stop Using Hard-Coded Passwords

The UN Risks Normalizing Internet Censorship

Protect AI Releases 3 AI/ML Security Tools as Open Source

curl vulnerabilities ironed out with patches after week-long tease

6 steps to getting the board on board with your cybersecurity program

What to expect when the UK-US Data Bridge comes into force this week

Microsoft Releases October 2023 Patches for 103 Flaws, Including 2 Active Exploits

Microsoft Warns of Nation-State Hackers Exploiting Critical Atlassian Confluence Vulnerability

Reasonable Valuations Drove Mergers and Acquisition Activity in Q3, 2023

~ 10 Oct 2023 ~

It's 2023 and Microsoft WordPad can be exploited to hijack vulnerable systems

Patch Tuesday, October 2023 Edition

Securely Moving Financial Services to the Cloud

Microsoft Patch Tuesday Haunted by Zero-Days, Wormable Bug

SBF on trial: The FTX Python code that allegedly let his Alameda hedge fund spend people's deposits

HTTP/2 'Rapid Reset' zero-day exploited in biggest DDoS deluge seen yet

Badbox Operation Targets Android Devices in Fraud Schemes

New One-Click Exploit Is a Supply Chain Risk for Linux OSes

Internet-Wide Zero-Day Bug Fuels Largest-Ever DDoS Event

Hackers For Hire Hit Both Sides in Israel-Hamas Conflict

Mirai reloads exploit arsenal as botnet embarks on another expansion drive

How Keyloggers Have Evolved From the Cold War to Today

Researcher bags two-for-one deal on Linux bugs while probing GNOME component

North Korea's State-Sponsored APTs Organize & Align

HTTP/2 Rapid Reset Zero-Day Vulnerability Exploited to Launch Record DDoS Attacks

Elon Musk Is Personally Undermining Xs Efforts to Curb Israel-Hamas War Disinformation

Fresh curl tomorrow will patch 'worst' security flaw in ages

Old-School Attacks Are Still a Danger, Despite Newer Techniques

Google Makes Passkeys Default, Stepping Up Its Push to Kill Passwords

Google Adopts Passkeys as Default Sign-in Method for All Users

Model Extraction Attack on Neural Networks

New Report: Child Sexual Abuse Content and Online Risks to Children on the Rise

Researchers Uncover Grayling APT's Ongoing Attack Campaign Across Industries

Virus Bulletin PUA a love letter

New Magecart Campaign Alters 404 Error Pages to Steal Shoppers' Credit Cards

Ransomware attacks register record speeds thanks to success of infosec industry

libcue Library Flaw Opens GNOME Linux Systems Vulnerable to RCE Attacks

Citrix Devices Under Attack: NetScaler Flaw Exploited to Capture User Credentials

Exercise Cyber Star tests Singapore response

Rethinking Compliance: The Underutilized Power of CSP Native Security Services

Living Off the Land Attacks and Countermeasures in Industrial Control Systems

~ 9 Oct 2023 ~

The Israel-Hamas War Erupts in Digital Chaos

Hacktivists Enter Fray Following Hamas Strikes Against Israel

Phishers Spoof USPS, 12 Other Natl Postal Services

'Looney Tunables' Linux Flaw Sees Snowballing Proof-of-Concept Exploits

Operation Behind Predator Mobile Spyware Is 'Industrial Scale'

Patch Now: Massive RCE Campaign Wrangles Routers Into Botnet

PEACHPIT: Massive Ad Fraud Botnet Powered by Millions of Hacked Android and iOS

Expanded Microsoft Security Experts offerings provide comprehensive protection

The Israel-Hamas War Is Drowning X in Disinformation

DoJ: Ex-soldier tried to pass secrets to China after seeking a 'subreddit about spy stuff'

Cybersecurity Talent in America: Bridging the Gap

Independently Confirming Amnesty Security Labs finding of Predator targeting of U.S. & other elected officials on Twitter/X

Hacktivist attacks erupt in Middle East following Hamas assault on Israel

Cybercriminals Using EvilProxy Phishing Kit to Target Senior Executives in U.S. Firms