Port 22

~ 6 Apr 2024 ~

What can be done to protect open source devs from next xz backdoor drama?

Best Privacy Browsers (2024): Brave, Safari, Ghostery, Firefox, DuckDuckGo

Hackers Exploit Magento Bug to Steal Payment Data from E-commerce Websites

Identity Thief Lived as a Different Man for 33 Years

~ 5 Apr 2024 ~

Friday Squid Blogging: SqUID Bots

US government excoriates Microsoft for 'avoidable errors' but keeps paying for its products

AI-as-a-Service Providers Vulnerable to PrivEsc and Cross-Tenant Attacks

Hotel check-in terminal bug spews out access codes for guest rooms

The devil is in the fine print Week in security with Tony Anscombe

CISO Perspectives on Complying with Cybersecurity Regulations

Maybe the Phone System Surveillance Vulnerabilities Will Be Fixed

From PDFs to Payload: Bogus Adobe Acrobat Reader Installers Distribute Byakugan Malware

New Wave of JSOutProx Malware Targeting Financial Firms in APAC and MENA

Researchers Identify Multiple China Hacker Groups Exploiting Ivanti Security Flaws

Academics probe Apple's privacy settings and get lost and confused

World's second-largest eyeglass lens-maker blinded by infosec incident

~ 4 Apr 2024 ~

Feds probe massive alleged classified US govt data theft and leak

Explore Microsofts AI innovations at RSA Conference 2024

Vietnam-Based Hackers Steal Financial Data Across Asia with Malware

New Phishing Campaign Targets Oil & Gas with Evolved Data-Stealing Malware

Ivanti commits to secure-by-design overhaul after vulnerability nightmare

Fake Lawsuit Threat Exposes Privnote Phishing Sites

Schweitzer Engineering Laboratories SEL

Hitachi Energy Asset Suite 9

Considerations for Operational Technology Cybersecurity

New HTTP/2 Vulnerability Exposes Web Servers to DoS Attacks

Surveillance by the New Microsoft Outlook App

Ransomware gang <em>did</em> steal residents' confidential data, UK city council admits

A Vigilante Hacker Took Down North Koreas Internet. Now Hes Taking Off His Mask

When AI attacks

Ivanti Rushes Patches for 4 New Flaw in Connect Secure and Policy Secure

~ 3 Apr 2024 ~

Nearly 1M medical records feared stolen from City of Hope cancer centers

Omni Hotels IT systems down since Friday, hitting bookings, payments, door locks

Google Warns: Android Zero-Day Flaws in Pixel Phones Exploited by Forensic Companies

Get end-to-end protection with Microsofts unified security operations platform, now in public preview

U.S. Cyber Safety Board Slams Microsoft Over Breach by China-Based Hackers

The Mystery of Jia Tan, the XZ Backdoor Mastermind

The Manipulaters Improve Phishing, Still Fail at Opsec

Google Chrome Beta Tests New DBSC Protection Against Cookie-Stealing Attacks

Security pioneer Ross Anderson dies at 67

Google bakes new cookie strategy that will leave crooks with a bad taste

Attack Surface Management vs. Vulnerability Management

Class-Action Lawsuit against Googles Incognito Mode

Mispadu Trojan Targets Europe, Thousands of Credentials Compromised

How often should you change your passwords?

Meet clickjacking's slicker cousin, 'gesture jacking,' aka 'cross window forgery'

Critical Security Flaw Found in Popular LayerSlider WordPress Plugin

Microsoft slammed for lax security that led to Exchange Online attack

Microsoft slammed for lax security that led to China's cyber-raid on Exchange Online

4 Trends That Will Define the CISO's Role in 2024

~ 2 Apr 2024 ~

Feds finally decide to do something about years-old SS7 spy holes in phone networks

Citizen Lab submission to the Congressional-Executive Commission on China about the State of Human Rights in China

xz Utils Backdoor

OWASP server blunder exposes decade of resumes

Declassified NSA Newsletters

Pandabuy admits to data breach of 1.3 million unique records

Microsoft warns deepfake election subversion is disturbingly easy

Rubrik files to go public following alliance with Microsoft

Malicious Code in XZ Utils for Linux Systems Enables Remote Code Execution

Microsoft Priva announces new solutions to help modernize your privacy program

Polish officials may face criminal charges in Pegasus spyware probe

IOSIX IO-1020 Micro ELD

Harnessing the Power of CTEM for Cloud Security

INC Ransom claims to be behind 'cyber incident' at UK city council

China-linked Hackers Deploy New 'UNAPIMON' Malware for Stealthy Operations

Malware hiding in pictures? More likely than you think

Happy 20th birthday Gmail, you're mostly grown up now fix the spam

The XZ Backdoor: Everything You Need to Know

Apple's GoFetch silicon security fail was down to an obsession with speed

Google to Delete Billions of Browsing Records in 'Incognito Mode' Privacy Lawsuit Settlement

Massive Phishing Campaign Strikes Latin America: Venom RAT Targeting Multiple Sectors

A Visual Summary of SANS New2Cyber Summit 2024

Six banks share customer info to help Singapore fight money laundering

~ 1 Apr 2024 ~

US House of Reps tells staff: No Microsoft Copilot for you!

The Incognito Mode Myth Has Fully Unraveled

Malicious xz backdoor reveals fragility of open source

Nearly 3M people hit in Harvard Pilgrim healthcare data theft

Magic Security Dust

Indian Government Rescues 250 Citizens Forced into Cybercrime in Cambodia

Ex-White House CIO tells The Reg: TikTok ban may be diplomatic disaster

AT&amp;T admits massive 70m+ mid-March data dump is real, but claims it's years old

Detecting Windows-based Malware Through Better Visibility

Malicious Apps Caught Secretly Turning Android Phones into Proxies for Cybercriminals

Vultur Android Banking Trojan Returns with Upgraded Remote Control Capabilities

A Ghost Ships Doomed Journey Through the Gate of Tears

4 Key Cybersecurity Trends to Watch in 2024

4 Cybersecurity Trends for Greater ROI in 2024

Ross Anderson

~ 31 Mar 2024 ~

Rust developers at Google are twice as productive as C++ teams

You Should Update Apple iOS and Google Chrome ASAP

~ 30 Mar 2024 ~

Yogurt Heist Reveals a Rampant Form of Online Fraud

Hackers Target macOS Users with Malicious Ads Spreading Stealer Malware

Urgent: Secret Backdoor Found in XZ Utils Library, Impacts Major Linux Distros

~ 29 Mar 2024 ~

Malicious backdoor sneaks into xz, Linux world's data compression library and tool

Easy-to-use make-me-root exploit lands for recent Linux kernels. Get patching

Friday Squid Blogging: The Geopolitics of Eating Squid

Dormakaba Locks Used in Millions of Hotel Rooms Could Be Cracked in Seconds

TheMoon Botnet Resurfaces, Exploiting EoL Devices to Power Criminal Proxy

The Golden Age of Automated Penetration Testing is Here

Lessons from a Ransomware Attack against the British Library