Port 22

~ 13 Aug 2024 ~

Rockwell Automation Pavilion8

Orion SA says scammers conned company out of $60 million

On the Voynich Manuscript

Why Hardsec Matters: From Protecting Critical Services to Enhancing Resilience

Who uses LLM prompt injection attacks IRL? Mostly unscrupulous job seekers, jokesters and trolls

FBI Shuts Down Dispossessor Ransomware Group's Servers Across U.S., U.K., and Germany

Why scammers want your phone number

'Digital arrest' scams are big in India and may be spreading

Ukraine Warns of New Phishing Campaign Targeting Government Computers

AMD wont patch Sinkclose security bug on older Zen CPUs

Up and Running with Siftgrab

~ 12 Aug 2024 ~

Attacker steals personal data of 200k+ people with links to Arizona tech school

The great location leak: Privacy risks in dating apps

Mega money, unfathomable violence pervade thriving underground doxxing scene

How Phishing Attacks Adapt Quickly to Capitalize on Current Events

Researchers Uncover Vulnerabilities in Solarman and Deye Solar Systems

The AI Hangover is Here The End of the Beginning

FreeBSD Releases Urgent Patch for High-Severity OpenSSH Vulnerability

Taxonomy of Generative AI Misuse

Indirect prompt injection in the real world: how people manipulate neural networks

Top 6 Craigslist scams: Dont fall for these tricks

Evolve your cloud security knowledge

Industrial Remote Access Tool Ewon Cosy+ Vulnerable to Root Access Attacks

Trump campaign cites Iran election phish claim as evidence leaked docs were stolen

EastWind Attack Deploys PlugY and GrewApacha Backdoors Using Booby-Trapped LNK Files

The UN unanimously agrees that cybercrime is bad, mkay?

~ 11 Aug 2024 ~

Rogue PyPI Library Solana Users, Steals Blockchain Wallet Keys

~ 10 Aug 2024 ~

Thousands of Corporate Secrets Were Left Exposed. This Guy Found Them All

The Hacker Who Hunts Video Game Speedrunning Cheaters

Apple Prototypes and Corporate Secrets Are for Sale OnlineIf You Know Where to Look

~ 11 Aug 2024 ~

Researchers Uncover 10 Flaws in Google's File Transfer Tool Quick Share

~ 10 Aug 2024 ~

New Malware Hits 300,000 Users with Rogue Chrome and Edge Extensions

Microsoft Warns of Unpatched Office Vulnerability Leading to Data Breaches

~ 9 Aug 2024 ~

Google Researchers Found Nearly a Dozen Flaws in Popular Qualcomm Software for Mobile GPUs

~ 10 Aug 2024 ~

Experts Uncover Severe AWS Flaws Leading to RCE, Data Theft, and Full-Service Takeovers

~ 9 Aug 2024 ~

Raptor Lake microcode limits Intel chips to a mere 1.55 volts to prevent CPU destruction

Friday Squid Blogging: SQUID Is a New Computational Tool for Analyzing Genomic AI

ATM Software Flaws Left Piles of Cash for Anyone Who Knew to Look

Microsoft Reveals Four OpenVPN Flaws Leading to Potential RCE and LPE

Understanding escalating cyber threats

Black Hat USA 2024 recap Week in security with Tony Anscombe

People-Search Site Removal Services Largely Ineffective

New Flaws in Sonos Smart Speakers Allow Hackers to Eavesdrop on Users

Black Hat USA 2024: All eyes on election security

Pro-Iran groups lay groundwork for 'chaos and violence' as US election meddling intensifies

Sinkclose Flaw in Hundreds of Millions of AMD Chips Allows Deep, Virtually Unfixable Infections

How Hackers Extracted the Keys to the Kingdom to Clone HID Keycards

DOJ Charges Nashville Man for Helping North Koreans Get U.S. Tech Jobs

CISA Warns of Hackers Exploiting Legacy Cisco Smart Install Feature

It's 2024 and we're just getting round to stopping browsers insecurely accessing 0.0.0.0

Whats the Scoop on FrostyGoop: The Latest ICS Malware and ICS Controls Considerations

Hello? Are you talking on a Cisco SPA300 or SPA500 IP phone? Now's the time to junk 'em

~ 8 Aug 2024 ~

Computer Crash Reports Are an Untapped Hacker Goldmine

Delta: CrowdStrike's offer to help in Falcon meltdown was too little, too late

Tricky Web Timing Attacks Are Getting Easier to Useand Abuse

US 'laptop farm' man accused of outsourcing his IT jobs to North Korea to fund weapons programs

Microsofts AI Can Be Turned Into an Automated Phishing Machine

Chained for attack: OpenVPN vulnerabilities discovered leading to RCE and LPE

University Professors Targeted by North Korean Cyber Espionage Group

USPS Text Scammers Duped His Wife, So He Hacked Their Operation

Black Hat USA 2024: How cyber insurance is shaping cybersecurity strategies

Using 1Password on Mac? Patch up if you dont want your Vaults raided

0.0.0.0 Day: 18-Year-Old Browser Vulnerability Impacts MacOS and Linux Devices

US elections have never been more secure, says CISA chief

Dorsett Controls InfoScan

Watch How a Hackers Infrared Laser Can Spy on Your Laptops Keystrokes

Automated Security Validation: One (Very Important) Part of a Complete CTEM Framework

Report: Tech misconceptions plague the IT world

Windows Downgrade Attack Risks Exposing Patched Systems to Old Vulnerabilities

New Phishing Scam Uses Google Drawings and WhatsApp Shortened Links

Entrust faces years of groveling to regain browsers' trust, say rival chiefs

Unlock the Future of Cybersecurity: Exclusive, Next Era AI Insights and Cutting-Edge Training at SANS Network Security 2024

FBI and CISA Warn of BlackSuit Ransomware That Demands Up to $500 Million

Critical Security Flaw in WhatsUp Gold Under Active Attack - Patch Now

Cloud storage lockers from Microsoft and Google used to store and spread state-sponsored malware

Samsung boosts bug bug bounty to a cool million for cracks of the Knox Vault subsystem

Samsung boosts bug bounty to a cool million for cracks of the Knox Vault subsystem

Maximizing Vendor Risk Assessments

~ 7 Aug 2024 ~

Inside the Dark World of Doxing for Profit

Cybercrime Rapper Sues Bank over Fraud Investigation

A Flaw in Windows Update Opens the Door to Zombie Exploits

Faulty instructions in Alibaba's T-Head C910 RISC-V CPUs blow away all security

The Citizen Lab at DEF CON 32

Fighting AI fire with AI fire

New Linux Kernel Exploit Technique 'SLUBStick' Discovered by Researchers

Ron Deibert on Sexist falsehoods target Kamala Haris after Biden drops out in the Daily Mail

Roundcube Webmail Flaws Allow Hackers to Steal Emails and Passwords

Small CSS tweaks can help nasty emails slip through Outlook's anti-phishing net

Police take just 2 days to recover $40M stolen in business email scam

Problems with Georgias Voter Registration Portal

New Go-based Backdoor GoGra Targets South Asian Media Organization

CrowdStrike Reveals Root Cause of Global System Outages

EQT buys majority share in Swiss cybersecurity biz Acronis

Why tech-savvy leadership is key to cyber insurance readiness

UK health services call-handling vendor faces $7.7M fine over 2022 ransomware attack

Chameleon Android Banking Trojan Targets Users Through Fake CRM App

Apples New macOS Sequoia Tightens Gatekeeper Controls to Block Unauthorized Software

SharpRhino malware targets IT admins Hunters International gang suspected

Georgia's voter portal gets a crash course in client versus backend input validation

Microsoft punches back at Delta Air Lines and its legal threats