Port 22

~ 29 Mar 2024 ~

New Linux Bug Could Lead to User Password Leaks and Clipboard Hijacking

RDP remains a security concern Week in security with Tony Anscombe

PyPI Halts Sign-Ups Amid Surge of Malicious Package Uploads Targeting Developers

The Art of Possible: Your Guide to RSAC 2024

~ 28 Mar 2024 ~

Thread Hijacking: Phishes That Prey on Your Curiosity

JetBrains keeps mum on 26 'security problems' fixed after Rapid7 spat

Linux Version of DinodasRAT Spotted in Cyber Attacks Across Several Countries

Finland Blames Chinese Hacking Group APT31 for Parliament Cyber Attack

FTX crypto-crook Sam Bankman-Fried gets 25 years in prison

Nvidia's newborn ChatRTX bot patched for security bugs

Darcula Phishing Network Leveraging RCS and iMessage to Evade Detection

US critical infrastructure cyberattack reporting rules inch closer to reality

DinodasRAT Linux implant targeting entities worldwide

New Webinar: Avoiding Application Security Blind Spots with OPSWAT and F5

Canonical cracks down on crypto cons following Snap Store scam spree

Hardware Vulnerability in Apples M-Series Chips

Jeffrey Epstein's Island Visitors Exposed by Data Broker

Behind the Scenes: The Art of Safeguarding Non-Human Identities

New ZenHammer Attack Bypasses Rowhammer Defenses on AMD CPUs

Cybercriminals play dirty: A look back at 10 cyber hits on the sporting world

INC Ransom claims responsibility for attack on NHS Scotland

Telegram Offers Premium Subscription in Exchange for Using Your Number to Send OTPs

These 17,000 unpatched Microsoft Exchange servers are a ticking time bomb

AI hallucinates software packages and devs download them even if potentially poisoned with malware

Execs in Japan busted for winning dev bids then outsourcing to North Koreans

China encouraged armed offensive against Myanmar government to protest proliferation of online scams

~ 27 Mar 2024 ~

Apple fans flooded with phony password reset requests

Majority of Americans now use ad blockers

'Thousands' of businesses at mercy of miscreants thanks to unpatched Ray AI flaw

Malicious Activity Hits the University of Cambridges Medical School

Meta accused of snarfing people's Snapchat data via traffic decryption

Hackers Hit Indian Defense, Energy Sectors with Malware Posing as Air Force Invite

Google reveals zero-day exploits in enterprise tech surged 64% last year

CISA Warns: Hackers Actively Attacking Microsoft SharePoint Vulnerability

Microsoft Edge Bug Could Have Allowed Attackers to Silently Install Malicious Extensions

Security Vulnerability in Safloks RFID-Based Keycard Locks

Street newspaper appears to have Big Issue with Qilin ransomware gang

SASE Solutions Fall Short Without Enterprise Browser Extensions, New Report Reveals

Critical Unpatched Ray AI Platform Vulnerability Exploited for Cryptocurrency Mining

Alert: New Phishing Attack Delivers Keylogger Disguised as Bank Payment Notice

Two Chinese APT Groups Ramp Up Cyber Espionage Against ASEAN Countries

The easy road to pervasive DLP

Empowering Cybersecurity Excellence: Certifications as the Keystone of NIS2 Compliance

~ 26 Mar 2024 ~

Malicious NuGet Package Linked to Industrial Espionage Targets Developers

Uncle Sam's had it up to here with 'unforgivable' SQL injection flaws

Recent MFA Bombing Attacks Targeting Apple Users

The foundation for responsible analytics with Microsoft Purview

Ransomware can mean life or death at hospitals, but DEF CON hackers have a plan

U.S. Charges 7 Chinese Nationals in Major 14-Year Cyber Espionage Operation

Rockwell Automation PowerFlex 527

Rockwell Automation FactoryTalk View ME

Rockwell Automation Arena Simulation

Automation-Direct C-MORE EA9 HMI

Crafting Shields: Defending Minecraft Servers Against DDoS Attacks

On Secure Voting Systems

Julian Assange Wont Be Extradited to the US Yet

Borrower beware: Common loan scams and how to avoid them

FreeBSD Foundation hands out Beacon gongs for safer software

UK elections are unaffected by China's cyber-interference, says deputy PM

AI and Trust

U.S. Sanctions 3 Cryptocurrency Exchanges for Helping Russia Evade Sanctions

Row breaks out over true severity of two DNSSEC flaws

CISA Alerts on Active Exploitation of Flaws in Fortinet, Ivanti, and Nice Products

New Zealand to world: China attacked us, too!

~ 25 Mar 2024 ~

Chinese nationals charged with cyber-spying on US biz and more for Beijing

Chinese Hackers Charged in Decade-Long Global Spying Rampage

Over 170K users hit by poisoned Python package ruse

Frost & Sullivan names Microsoft a Leader in the Frost Radar: Managed Detection and Response, 2024

Tech trade union confirms cyberattack behind IT, email outage

Mozilla fixes $100,000 Firefox zero-days following two-day hackathon

New "GoFetch" Vulnerability in Apple M-Series Chips Leaks Secret Encryption Keys

GoFetch security exploit can't be disabled on M1 and M2 Apple chips

Hackers Hijack GitHub Accounts in Supply Chain Attack Affecting Top-gg and Others

Key Lesson from Microsofts Password Spray Hack: Secure Every Account

Licensing AI Engineers

Cybersecurity starts at home: Help your children stay safe online with open conversations

Time to examine the anatomy of the British Library ransomware nightmare

Iran-Linked MuddyWater Deploys Atera for Surveillance in Phishing Attacks

That Asian meal you eat on holidays could launder money for North Korea

Microsoft confirms memory leak in March Windows Server security update

~ 24 Mar 2024 ~

Some 300,000 IPs vulnerable to this Loop DoS attack

Vans claims cyber crooks didn't run off with its customers' financial info

N. Korea-linked Kimsuky Shifts to Compiled HTML Help Files in Ongoing Cyberattacks

German Police Seize 'Nemesis Market' in Major International Darknet Raid

~ 23 Mar 2024 ~

Apple Chip Flaw Leaks Secret Encryption Keys

Russia's Cozy Bear caught phishing German politicos with phony dinner invites

Russian Hackers Use 'WINELOADER' Malware to Target German Political Parties

~ 22 Mar 2024 ~

Chinese snoops use F5, ConnectWise bugs to sell access into top US, UK networks

Friday Squid Blogging: New Species of Squid Discovered

Mozilla Drops Onerep After CEO Admits to Running People-Search Networks

3 million doors open to uninvited guests in keycard exploit

Hardware-level Apple Silicon vulnerability can leak cryptographic keys

New StrelaStealer Phishing Attacks Hit Over 100 Organizations in E.U. and U.S.

NVD slowdown leaves thousands of vulnerabilities without analysis data

AWS Patches Critical 'FlowFixation' Bug in Airflow Service to Prevent Session Hijacking

AceCryptor attacks surge in Europe Week in security with Tony Anscombe

China-Linked Group Breaches Networks via Connectwise, F5 Software Flaws

Massive Sign1 Campaign Infects 39,000+ WordPress Sites with Scam Redirects

Implementing Zero Trust Controls for Compliance

Google Pays $10M in Bug Bounties in 2023