Port 22

~ 7 May 2024 ~

Microsoft announces the 2024 Microsoft Security Excellence Awards winners

Russian Hacker Dmitry Khoroshev Unmasked as LockBit Ransomware Administrator

New Attack on VPNs

How to inspire the next generation of scientists | Unlocked 403: Cybersecurity podcast

Investigators finally unmask LockBit kingpin after two-month tease

Cops finally unmask 'LockBit kingpin' after two-month tease

The Alleged LockBit Ransomware Mastermind Has Been Identified

APT42 Hackers Pose as Journalists to Harvest Credentials and Access Cloud Data

China-Linked Hackers Used ROOTROT Webshell in MITRE Network Intrusion

The truth about KEV: CISAs vuln deadlines good influence on private-sector patching

New Case Study: The Malicious Comment

Physical security biz exposes 1.2M files via unprotected database

Google Simplifies 2-Factor Authentication Setup (It's More Important Than Ever)

Exploits and vulnerabilities in Q1 2024

Russian Operator of BTC-e Crypto Exchange Pleads Guilty to Money Laundering

Ransomware evolves from mere extortion to 'psychological attacks'

Google, Meta, Spotify break Apple's device fingerprinting rules new claim

~ 6 May 2024 ~

Fed-run LockBit site back from the dead and vows to really spill the beans on gang

Mastodon delays fix for link previews DDoSing websites

Consultant charged over $1.5M extortion scheme against IT giant

New capabilities to help you secure your AI transformation

Why Your VPN May Not Be As Secure As It Claims

Critical Tinyproxy Flaw Opens Over 50,000 Hosts to Remote Code Execution

China-Linked Hackers Suspected in ArcaneDoor Cyberattacks Targeting Network Devices

CISA says 'no more' to decades-old directory traversal bugs

Apples iPhone Spyware Problem Is Getting Worse. Heres What You Should Know

New Lawsuit Attempting to Make Adversarial Interoperability Legal

It Costs How Much?!? The Financial Pitfalls of Cyberattacks on SMBs

Xiaomi Android Devices Hit by Multiple Flaws Across Apps and System Components

Financial cyberthreats in 2023

The hackers toolkit: 4 gadgets that could spell security trouble

New 'Cuckoo' Persistent macOS Spyware Targeting Intel and Arm Macs

Germany points finger at Fancy Bear for widespread 2023 hacks, DDoS attacks

The Distinctive Worlds of OT Cybersecurity and IT Cybersecurity

~ 5 May 2024 ~

End-to-end encryption may be the bane of cops, but they can't close that Pandora's Box

Building a Cloud Security Flywheel: Lessons from the Field

~ 4 May 2024 ~

Dating apps kiss'n'tell all sorts of sensitive personal info

A New Surveillance Tool Invades Border Towns

Microsoft Outlook Flaw Exploited by Russia's APT28 to Hack Czech, German Entities

~ 3 May 2024 ~

Kaspersky hits back at claims it helped Russia develop military drone systems

Kaspersky accused of helping Russia develop military drone systems

Friday Squid Blogging: Squid Purses

My TED Talks

It may take decade to shore up software supply chain security, says infosec CEO

Pay up, or else? Week in security with Tony Anscombe

Security above all elseexpanding Microsofts Secure Future Initiative

Expert-Led Webinar - Uncovering Latest DDoS Tactics and Learn How to Fight Back

Hackers Increasingly Abusing Microsoft Graph API for Stealthy Malware Communications

Rare Interviews with Enigma Cryptanalyst Marian Rejewski

New Guide Explains How to Eliminate the Risk of Shadow SaaS and Protect Corporate Data

NSA, FBI Alert on N. Korean Hackers Spoofing Emails from Trusted Sources

These Dangerous Scammers Dont Even Bother to Hide Their Crimes

Google Announces Passkeys Adopted by Over 400 Million Accounts

Europol op shutters 12 scam call centers and cuffs 21 suspected fraudsters

Four Critical Vulnerabilities Expose HPE Aruba Devices to RCE Attacks

Indonesia sneakily buys spyware, claims Amnesty International

Chinese government website security is often worryingly bad, say Chinese researchers

How AI and ML are Changing Mobile Device Forensics Investigations

~ 2 May 2024 ~

Microsoft, Google do a victory lap around passkeys

Florida man gets 6 years behind bars for flogging fake Cisco kit to US military

Patch up 4 critical bugs in ArubaOS lead to remote code execution

Microsoft named an overall leader in KuppingerCole Leadership Compass for ITDR

The Breach of a Face Recognition Firm Reveals a Hidden Danger of Biometrics

Popular Android Apps Like Xiaomi, WPS Office Vulnerable to File Overwrite Flaw

Federal frenzy to patch gaping GitLab account takeover hole