Port 22

~ 18 Nov 2024 ~

Urgent: Critical WordPress Plugin Vulnerability Exposes Over 4 Million Sites

Teen serial swatter-for-hire busted, pleads guilty, could face 20 years

Women In Russian-Speaking Cybercrime: Mythical Creatures or Significant Members of Underground?

~ 17 Nov 2024 ~

Will passkeys ever replace passwords? Can they?

~ 16 Nov 2024 ~

Bitfinex Hacker Gets 5 Years for $10 Billion Bitcoin Heist

Rust haters, unite! Fil-C aims to Make C Great Again

PAN-OS Firewall Vulnerability Under Active Exploitation IoCs Released

Swiss cheesed off as postal service used to spread malware

Warning: DEEPDATA Malware Exploiting Unpatched Fortinet Flaw to Steal VPN Credentials

Bloke behind Helix Bitcoin launderette jailed for three years, hands over $400M

Letting chatbots run robots ends as badly as you'd expect

~ 15 Nov 2024 ~

Friday Squid Blogging: Female Gonatus Onyx Squid Carrying Her Eggs

Mystery Palo Alto Networks hijack-my-firewall zero-day now officially under exploit

Keyboard robbers steal 171k customers' data from AnnieMac mortgage house

Simplifying endpoint security

Bitfinex burglar bags 5 years behind bars for Bitcoin heist

Researchers Warn of Privilege Escalation Risks in Google's Vertex AI ML Platform

Good Essay on the History of Bad Password Policies

Master Certificate Management: Join This Webinar on Crypto Agility and Best Practices

Vietnamese Hacker Group Deploys New PXA Stealer Targeting Europe and Asia

How AI Is Transforming IAM and Identity Security

Iranian Hackers Deploy WezRat Malware in Attacks Targeting Israeli Organizations

High-Severity Flaw in PostgreSQL Allows Hackers to Exploit Environment Variables

Microsoft Power Pages misconfigurations exposing sensitive data

Bitfinex Hacker Sentenced to 5 Years, Guilty of Laundering $10.5 Billion in Bitcoin

CISA Flags Critical Palo Alto Network Flaws Actively Exploited in the Wild

An Interview With the Target & Home Depot Hacker

Zero Trust Network Architecture: Ready for Prime Time?

Navigating the AI Frontier: The Next Wild Innovation

Fortifying the Supply Chain: Strategies for Modern Security Challenges

~ 14 Nov 2024 ~

Fortinet patches VPN app flaw that could give rogue users, malware a privilege boost

Cybercriminal devoid of boundaries gets 10-year prison sentence

Experts Uncover 70,000 Hijacked Domains in Widespread 'Sitting Ducks' Attack Scheme

ESET APT Activity Report Q2 2024Q3 2024: Key findings

Google Warns of Rising Cloaking Scams, AI-Driven Fraud, and Crypto Schemes

5 BCDR Oversights That Leave You Exposed to Ransomware

New iOS Security Feature Makes It Harder for Police to Unlock Seized Phones

Siemens TeleControl Server

Siemens Spectrum Power 7

Siemens Solid Edge

Siemens SIPORT

Siemens SINEC NMS

Siemens SINEC INS

Siemens SIMATIC CP

Siemens SCALANCE M-800 Family

Siemens RUGGEDCOM CROSSBOW

Siemens OZW672 and OZW772 Web Server

Siemens Mendix Runtime

Siemens Engineering Platforms

Rockwell Automation Verve Asset Manager

Rockwell Automation FactoryTalk Updater

Rockwell Automation Arena Input Analyzer

Hitachi Energy MSM

2N Access Commander

Kids' shoemaker Start-Rite trips over security again, spilling customer card info

NatWest blocks bevy of apps in clampdown on unmonitorable comms

TikTok Pixel Privacy Nightmare: A New Case Study

More Spyware, Fewer Rules: What Trumps Return Means for US Cybersecurity

New RustyAttr Malware Targets macOS Through Extended Attribute Abuse

Asda security chief replaced, retailer sheds jobs during Walmart tech divorce

rimeware and financial cyberthreats in 2025

Five Eyes infosec agencies list 2024's most exploited software flaws

Five Eyes infosec agencies list 2023's most exploited software flaws

Russian Hackers Exploit New NTLM Flaw to Deploy RAT Malware via Phishing Emails

China-backed crews compromised 'multiple' US telcos in 'significant cyber espionage campaign'

Teen Behind Hundreds of Swatting Attacks Pleads Guilty to Federal Charges

ShrinkLocker ransomware scrambled your files? Free decryption tool to the rescue

~ 13 Nov 2024 ~

Data broker amasses 100M+ records on people then someone snatches, sells it

Ransomware fiends boast they've stolen 1.4TB from US pharmacy network

These Guys Hacked AirPods to Give Their Grandmas Hearing Aids

Microsoft slips Task Manager and processor count fixes into Patch Tuesday

Microsoft Data Security Index annual reporthighlights evolving generative AI security needs

Hamas-Affiliated WIRTE Employs SameCoin Wiper in Disruptive Attacks Against Israel

Free Decryptor Released for BitLocker-Based ShrinkLocker Ransomware Victims

Iranian Hackers Use "Dream Job" Lures to Deploy SnailResin Malware in Aerospace Attacks

Mapping License Plate Scanners in the US

ICE Started Ramping Up Its Surveillance Arsenal Immediately After Donald Trump Won

Comprehensive Guide to Building a Strong Browser Security Program

Threats in space (or rather, on Earth): internet-exposed GNSS receivers

ESET Research Podcast: Gamaredon

OvrC Platform Vulnerabilities Expose IoT Devices to Remote Attacks and Code Execution

Microsoft Fixes 90 New Flaws, Including Actively Exploited NTLM and Task Scheduler Bugs

Admins can give thanks this November for dollops of Microsoft patches

China's Volt Typhoon crew and its botnet surge back with a vengeance

Air National Guardsman gets 15 years after splashing classified docs on Discord

~ 12 Nov 2024 ~

Microsoft Patch Tuesday, November 2024 Edition

Here's what we know about the suspected Snowflake data extortionists

'Cybersecurity issue' at Food Lion parent blamed for US grocery mayhem

HTTP your way into Citrix's Virtual Apps and Desktops with fresh exploit code

Managing third-party risks in complex IT environments

New Flaws in Citrix Virtual Apps Enable RCE Attacks via MSMQ Misconfiguration

New Phishing Tool GoIssue Targets GitHub Developers in Bulk Email Campaigns

Amazon confirms employee data exposed in leak linked to MOVEit vulnerability

North Korean Hackers Target macOS Using Flutter-Embedded Malware

Criminals Exploiting FBI Emergency Data Requests

Subnet Solutions PowerSYSTEM Center

Rockwell Automation FactoryTalk View ME

Hitachi Energy TRO600

The WIRED Guide to Protecting Yourself From Government Surveillance

5 Ways Behavioral Analytics is Revolutionizing Incident Response