Port 22

~ 31 Jul 2024 ~

Cyber Espionage Group XDSpy Targets Companies in Russia and Moldova

The cyberthreat that drives businesses towards cyber risk insurance

UK Electoral Commission slapped for basic cybersecurity fails

Meta Settles for $1.4 Billion with Texas Over Illegal Biometric Data Collection

DigiCert gives unlucky folks 24 hours to replace doomed certificates after code blunder

Take Me to the Cyber Arcade! Level Up Your Cyber Skills with Core NetWars Version 10: A Cutting-Edge Retro Arcade and AI Adventure

A Visual Summary of SANS Security Awareness: Managing Human Risk Summit 2024

A Visual Summary of SANS Security Awareness: Managing Human Risk Summit 2024

A Visual Summary of SANS Security Awareness: Managing Human Risk Summit 2024

~ 30 Jul 2024 ~

Delta Air Lines dials up Microsoft's legal nemesis over CrowdStrike losses

New Microsoft whitepaper shares how to prepare your data for secure AI adoption

'LockBit of phishing' EvilProxy used in more than a million attacks every month

A Senate Bill Would Radically Improve Voting Machine Security

New Mandrake Spyware Found in Google Play Store Apps After Two Years

The Power and Peril of RMM Tools

Ransomware gangs are loving this dumb but deadly make-me-admin ESXi vulnerability

Providing Security Updates to Automobile Software

Cybercriminals Target Polish Businesses with Agent Tesla and Formbook Malware

Cyber Threat Intelligence: Illuminating the Deep, Dark Cybercriminal Underground

Phishing targeting Polish SMBs continues via ModiLoader

New SideWinder Cyber Attacks Target Maritime Facilities in Multiple Countries

OneDrive Phishing Scam Tricks Users into Running Malicious PowerShell Script

Proofpoint phishing palaver plagues millions with 'perfectly spoofed' emails from IBM, Nike, Disney, others

VMware ESXi Flaw Exploited by Ransomware Groups for Admin Access

Malaysia is working on an internet 'kill switch', says minister

~ 29 Jul 2024 ~

Meta's AI safety system defeated by the space bar

US border cops really must get a warrant in NY before searching phones, devices

Critical Flaw in Acronis Cyber Infrastructure Exploited in the Wild

Ransomware operators exploit ESXi hypervisor vulnerability for mass encryption

Intruders at HealthEquity rifled through storage, stole 4.3M people's data

Proofpoint Email Routing Flaw Exploited to Send Millions of Spoofed Phishing Emails

Saboteurs Cut Internet Cables in Latest Disruption During Paris Olympics

Google apologizes for breaking password manager for millions of Windows users with iffy Chrome update

How Infostealers Pillaged the Worlds Passwords

New Research in Detecting AI-Generated Videos

How Searchable Encryption Changes the Data Security Game

Mandrake spyware sneaks onto Google Play again, flying under the radar for two years

Beware of fake AI tools masking very real malware threats

'Stargazer Goblin' Creates 3,000 Fake GitHub Accounts for Malware Spread

Post-CrowdStrike, Microsoft to discourage use of kernel drivers by security tools

Microsoft admits 8.5 million CrowdStruck machines estimate was lowballed

China ponders creating a national 'cyberspace ID'

Gh0st RAT Trojan Targets Chinese Windows Users via Fake Chrome Site

Secure Boot useless on hundreds of PCs from major vendors after key leak

~ 27 Jul 2024 ~

Windows Security best practices for integrating and managing security tools

Stop Xs Grok AI From Training on Your Tweets

French Authorities Launch Operation to Remove PlugX Malware from Infected Systems

Malicious PyPI Package Targets macOS to Steal Google Cloud Credentials

~ 26 Jul 2024 ~

Crooks Bypassed Googles Email Verification to Create Workspace Accounts, Access 3rd-Party Services

Friday Squid Blogging: Sunscreen from Squid Pigments

CrowdStrike meets Murphy's Law: Anything that can go wrong will

Compromising the Secure Boot Process

Progress discloses second critical flaw in Telerik Report Server in as many months

This AI-Powered Cybercrime Service Bundles Phishing Kits with Malicious Android Apps

A North Korean Hacker Tricked a US Security Vendor Into Hiring Himand Immediately Tried to Hack Them

Telegram for Android hit by a zero-day exploit Week in security with Tony Anscombe

Offensive AI: The Sine Qua Non of Cybersecurity

Europe Is Pumping Billions Into New Military Tech

U.S. DoJ Indicts North Korean Hacker for Ransomware Attacks on Hospitals

Ongoing Cyberattack Targets Exposed Selenium Grid Services for Crypto Mining

CrowdStrike Warns of New Phishing Scam Targeting German Customers

Critical Flaw in Telerik Report Server Poses Remote Code Execution Risk

North Korean chap charged for attacks on US hospitals, NASA and even China

Malware crew Stargazers Goblin used 3,000 GitHub accounts to make bank

Join the SANS Cloud Security Exchange 2024!

CrowdStrike update blunder may cost world billions and insurance ain't covering it all

~ 25 Jul 2024 ~

Beware of fake CrowdStrike domains pumping out Lumma infostealing malware

FYI: Data from deleted GitHub repos may not actually be deleted

The CrowdStrike Outage and Market-Driven Brittleness

Uncle Sam accuses telco IT pro of decade-long spying campaign for China

Onyx Sleet uses array of malware to gather intelligence for North Korea

North Korean Hackers Shift from Cyber Espionage to Ransomware Attacks

You should probably fix this 5-year-old critical Docker vuln fairly sharpish

Kaspersky says Uncle Sam snubbed proposal to open up its code for third-party review

Siemens SICAM Products

Positron Broadcast Signal Processor

At The 2024 Summer Olympics, AI Is Watching You

6 Types of Applications Security Testing You Must Know About

Data Wallets Using the Solid Protocol

Meta Removes 63,000 Instagram Accounts Linked to Nigerian Sextortion Scams

Webinar: Securing the Modern Workspace: What Enterprises MUST Know about Enterprise Browser Security

Researchers Reveal ConfusedFunction Vulnerability in Google Cloud Platform

Patch management still seemingly abysmal because no one wants the job

Critical Docker Engine Flaw Allows Attackers to Bypass Authorization Plugins

CISA Warns of Exploitable Vulnerabilities in Popular BIND 9 DNS Software

New Chrome Feature Scans Password-Protected Files for Malicious Content

How a cheap barcode scanner helped fix CrowdStrike'd Windows PCs in a flash

Fatal timeline of CrowdStrike's week from hell Feb to now

~ 24 Jul 2024 ~

Oops. Apple relied on bad code while flaming Google Chrome's Topics ad tech

Uncle Sam opens probe into CrowdStrike turbulence at Delta Air Lines

Zero Trust in the Age of AI: Join our online event to learn how to strengthen your security posture

Robot Dog Internet Jammer

Windows Patch Tuesday update might send a user to the BitLocker recovery screen

Data pilfered from Pentagon IT supplier Leidos

Telegram App Flaw Exploited to Spread Malware Hidden in Videos

How a Trust Center Solves Your Security Questionnaire Problem

A Hacker Ghost Network Is Quietly Spreading Malware on GitHub

This Machine Exposes Privacy Violations

How to Reduce SaaS Spend and Risk Without Impacting Productivity

Patchwork Hackers Target Bhutan with Advanced Brute Ratel C4 Tool