Port 22

~ 28 Nov 2024 ~

XMLRPC npm Library Turns Malicious, Steals Data, Deploys Crypto Miner

APT trends report Q3 2024

Scams to look out for this holiday season

Cybercriminals Exploit Popular Game Engine Godot to Distribute Cross-Platform Malware

The only thing worse than being fired is scammers fooling you into thinking you're fired

U.S. Telecom Giant T-Mobile Detects Network Intrusion Attempts from Wireline Provider

~ 27 Nov 2024 ~

Salt Typhoon's surge extends far beyond US telcos

T-Mobile US takes a victory lap after stopping cyberattacks: 'Other providers may be seeing different outcomes'

Bolster resilience against 2025 cyber threats

Data broker leaves 600K+ sensitive files exposed online

Keynote Session by Kate Robertson at the 2024 APSIM Conference

Researchers Discover "Bootkitty" First UEFI Bootkit Targeting Linux Kernels

Critical Flaw in ProjectSend Under Active Exploitation Against Public-Facing Servers

First-ever UEFI bootkit for Linux in the works, experts say

Automating endpoint management

Bootkitty marks a new chapter in the evolution of UEFI threats

NSO Group Spies on People on Behalf of Governments

Latest Multi-Stage Attack Scenarios with Real-World Examples

APT-C-60 Exploits WPS Office Vulnerability to Deploy SpyGlace Backdoor

Consumer and privacy predictions for 2025

The workplace has become a surveillance state

CrowdStrike still doesn't know how much its Falcon flame-out will cost

INTERPOL Busts African Cybercrime: 1,006 Arrests, 134,089 Malicious Networks Dismantled

Bootkitty: Analyzing the first UEFI bootkit for Linux

Telco engineer who spied on US employer for Beijing gets four years in the clink

Matrix Botnet Exploits IoT Devices in Widespread DDoS Botnet Campaign

Hacker in Snowflake Extortions May Be a U.S. Soldier

~ 26 Nov 2024 ~

Man accused of hilariously bad opsec as alleged cybercrime spree detailed

US senators propose law to require bare minimum security standards

Fortify your data

Firefox and Windows zero days chained to deliver the RomCom backdoor

Bing Wallpaper app, now in Windows Store, accused of cookie shenanigans

Critical WordPress Anti-Spam Plugin Flaws Expose 200,000+ Sites to Remote Attacks

What Graykey Can and Cant Unlock

Schneider Electric PowerLogic PM55xx and PowerLogic PM8ECC

Schneider Electric PowerLogic P5

Schneider Electric EcoStruxure Control Expert, EcoStruxure Process Expert, and Modicon M340, M580 and M580 Safety PLCs

Hitachi Energy RTU500 Scripting Interface

Hitachi Energy MicroSCADA Pro/X SYS600

Emergency Vehicle Lights Can Screw Up a Car's Automated Driving System

Another 'major cyber incident' at a UK hospital, outpatients asked to stay away

Intruder Launches Intel: A Free Vulnerability Intelligence Platform For Staying Ahead of the Latest Threats

RomCom Exploits Zero-Day Firefox and Windows Flaws in Sophisticated Cyberattacks

CISA Urges Agencies to Patch Critical "Array Networks" Flaw Amid Active Attacks

QNAP and Veritas dump 30-plus vulns over the weekend

Chinese Hackers Use GHOSTSPIDER Malware to Hack Telecoms Across 12+ Countries

Analysis of Elpaco: a Mimic variant

RomCom exploits Firefox and Windows zero days in the wild

Britain Putin up stronger AI defences to counter growing cyber threats

Supply chain management vendor Blue Yonder succumbs to ransomware

Why SEC545: GenAI and LLM Application Security?

~ 25 Nov 2024 ~

: Amazon.com

PyPI Python Library "aiocpa" Found Exfiltrating Crypto Keys via Telegram Bot

Security? We've heard of it: How Microsoft plans to better defend Windows

Banned Books: Analysis of Censorship on Amazon.com

Google's New Restore Credentials Tool Simplifies App Login After Android Migration

China has utterly pwned 'thousands and thousands' of devices at US telcos

Security Analysis of the MERGE Voting Protocol

Flying Under the Radar - Security Evasion Techniques

Cybersecurity Blind Spots in IaC and PaC Tools Expose Cloud Platforms to New Attacks

THN Recap: Top Cybersecurity Threats, Tools, and Practices (Nov 18 - Nov 24)

Advanced threat predictions for 2025

Researchers Uncover Malware Using BYOVD to Bypass Antivirus Protections

Google blocked 1,000-plus pro-China fake news websites from its search results

Imagine a land in which Big Tech can't send you down online rabbit holes or use algorithms to overcharge you

Russian spies may have moved in next door to target your network

SANS Threat Analysis Rundown in Review: Breaking Down November 2024s Top Threats

~ 24 Nov 2024 ~

Volunteer DEF CON hackers dive into America's leaky water infrastructure

~ 23 Nov 2024 ~

Trump taps border hawk to head DHS. Will Noem's 'enthusiasm' extend to digital domain?

Russias Ballistic Missile Attack on Ukraine Is an Alarming First

Google Exposes GLASSBRIDGE: A Pro-China Influence Network of Fake News Sites

North Korean Hackers Steal $10M with AI-Driven Scams and Malware on LinkedIn

Andrew Tates Educational Platform Was Hacked

~ 22 Nov 2024 ~

Andrew Tate's site ransacked, subscriber data stolen

Friday Squid Blogging: Transcriptome Analysis of the Indian Squid

1000s of Palo Alto Networks firewalls hijacked as miscreants exploit critical hole

The US Is Calling Out Foreign Influence Campaigns Faster Than Ever

APT-K-47 Uses Hajj-Themed Lures to Deliver Advanced Asyncshell Malware

China-Linked TAG-112 Targets Tibetan Media with Cobalt Strike Espionage Campaign

The Scale of Geoblocking by Nation

Russian Hackers Deploy HATVIBE and CHERRYSPY Malware Across Europe and Asia

Russian Spies Jumped From One Network to Another Via Wi-Fi in an Unprecedented Hack

Unlocking Google Workspace Security: Are You Doing Enough to Protect Your Data?

How to master endpoint security

Microsoft shares latest intelligence on North Korean and Chinese threat actors at CYBERWARCON

Microsoft, Meta, and DOJ Disrupt Global Cybercrime and Fraudulent Networks

SafePay ransomware gang claims Microlise attack that disrupted prison van tracking

PyPI Attack: ChatGPT, Claude Impersonators Deliver JarkaStealer via Python Libraries

Helpline for Yakuza victims fears it leaked their personal info

Here's what happens if you don't layer network security or remove unused web shells

~ 21 Nov 2024 ~

Feds Charge Five Men in Scattered Spider Roundup

DARPA-backed voting system for soldiers abroad savaged

Meta Finally Breaks Its Silence on Pig Butchering

Chinese ship casts shadow over Baltic subsea cable snipfest

Cyber Story Time: The Boy Who Cried "Secure!"

Warning: Over 2,000 Palo Alto Networks Devices Hacked in Ongoing Attack Campaign

Chinese APT Gelsemium Targets Linux Systems with New WolfsBane Backdoor

'Alarming' security bugs lay low in Linux's needrestart server utility for 10 years

'Alarming' bugs lay low in Ubuntu Server utility for 10 years

10 Most Impactful PAM Use Cases for Enhancing Organizational Security