Port 22

~ 14 Aug 2024 ~

Enzo Biochem ordered to cough up $4.5 million over lousy security that led to ransomware disaster

Texas Sues GM for Collecting Driving Data without Consent

Upcoming Speaking Engagements

Palo Alto Networks execs apologize for 'hostesses' dressed as lamps at Black Hat booth

Belarusian-Ukrainian Hacker Extradited to U.S. for Ransomware and Cybercrime Charges

EastWind campaign: new CloudSorcerer attacks on government organizations in Russia

Rivers of Phish: Sophisticated Phishing Targets Russias Perceived Enemies Around the Globe

How to Augment Your Password Security with EASM

Want to Win a Bike Race? Hack Your Rivals Wireless Shifters

Is Lenovo a blind spot in US anti-China security measures?

DDoS Attacks Surge 46% in First Half of 2024, Gcore Report Reveals

Indian telcos to cut off scammy, spammy, telemarketers for two whole years

Microsoft Issues Patches for 90 Flaws, Including 10 Critical Zero-Day Exploits

Critical Flaw in Ivanti Virtual Traffic Manager Could Allow Rogue Admin Access

China-Backed Earth Baku Expands Cyber Attacks to Europe, Middle East, and Africa

NIST finalizes trio of post-quantum encryption standards

Navigating Zero Trust in the Hybrid Workforce: Insights from Industry Leaders

How to Become a Cyber Risk and Compliance Analyst

Patch Tuesday brings 90 new Microsoft CVEs, six already under exploit

Microsoft patches scary wormable hijack-my-box-via-IPv6 security bug and others

~ 13 Aug 2024 ~

Six 0-Days Lead Microsofts August 2024 Patch Push

Six ransomware gangs behind over 50% of 2024 attacks

US accuses man of being 'elite' ransomware pioneer they've hunted for years

Feds bust minor league Radar/Dispossessor ransomware gang

GhostWrite: New T-Head CPU Bugs Expose Devices to Unrestricted Attacks

Researchers Uncover Vulnerabilities in AI-Powered Azure Health Bot Service

APT trends report Q2 2024

Rockwell Automation Pavilion8

Rockwell Automation Micro850/870

Rockwell Automation GuardLogix/ControlLogix 5580 Controller

Rockwell Automation FactoryTalk View Site Edition

Rockwell Automation DataMosaix Private Cloud

Rockwell Automation ControlLogix, GuardLogix 5580, CompactLogix, Compact GuardLogix 5380

Rockwell Automation ControlLogix, GuardLogix 5580, CompactLogix, and Compact GuardLogix 5380

Rockwell Automation AADvance Standalone OPC-DA Server

Ocean Data Systems Dream Report

AVEVA SuiteLink Server

Orion SA says scammers conned company out of $60 million

On the Voynich Manuscript

Why Hardsec Matters: From Protecting Critical Services to Enhancing Resilience

Who uses LLM prompt injection attacks IRL? Mostly unscrupulous job seekers, jokesters and trolls

FBI Shuts Down Dispossessor Ransomware Group's Servers Across U.S., U.K., and Germany

Why scammers want your phone number

'Digital arrest' scams are big in India and may be spreading

Ukraine Warns of New Phishing Campaign Targeting Government Computers

AMD wont patch Sinkclose security bug on older Zen CPUs

Up and Running with Siftgrab

~ 12 Aug 2024 ~

Attacker steals personal data of 200k+ people with links to Arizona tech school

The great location leak: Privacy risks in dating apps

Mega money, unfathomable violence pervade thriving underground doxxing scene

How Phishing Attacks Adapt Quickly to Capitalize on Current Events

Researchers Uncover Vulnerabilities in Solarman and Deye Solar Systems

The AI Hangover is Here The End of the Beginning

FreeBSD Releases Urgent Patch for High-Severity OpenSSH Vulnerability

Taxonomy of Generative AI Misuse

Indirect prompt injection in the real world: how people manipulate neural networks

Top 6 Craigslist scams: Dont fall for these tricks

Evolve your cloud security knowledge

Industrial Remote Access Tool Ewon Cosy+ Vulnerable to Root Access Attacks

Trump campaign cites Iran election phish claim as evidence leaked docs were stolen

EastWind Attack Deploys PlugY and GrewApacha Backdoors Using Booby-Trapped LNK Files

The UN unanimously agrees that cybercrime is bad, mkay?

~ 11 Aug 2024 ~

Rogue PyPI Library Solana Users, Steals Blockchain Wallet Keys

~ 10 Aug 2024 ~

Thousands of Corporate Secrets Were Left Exposed. This Guy Found Them All

The Hacker Who Hunts Video Game Speedrunning Cheaters

Apple Prototypes and Corporate Secrets Are for Sale OnlineIf You Know Where to Look

~ 11 Aug 2024 ~

Researchers Uncover 10 Flaws in Google's File Transfer Tool Quick Share

~ 10 Aug 2024 ~

New Malware Hits 300,000 Users with Rogue Chrome and Edge Extensions

Microsoft Warns of Unpatched Office Vulnerability Leading to Data Breaches

~ 9 Aug 2024 ~

Google Researchers Found Nearly a Dozen Flaws in Popular Qualcomm Software for Mobile GPUs

~ 10 Aug 2024 ~

Experts Uncover Severe AWS Flaws Leading to RCE, Data Theft, and Full-Service Takeovers

~ 9 Aug 2024 ~

Raptor Lake microcode limits Intel chips to a mere 1.55 volts to prevent CPU destruction

Friday Squid Blogging: SQUID Is a New Computational Tool for Analyzing Genomic AI

ATM Software Flaws Left Piles of Cash for Anyone Who Knew to Look

Microsoft Reveals Four OpenVPN Flaws Leading to Potential RCE and LPE

Understanding escalating cyber threats

Black Hat USA 2024 recap Week in security with Tony Anscombe

People-Search Site Removal Services Largely Ineffective

New Flaws in Sonos Smart Speakers Allow Hackers to Eavesdrop on Users

Black Hat USA 2024: All eyes on election security

Pro-Iran groups lay groundwork for 'chaos and violence' as US election meddling intensifies

Sinkclose Flaw in Hundreds of Millions of AMD Chips Allows Deep, Virtually Unfixable Infections

How Hackers Extracted the Keys to the Kingdom to Clone HID Keycards

DOJ Charges Nashville Man for Helping North Koreans Get U.S. Tech Jobs

CISA Warns of Hackers Exploiting Legacy Cisco Smart Install Feature

It's 2024 and we're just getting round to stopping browsers insecurely accessing 0.0.0.0

Whats the Scoop on FrostyGoop: The Latest ICS Malware and ICS Controls Considerations

Hello? Are you talking on a Cisco SPA300 or SPA500 IP phone? Now's the time to junk 'em

~ 8 Aug 2024 ~

Computer Crash Reports Are an Untapped Hacker Goldmine

Delta: CrowdStrike's offer to help in Falcon meltdown was too little, too late

Tricky Web Timing Attacks Are Getting Easier to Useand Abuse

US 'laptop farm' man accused of outsourcing his IT jobs to North Korea to fund weapons programs

Microsofts AI Can Be Turned Into an Automated Phishing Machine

Chained for attack: OpenVPN vulnerabilities discovered leading to RCE and LPE

University Professors Targeted by North Korean Cyber Espionage Group

USPS Text Scammers Duped His Wife, So He Hacked Their Operation

Black Hat USA 2024: How cyber insurance is shaping cybersecurity strategies

Using 1Password on Mac? Patch up if you dont want your Vaults raided

0.0.0.0 Day: 18-Year-Old Browser Vulnerability Impacts MacOS and Linux Devices

US elections have never been more secure, says CISA chief