Port 22

~ 8 Mar 2024 ~

Font security 'still a Helvetica of a problem' says Australian graphics outfit Canva

Securing open source software: Whose job is it, anyway?

Top 25 Cybersecurity Resources for International Womens Day

Top 20 Cybersecurity Resources for International Womens Day

~ 7 Mar 2024 ~

We're not Meta support: State AGs tell Zuck to fix rampant account takeover problem

Chrome users get an alert when extensions are in danger of falling into wrong hands

Possible China link to Change Healthcare ransomware attack

Evolving Microsoft Security Development Lifecycle (SDL): How continuous SDL can help you build more secure software

JetBrains TeamCity under attack by ransomware thugs after disclosure mess

Hacked WordPress Sites Abusing Visitors' Browsers for Distributed Brute-Force Attacks

Chinese State Hackers Target Tibetans with Supply Chain, Watering Hole Attacks

Belgian ale legend Duvels brewery borked as ransomware halts production

How Public AI Can Strengthen Democracy

Chirp Systems Chirp Access

Human vs. Non-Human Identity in SaaS

Evasive Panda leverages Monlam Festival to target Tibetans

Ex-Google Engineer Arrested for Stealing AI Technology Secrets for China

Spam and phishing in 2023

New Python-Based Snake Info Stealer Spreading Through Facebook Messages

VMware urges emergency action to blunt hypervisor flaws

Heres something else AI can do: expose bad infosec to give cyber-crims a toehold in your organization

Watch Out for Spoofed Zoom, Skype, Google Meet Sites Delivering Malware

US lawmakers want ByteDance to divest TikTok or face a ban

Lawsuit claims gift card fraud is the gift that keeps on giving, to Google

Chinese chap charged with stealing Googles AI datacenter secrets

Prevent Cloud Incidents from Becoming Cloud Breaches

Industrial Control Systems Cyber Threats and the Gulf Region ICS Blog Series: 3 of 3

Enhancing Operational Resilience in OT

~ 6 Mar 2024 ~

FBI: Critical infrastructure menaced by spike in ransomware attacks

Apple's trademark tight lips extend to new iPhone, iPad zero-days

Enhancing protection: Updates on Microsofts Secure Future Initiative

Hackers Exploit Misconfigured YARN, Docker, Confluence, Redis Servers for Crypto Mining

Meta Abandons Hacking Victims, Draining Law Enforcement Resources, Officials Say

Exit Scam: BlackCat Ransomware Group Vanishes After $22 Million Payout

Capita says 2023 cyberattack costs a factor as it reports staggering 100M+ loss

Surveillance through Push Notifications

A New Way To Manage Your Web Exposure: The Reflectiz Product Explained

Top 10 scams targeting seniors and how to keep your money safe

How to Find and Fix Risky Sharing in Google Drive

Chip lobby group SEMI to EU: Export restrictions should only be used in self-defense

U.S. Cracks Down on Predatory Spyware Firm for Targeting Officials and Journalists

VMware Issues Security Patches for ESXi, Workstation, and Fusion Flaws

Alert: GhostSec and Stormous Launch Joint Ransomware Attacks in Over 15 Countries

New APT Group 'Lotus Bane' Behind Recent Attacks on Vietnam's Financial Entities

Urgent: Apple Issues Critical Updates for Actively Exploited Zero-Day Flaws

Japan orders local giants LINE and NAVER to disentangle their tech stacks

Uncle Sam intervenes as Change Healthcare ransomware fiasco creates mayhem

BlackCat Ransomware Group Implodes After Apparent $22M Payment by Change Healthcare

~ 5 Mar 2024 ~

Fidelity customers' financial info feared stolen in suspected ransomware attack

Fidelity customers' financial info feared stolen in suspected ransomware attack

Inside Registered Agents Inc., the Shadowy Firm Pushing the Limits of Business Privacy

US accuses Army vet cyber-Casanova of sharing Russia-Ukraine war secrets

Secure SaaS applications with Valence Security and Microsoft Security

IP address X-posure now a feature on Musk's social media platform

Hackers Exploit ConnectWise ScreenConnect Flaws to Deploy TODDLERSHARK Malware

Rapid7 throws JetBrains under the bus for 'uncoordinated vulnerability disclosure'

The Insecurity of Video Doorbells

Nice Linear eMerge E3-Series

What is Exposure Management and How Does it Differ from ASM?

Cybercriminals Using Novel DNS Hijacking Technique for Investment Scams

Over 225,000 Compromised ChatGPT Credentials Up for Sale on Dark Web Markets

Irresistible: Hooks, habits and why you cant put down your phone

Warning: Thread Hijacking Attack Targets IT Networks, Stealing NTLM Hashes

Spam crusade lands charity in hot water with data watchdog

Network tunneling with QEMU?

Critical JetBrains TeamCity On-Premises Flaws Could Lead to Server Takeovers

Cloudflare wants to put a firewall in front of your LLM

A Tale of the Three *ishings: Part 3 What is Vishing?

~ 4 Mar 2024 ~

American Express admits card data exposed and blames third party

Change Healthcare attack latest: ALPHV bags $22M in Bitcoin amid affiliate drama

Seoul accuses North Korea of stealing southern chipmakers' designs

Microsoft Secure: Learn expert AI strategy at our online event

German defense chat overheard by Russian eavesdroppers on Cisco's WebEx

Hackers Behind the Change Healthcare Ransomware Attack Just Received a $22 Million Payment

Defend against human-operated ransomware attacks with Microsoft Copilot for Security

Ransomware ban backers insist thugs must be cut off from payday

How Cybercriminals are Exploiting India's UPI for Money Laundering Operations

LLM Prompt Injection Worm

From 500 to 5000 Employees - Securing 3rd Party App-Usage in Mid-Market Companies

The federal bureau of trolling hits LockBit, but the joke's on us

Over 100 Malicious AI/ML Models Found on Hugging Face Platform

Phobos Ransomware Aggressively Targeting U.S. Critical Infrastructure

LockBit's contested claim of fresh ransom payment suggests it's been well hobbled

Ahead of Super Tuesday, US elections face existential and homegrown threats

~ 2 Mar 2024 ~

The Privacy Danger Lurking in Push Notifications

U.S. Court Orders NSO Group to Hand Over Pegasus Spyware Code to WhatsApp

U.S. Charges Iranian Hacker, Offers $10 Million Reward for Capture

~ 1 Mar 2024 ~

Friday Squid Blogging: New Extinct Species of Vampire Squid Discovered

Air National Guardsman Teixeira to admit he was Pentagon files leaker

Judge orders NSO to cough up Pegasus super-spyware source code

Iranian charged over attacks against US defense contractors, government agencies

In the vanguard of 21st century cyber threats

New Phishing Kit Leverages SMS, Voice Calls to Target Cryptocurrency Users

Cops visit school of 'wrong persons child,' mix up victims and suspects in epic data fail

NIST Cybersecurity Framework 2.0

Deceptive AI content and 2024 elections Week in security with Tony Anscombe

4 Instructive Postmortems on Data Downtime and Loss

New BIFROSE Linux Malware Variant Using Deceptive VMware Domain for Evasion

Keeping one step ahead of cyber security threats

Here Come the AI Worms