Port 22

~ 1 Mar 2024 ~

Five Eyes Agencies Warn of Active Exploitation of Ivanti Gateway Vulnerabilities

GitHub Rolls Out Default Secret Scanning Push Protection for Public Repositories

NTT boss takes early retirement to atone for data leak

GitHub struggles to keep up with automated malicious forks

The UKs GPS Tagging of Migrants Has Been Ruled Illegal

A Tale of the Three *ishings: Part 02 What is Smishing?

~ 29 Feb 2024 ~

US courts fielded over 130 requests for access to push notification metadata

Fulton County, Security Experts Call LockBits Bluff

White House goes to court, not Congress, to renew warrantless spy powers

Chinese 'connected' cars are a national security threat, says Biden

The Mysterious Case of the Missing Trump Trial Ransomware Leak

Here Are the Google and Microsoft Security Updates You Need Right Now

Ransomware gangs are paying attention to infostealers, so why aren't you?

New Silver SAML Attack Evades Golden SAML Defenses in Identity Systems

Meta's pay-or-consent model hides 'massive illegal data processing ops': lawsuit

Russia Attacked Ukraine's Power Grid at Least 66 Times to Freeze It Into Submission

How the Frontier Became the Slogan of Uncontrolled AI

Delta Electronics CNCSoft-B

GTPDOOR Linux Malware Targets Telecoms, Exploiting GPRS Roaming Networks

Lazarus Hackers Exploited Windows Kernel Flaw as Zero-Day in Recent Attacks

How to Prioritize Cybersecurity Spending: A Risk-Based Strategy for the Highest ROI

Blue Team toolkit: 6 open-source tools to assess and enhance corporate defenses

The White House Warns Cars Made in China Could Unleash Chaos on US Highways

New Backdoor Targeting European Officials Linked to Indian Diplomatic Events

Lazarus Exploits Typos to Sneak PyPI Malware into Dev Systems

A Pornhub Chatbot Stopped Millions From Searching for Child Abuse Videos

Chinese Hackers Exploiting Ivanti VPN Flaws to Deploy New Malware

President Biden Blocks Mass Transfer of Personal Data to High-Risk Nations

Chinese PC-maker Acemagic customized its own machines to get infected with malware

Australian spy chief fears sabotage of critical infrastructure

ALPHV/BlackCat claims responsibility for Change Healthcare attack

The CISO's Guide to AI: Embracing Innovation While Mitigating Risk

Google Chrome Platform Notification Analysis

Aviata Cloud Solo Flight Challenge

~ 28 Feb 2024 ~

Gone in 60 seconds: BEAST AI model attack needs just a minute of GPU time to breach LLM guardails

BEAST AI needs just a minute of GPU time to make an LLM fly off the rails

Biden Executive Order Bans Sale of US Data to China, Russia. Good Luck

Palo Alto investor sues over 28% share tumble

Calendar Meeting Links Used to Spread Mac Malware

Dictators Used Sandvine Tech to Censor the Internet. The US Finally Did Something About It

Iran-Linked UNC1549 Hackers Target Middle East Aerospace & Defense Sectors

FBI Warns U.S. Healthcare Sector of Targeted BlackCat Ransomware Attacks

A Cyber Insurance Backstop

Building Your Privacy-Compliant Customer Data Platform (CDP) with First-Party Data

Superusers Need Super Protection: How to Bridge Privileged Access Management and Identity Management

Vulnerabilities in business VPNs under the spotlight

Uncle Sam tells nosy nations to keep their hands off Americans' personal data

TimbreStealer Malware Spreading via Tax-themed Phishing Scam Targets IT Users

Cybersecurity Agencies Warn Ubiquiti EdgeRouter Users of APT28's MooBot Threat

That home router botnet the Feds took down? Moscow's probably going to try again

~ 27 Feb 2024 ~

Change Healthcare Ransomware Attack: BlackCat Hackers Quickly Returned After FBI Bust

Sandvine put on America's export no-fly list for flogging snoop-ware to Egypt

NIST updates Cybersecurity Framework after a decade of lessons

The UK Is GPS-Tagging Thousands of Migrants

An educational robot security research

WordPress LiteSpeed Plugin Vulnerability Puts 5 Million Sites at Risk

Open-Source Xeno RAT Trojan Emerges as a Potent Threat on GitHub

China Surveillance Company Hacked

Mitsubishi Electric Multiple Factory Automation Products

How the Pentagon Learned to Use Targeted Ads to Find its Targetsand Vladimir Putin

From Alert to Action: How to Speed Up Your SOC Investigations

Five Eyes Agencies Expose APT29's Evolving Cloud Attack Tactics

New Hugging Face Vulnerability Exposes AI Models to Supply Chain Attacks

Cybercrims: When we hit IT, they sometimes pay, but when we hit OT... jackpot

Broadcom builds a better SASE out of VMware VeloCloud and Symantec

WordPress Plugin Alert - Critical SQLi Vulnerability Threatens 200K+ Websites

China warns of fake digital currency wallets fleecing netizens

A Visual Summary of SANS OSINT Summit 2024

~ 26 Feb 2024 ~

Nevada sues to deny kids access to Meta's Messenger encryption

ALPHV/BlackCat responsible for Change Healthcare cyberattack

LockBit back from the dead - taunts cops and plans to leak Trump docs

Microsoft Copilot for Security: The great equalizer for government security

New IDAT Loader Attacks Using Steganography to Deploy Remcos RAT

Everything you need to know about NIS2

8,000+ Subdomains of Trusted Brands Hijacked for Massive Spam Operation

How a Right-Wing Controversy Could Sabotage US Election Security

Data watchdog tells off outsourcing giant for scanning staff biometrics despite 'power imbalance'

North Korean Hackers Targeting Developers with Malicious npm Packages

Apple Announces Post-Quantum Encryption Algorithms for iMessage

Fox News 'hacker' turns out to be journalist whose lawyers say was doing his job

10 things to avoid posting on social media and why

Three Tips to Protect Your Secrets from AI Accidents

Banking Trojans Target Latin America and Europe Through Google Cloud Run

The mobile malware threat landscape in 2023

LockBit Ransomware Group Resurfaces After Law Enforcement Takedown

FBIs LockBit Takedown Postponed a Ticking Time Bomb in Fulton County, Ga.

Industrial Control System Cyber Security and Europe

~ 25 Feb 2024 ~

Security is hard because it has to be right all the time? Yeah, like everything else

Authorities Claim LockBit Admin "LockBitSupp" Has Engaged with Law Enforcement

~ 24 Feb 2024 ~

A Vending Machine Error Revealed Secret Face Recognition Tech

A Mysterious Leak Exposed Chinese Hacking Secrets

Microsoft Expands Free Logging Capabilities for all U.S. Federal Agencies

~ 23 Feb 2024 ~

LockBit extorted billions of dollars from victims, fresh leaks suggest

Friday Squid Blogging: Illex Squid and Climate Change

U-Haul tells 67K customers that cyber-crooks drove away with their personal info

Dormant PyPI Package Compromised to Spread Nova Sentinel Malware

LockBit identity reveal a bigger letdown than Game of Thrones Season 8

AIs Hacking Websites

Tips on meeting complex cloud security challenges

PSYOP campaigns targeting Ukraine Week in security with Tony Anscombe