Port 22

~ 2 Aug 2024 ~

Japan mandates app to ensure national ID cards aren't forged

India contemplates compulsory dynamic 2FA for digital payments

10 Steps To Implement A Zero Trust Architecture

US sends cybercriminals back to Russia in prisoner swap that freed WSJ journo, others

U.S. Trades Cybercriminals to Russia in Prisoner Swap

U.S. Trades 5 Cybercriminals to Russia in Prisoner Swap

~ 1 Aug 2024 ~

Too late now for canary updates, says pension fund suing CrowdStrike

FBI, CISA remind US voters that DDoS attacks can't touch election systems

How to counter adversarial AI

He Was an FBI Informantand Inspired a Generation of Violent Extremists

Over 1 Million Domains at Risk of 'Sitting Ducks' Domain Hijacking Technique

Hackers Distributing Malicious Python Packages via Popular Developer Q&A Platform

New Android Banking Trojan BingoMod Steals Money, Wipes Devices

Mozilla follows Google in losing trust in Entrust's TLS certificates

Vonets WiFi Bridges

Rockwell Automation Logix Controllers

Johnson Controls exacqVision Web Service

Johnson Controls exacqVision Web Service

Johnson Controls exacqVision Web Service

Johnson Controls exacqVision Web Service

Johnson Controls exacqVision Server Web Service

Johnson Controls exacqVision Client and exacqVision Server

AVTECH IP Camera

Obfuscation: There Are Two Sides To Everything

Education in Secure Software Development

A $500 Open-Source Tool Lets Anyone Hack Computer Chips With Lasers

How professional ransomware variants boost cybercrime groups

Google Chrome Adds App-Bound Encryption to Protect Cookies from Malware

Facebook Ads Lead to Fake Websites Stealing Credit Card Information

Germany names China as source of attack on government geospatial agency

~ 31 Jul 2024 ~

Ransomware infection cuts off blood supply to 250+ hospitals

More than 83K certs from nearly 7K DigiCert customers must be swapped out now

Russia takes aim at Sitting Ducks domains, bags 30,000+

Citizen Lab submission to the United Nations Special Rapporteur on counter-terrorism and human rights: Impacts of biometric data collection measures on civil society in the Tibet Autonomous region (TAR) and Qinghai

Chrome adopts app-bound encryption to stymie cookie-stealing malware

Nearly 7% of Internet Traffic Is Malicious

Embedding AI security from the get go

Five months after takedown, LockBit is a shadow of its former self

DigiCert to Revoke 83,000+ SSL Certificates Due to Domain Validation Oversight

North Korea-Linked Malware Targets Developers on Windows, Linux, and macOS

'Error' in Microsoft's DDoS defenses amplified 8-hour Azure outage

Dont Let Your Domain Name Become a Sitting Duck

Chinese Hackers Target Japanese Firms with LODEINFO and NOOPDOOR Malware

How To Get the Most From Your Security Teams Email Alert Budget

Cybercriminals Deploy 100K+ Malware Android Apps to Steal OTP Codes

Can ChatGPT-4o Be Trusted With Your Private Data?

Cyber Espionage Group XDSpy Targets Companies in Russia and Moldova

The cyberthreat that drives businesses towards cyber risk insurance

UK Electoral Commission slapped for basic cybersecurity fails

Meta Settles for $1.4 Billion with Texas Over Illegal Biometric Data Collection

DigiCert gives unlucky folks 24 hours to replace doomed certificates after code blunder

Take Me to the Cyber Arcade! Level Up Your Cyber Skills with Core NetWars Version 10: A Cutting-Edge Retro Arcade and AI Adventure

A Visual Summary of SANS Security Awareness: Managing Human Risk Summit 2024

A Visual Summary of SANS Security Awareness: Managing Human Risk Summit 2024

A Visual Summary of SANS Security Awareness: Managing Human Risk Summit 2024

~ 30 Jul 2024 ~

Delta Air Lines dials up Microsoft's legal nemesis over CrowdStrike losses

New Microsoft whitepaper shares how to prepare your data for secure AI adoption

'LockBit of phishing' EvilProxy used in more than a million attacks every month

A Senate Bill Would Radically Improve Voting Machine Security

New Mandrake Spyware Found in Google Play Store Apps After Two Years

The Power and Peril of RMM Tools

Ransomware gangs are loving this dumb but deadly make-me-admin ESXi vulnerability

Providing Security Updates to Automobile Software

Cybercriminals Target Polish Businesses with Agent Tesla and Formbook Malware

Cyber Threat Intelligence: Illuminating the Deep, Dark Cybercriminal Underground

Phishing targeting Polish SMBs continues via ModiLoader

New SideWinder Cyber Attacks Target Maritime Facilities in Multiple Countries

OneDrive Phishing Scam Tricks Users into Running Malicious PowerShell Script

Proofpoint phishing palaver plagues millions with 'perfectly spoofed' emails from IBM, Nike, Disney, others

VMware ESXi Flaw Exploited by Ransomware Groups for Admin Access

Malaysia is working on an internet 'kill switch', says minister

~ 29 Jul 2024 ~

Meta's AI safety system defeated by the space bar

US border cops really must get a warrant in NY before searching phones, devices

Critical Flaw in Acronis Cyber Infrastructure Exploited in the Wild

Ransomware operators exploit ESXi hypervisor vulnerability for mass encryption

Intruders at HealthEquity rifled through storage, stole 4.3M people's data

Proofpoint Email Routing Flaw Exploited to Send Millions of Spoofed Phishing Emails

Saboteurs Cut Internet Cables in Latest Disruption During Paris Olympics

Google apologizes for breaking password manager for millions of Windows users with iffy Chrome update

How Infostealers Pillaged the Worlds Passwords

New Research in Detecting AI-Generated Videos

How Searchable Encryption Changes the Data Security Game

Mandrake spyware sneaks onto Google Play again, flying under the radar for two years

Beware of fake AI tools masking very real malware threats

'Stargazer Goblin' Creates 3,000 Fake GitHub Accounts for Malware Spread

Post-CrowdStrike, Microsoft to discourage use of kernel drivers by security tools

Microsoft admits 8.5 million CrowdStruck machines estimate was lowballed

China ponders creating a national 'cyberspace ID'

Gh0st RAT Trojan Targets Chinese Windows Users via Fake Chrome Site

Secure Boot useless on hundreds of PCs from major vendors after key leak

~ 27 Jul 2024 ~

Windows Security best practices for integrating and managing security tools

Stop Xs Grok AI From Training on Your Tweets

French Authorities Launch Operation to Remove PlugX Malware from Infected Systems

Malicious PyPI Package Targets macOS to Steal Google Cloud Credentials

~ 26 Jul 2024 ~

Crooks Bypassed Googles Email Verification to Create Workspace Accounts, Access 3rd-Party Services

Friday Squid Blogging: Sunscreen from Squid Pigments

CrowdStrike meets Murphy's Law: Anything that can go wrong will

Compromising the Secure Boot Process

Progress discloses second critical flaw in Telerik Report Server in as many months

This AI-Powered Cybercrime Service Bundles Phishing Kits with Malicious Android Apps