Port 22

~ 23 Feb 2024 ~

Tips on meeting complex cloud security challenges

PSYOP campaigns targeting Ukraine Week in security with Tony Anscombe

Microsoft Releases PyRIT - A Red Teaming Tool for Generative AI

How to Use Tines's SOC Automation Capability Matrix

X protests forced suspension of accounts on orders of India's government

Researchers Detail Apple's Recent Zero-Click Shortcuts Vulnerability

FTC Slams Avast with $16.5 Million Fine for Selling Users' Browsing Data

Here Are the Secret Locations of ShotSpotter Gunfire Sensors

Avast shells out $17M to shoo away claims it peddled people's personal data

~ 22 Feb 2024 ~

Cyberattack downs pharmacies across America

Leak Shows Alarm in Congress Over a Russian Threat Is a Real Anomaly

Authorities dismantled LockBit before it could unleash revamped variant

New Image/Video Prompt Injection Attacks

Announcing Microsofts open automation framework to red team generative AI Systems

Apple Unveils PQ3 Protocol - Post-Quantum Encryption for iMessage

Ukrainian police arrest father and son in suspected LockBit affiliate double act

New Leak Shows Business Side of Chinas APT Menace

Delta Electronics CNCSoft-B DOPSoft

Cybercriminals Weaponizing Open-Source SSH-Snake Tool for Network Attacks

A New Age of Hacktivism

Russian Government Software Backdoored to Deploy Konni RAT Malware

Everything you need to know about IP grabbers

Giant leak reveals Chinese infosec vendor I-Soon is one of Beijing's cyber-attackers for hire

U.S. Offers $15 Million Bounty to Hunt Down LockBit Ransomware Leaders

~ 21 Feb 2024 ~

Biden asks Coast Guard to create an infosec port in a stormy sea of cyber threats

Apple promises to protect iMessage chats from quantum computers

Duo face 20 years in prison over counterfeit iPhone scam

Exploiting the latest max-severity ConnectWise bug is 'embarrassingly easy'

Get the most out of Microsoft Copilot for Security with good prompt engineering

New Wi-Fi Vulnerabilities Expose Android and Linux Devices to Hackers

LockBit leaks expose nearly 200 affiliates and bespoke data-stealing malware

Apple iOS 17.4: iMessage Gets Post-Quantum Encryption in New Update

Harness the power of security automation

Mustang Panda Targets Asia with Advanced PlugX Variant DOPLUGS

Details of a Phone Scam

Anne Neuberger, a Top White House Cyber Official, Is Staying Surprisingly Optimistic

6 Ways to Simplify SaaS Identity Governance

Cybersecurity for HealthcareDiagnosing the Threat Landscape and Prescribing Solutions for Recovery

A common goal for European cyber security

Orgs are having a major identity crisis while crims reap the rewards

New 'VietCredCare' Stealer Targeting Facebook Advertisers in Vietnam

Europe's data protection laws cut data storage by making information-wrangling pricier

Signal Introduces Usernames, Allowing Users to Keep Their Phone Numbers Private

Russian Hackers Target Ukraine with Disinformation and Credential-Harvesting Attacks

VMware Alert: Uninstall EAP Now - Critical Flaw Puts Active Directory at Risk

Operation Texonto: Information operation targeting Ukrainian speakers in the context of the war

China could be doing better at censorship, think tank finds

Singapore's monetary authority advises banks to get busy protecting against quantum decryption

What's New in FOR500: Windows Forensic Analysis

~ 20 Feb 2024 ~

Signal Finally Rolls Out Usernames, So You Can Keep Your Phone Number Private

Feds Seize LockBit Ransomware Websites, Offer Decryption Tools, Troll Affiliates

Navigating NIS2 requirements with Microsoft Security solutions

Cops turn LockBit ransomware gang's countdown timers against them

New Migo Malware Targeting Redis Servers for Cryptocurrency Mining

Wyze admits 13,000 users could have viewed strangers' camera feeds

LockBit Ransomware Operation Shut Down; Criminals Arrested; Decryption Keys Released

The Notorious Lockbit Ransomware Gang Has Been Disrupted by Law Enforcement

New Malicious PyPI Packages Caught Using Covert Side-Loading Tactics

Microsoft Is Spying on Users of Its AI Tools

Mitsubishi Electric Electrical Discharge Machines

Ethercat Zeek Plugin

Commend WS203VICM

Insider steals 79,000 email addresses at work to promote own business

SaaS Compliance through the NIST Cybersecurity Framework

New Report Reveals North Korean Hackers Targeting Defense Firms Worldwide

Learn How to Build an Incident Response Playbook Against Scattered Spider in Real-Time

Critical Flaws Found in ConnectWise ScreenConnect Software - Patch Now

Watching out for the fakes: How to spot online disinformation

WordPress Bricks Theme Under Active Attack: Critical Flaw Impacts 25,000+ Sites

Two days into the Digital Services Act, EU wields it to deepen TikTok probe

Iran and Hezbollah Hackers Launch Attacks to Influence Israel-Hamas Narrative

LockBit Ransomware's Darknet Domains Seized in Global Law Enforcement Raid

Vietnam to collect biometrics - even DNA - for new ID cards

LockBit ransomware gang disrupted by global operation

Industrial Control Systems Cyber Threats and the Gulf Region ICS Blog Series: 2 of 3

A Tale of the Three *ishings: Part 1 What is Phishing?

~ 19 Feb 2024 ~

EU Court of Human Rights Rejects Encryption Backdoors

ALPHV gang claims it's the attacker that broke into Prudential Financial, LoanDepot

Meta Warns of 8 Spyware Firms Targeting iOS, Android, and Windows Devices

How to Achieve the Best Risk-Based Alerting (Bye-Bye SIEM)

Anatsa Android Trojan Bypasses Google Play Security, Expands Reach to New Countries

Safeguarding cyber-physical systems for a smart future

The Danger Lurking Just Below Ukraine's Surface

Russian-Linked Hackers Breach 80+ Organizations via Roundcube Flaws

Iranian Hackers Target Middle East Policy Experts with New BASICSTAR Backdoor

Feds post $15 million bounty for info on ALPHV/Blackcat ransomware crew

A Three-Slide Executive Presentation?

~ 18 Feb 2024 ~

Election security threats in 2024 range from AI to anthrax?

FBI's Most-Wanted Zeus and IcedID Malware Mastermind Pleads Guilty

~ 17 Feb 2024 ~

How to Not Get Scammed Out of $50,000

How to weaponize LLMs to auto-hijack websites

How Businesses Can Safeguard Their Communication Channels Against Hackers

Google Open Sources Magika: AI-Powered File Identification Tool

Google open sources file-identifying Magika AI for malware hunters and others

~ 16 Feb 2024 ~

SpaceX Launched Military Satellites Designed to Track Hypersonic Missiles

Friday Squid Blogging: Vegan Squid-Ink Pasta

Leak of Russian Threat Part of a Bid to Kill US Surveillance Reform, Sources Say

Zeus, IcedID malware kingpin faces 40 years in slammer

CISA Warning: Akira Ransomware Exploiting Cisco ASA/FTD Vulnerability

Cyber-insurance and vulnerability scanning Week in security with Tony Anscombe