Port 22

~ 16 Feb 2024 ~

RustDoor macOS Backdoor Targets Cryptocurrency Firms with Fake Job Offers

Cutting kids off from the dark web the solution can only ever be social

Why We Must Democratize Cybersecurity

Malicious 'SNS Sender' Script Abuses AWS for Bulk Smishing Attacks

U.S. State Government Network Breached via Former Employee's Account

U.S. Government Disrupts Russian-Linked Botnet Engaged in Cyber Espionage

Quest Diagnostics pays $5M after mixing patient medical data with hazardous waste

~ 15 Feb 2024 ~

Elon Musks X Gave Check Marks to Terrorist Group Leaders, Report Says

Feds dismantle Russian GRU botnet built on 1,000-plus home, small biz routers

Pentagon launches nuke-spotting satellites amid Russian space bomb rumors

Mitigating AI security risks

All eyes on AI | Unlocked 403: A cybersecurity podcast

Zoom stomps critical privilege escalation bug plus 6 other flaws

Russian Turla Hackers Target Polish NGOs with New TinyTurla-NG Backdoor

Ivanti Pulse Secure Found Using 11-Year-Old Linux Version and Outdated Libraries

Cybercriminals are stealing iOS users' face scans to break into mobile banking accounts

On the Insecurity of Software Bloat

Siemens Unicam FX

Siemens Tecnomatix Plant Simulation

Siemens SINEC NMS

Siemens Simcenter Femap

Siemens SIMATIC WinCC, OpenPCS

Siemens SIMATIC RTLS Gateways

Siemens SCALANCE W1750D

Siemens SCALANCE SC-600 Family

Siemens Parasolid

Siemens CP343-1 Devices

How Nation-State Actors Target Your Business: New Research Exposes Major SaaS Vulnerabilities

Chinese Hackers Using Deepfakes in Advanced Mobile Banking Malware Attacks

Miscreants turn to ad tech to measure malware metrics

European Court of Human Rights declares backdoored encryption is illegal

Critical Exchange Server Flaw (CVE-2024-21410) Under Active Exploitation

North Korea running malware-laden gambling websites as-a-service

OpenAI shuts down China, Russia, Iran, N Korea accounts caught doing naughty things

~ 14 Feb 2024 ~

China's Volt Typhoon spies broke into emergency network of 'large' US city

US Air Force's new cyber, IT skill recruitment plan: Bring back warrant officer ranks

Prudential Financial finds cybercrims lurking inside its IT systems

Upcoming Speaking Engagements

U.S. Internet Leaked Years of Internal, Customer Emails

Section 702 Surveillance Fight Pits the White House Opposite Reproductive Rights

Romanian hospital ransomware crisis attributed to third-party breach

Microsoft, OpenAI Warn of Nation-State Hackers Weaponizing AI for Cyber Attacks

Ubuntu 'command-not-found' Tool Could Trick Users into Installing Rogue Packages

Southern Water cyberattack expected to hit hundreds of thousands of customers

Improving the Cryptanalysis of Lattice-Based Public-Key Algorithms

Staying ahead of threat actors in the age of AI

Cyber Signals: Navigating cyberthreats and strengthening defenses in the era of AI

Cybersecurity Tactics FinServ Institutions Can Bank On in 2024

Bumblebee Malware Returns with New Tricks, Targeting U.S. Businesses

Bumblebee malware wakes from hibernation, forgets what year it is, attacks with macros

The art of digital sleuthing: How digital forensics unlocks the truth

AI Girlfriends Are a Privacy Nightmare

DarkMe Malware Targets Traders Using Microsoft SmartScreen Zero-Day Vulnerability

Microsoft Rolls Out Patches for 73 Flaws, Including 2 Windows Zero-Days

Australian Tax Office probed 150 staff over social media refund scam

Crims found and exploited these two Microsoft bugs before Redmond fixed 'em

~ 13 Feb 2024 ~

Just one bad DNS packet can bring down a public DNSSEC server

Fat Patch Tuesday, February 2024 Edition

A Hackers Mind is Out in Paperback

QNAP vulnerability disclosure ends up an utter shambles

ALPHV blackmails Canadian pipeline and claims it stole 190GB of vital info

Glupteba Botnet Evades Detection with Undocumented UEFI Bootkit

Crooks hook hundreds of exec accounts after phishing in Azure C-suite pond

PikaBot Resurfaces with Streamlined Code and Deceptive Tactics

Molly White Reviews Blockchain Book

Mitsubishi Electric MELSEC iQ-R Series Safety CPU

Midnight Blizzard and Cloudflare-Atlassian Cybersecurity Incidents: What to Know

Deepfakes in the global election year of 2024: A weapon of mass deception?

Meta says risk of account theft after phone number recycling isn't its problem to solve

Ivanti Vulnerability Exploited to Install 'DSLog' Backdoor on 670+ IT Infrastructures

Infosys subsidiary named as source of Bank of America data leak

Alert: CISA Warns of Active 'Roundcube' Email Attacks - Patch Now

Korean eggheads crack Rhysida ransomware and release free decryptor tool

~ 12 Feb 2024 ~

A Backroom Deal Looms Over Section 702 Surveillance Fight

Dutch insurers demand nudes from breast cancer patients despite ban

FCC gets tough: Telcos must now tell you when your personal info is stolen

Jet engine dealer to major airlines discloses 'unauthorized activity'

On Passkey Usability

Satellite Images Point to Indiscriminate Israeli Attacks on Gazas Health Care Facilities

Rhysida Ransomware Cracked, Free Decryption Tool Released

The Hidden Injustice of Cyberattacks

Europe's largest caravan club admits wide array of personal data potentially accessed

4 Ways Hackers use Social Engineering to Bypass MFA

2054, Part VI: Standoff at Arlington

CISA and OpenSSF Release Framework for Package Repository Security

Why Are Compromised Identities the Nightmare to IR Speed and Efficiency?

Mon Dieu! Nearly half the French population have data nabbed in massive breach

Microsoft Introduces Linux-Like 'sudo' Command to Windows 11

U.S. Offers $10 Million Bounty for Info Leading to Arrest of Hive Ransomware Leaders

Solving the Human Risk Problem: Engaging and Securing Your Workforce

~ 11 Feb 2024 ~

A Celebrated Cryptography-Breaking Algorithm Just Got an Upgrade

U.S. DoJ Dismantles Warzone RAT Infrastructure, Arrests Key Operators

~ 10 Feb 2024 ~

How 3 Million Hacked Toothbrushes Became a Cyber Urban Legend

Alert: New Stealthy "RustDoor" Backdoor Targeting Apple macOS Devices

Meet VexTrio, a network of 70K hijacked websites crooks use to sling malware, fraud

~ 9 Feb 2024 ~

Friday Squid Blogging: A Penguin Named Squid

Ivanti discloses fifth vulnerability, doesn't credit researchers who found it

No, Toothbrushes Were Not Used in a Massive DDoS Attack

Raspberry Robin Malware Upgrades with Discord Spread and New Exploits

Juniper Support Portal Exposed Customer Device Info