Port 22

~ 11 Apr 2024 ~

Siemens Telecontrol Server Basic

Siemens SINEC NMS

Siemens SIMATIC WinCC

Siemens SIMATIC S7-1500

TA547 Phishing Attack Hits German Firms with Rhadamanthys Stealer

Python's PyPI Reveals Its Secrets

Python's PyPI Reveals Its Secrets

Backdoor in XZ Utils That Almost Happened

Global taxi software vendor exposes details of nearly 300K across UK and Ireland

Beyond fun and games: Exploring privacy risks in childrens apps

Apple Expands Spyware Alert System to Warn Users of Mercenary Attacks

Fortinet Rolls Out Critical Security Patches for FortiClientLinux Vulnerability

~ 10 Apr 2024 ~

It's 2024 and Intel silicon is still haunted by data-spilling Spectre

Trump Loyalists Kill Vote on US Wiretap Program

Twitters Clumsy Pivot to X.com Is a Gift to Phishers

'eXotic Visit' Spyware Campaign Targets Android Users in India and Pakistan

Rust rustles up fix for 10/10 critical command injection bug on Windows

Raspberry Robin Returns: New Malware Campaign Spreading Through WSF Files

Beware: GitHub's Fake Popularity Scam Tricking Developers into Downloading Malware

How to Stop Your Data From Being Used to Train AI

In Memoriam: Ross Anderson, 1956-2024

Hands-on Review: Cynomi AI-powered vCISO Platform

X fixes URL blunder that could enable convincing social media phishing campaigns

eXotic Visit campaign: Tracing the footprints of Virtual Invaders

Researchers Uncover First Native Spectre v2 Exploit Against Linux Kernel

Webinar: Learn How to Stop Hackers from Exploiting Hidden Identity Weaknesses

Turning the tide on third-party risk

Chrome Enterprise Premium promises extra security for a fee

Microsoft Fixes 149 Flaws in Huge April Patch Release, Zero-Days Included

Critical 'BatBadBut' Rust Vulnerability Exposes Windows Systems to Attacks

Microsoft squashes SmartScreen security bypass bug exploited in the wild

~ 9 Apr 2024 ~

Aprils Patch Tuesday Brings Record Number of Fixes

Section 702: The Future of the Biggest US Spy Program Hangs in the Balance

Got an unpatched LG 'smart' television? It could be watching you back

10-Year-Old 'RUBYCARP' Romanian Hacker Group Surfaces with Botnet

US Cyber Safety Review Board on the 2023 Microsoft Exchange Hack

Hackers Targeting Human Rights Activists in Morocco and Western Sahara

Researchers Discover LG Smart TV Vulnerabilities Allowing Root Access

UK businesses shockingly unaware of how to handle security threats

SUBNET PowerSYSTEM Server and Substation Server

CL0P's Ransomware Rampage - Security Measures for 2024

Attackers Using Obfuscation Tools to Deliver Multi-Stage Malware via Invoice Phishing

Critical Flaws Leave 92,000 D-Link NAS Devices Vulnerable to Malware Attacks

The Quest to Summit | SANS ICS Security Summit 2024

~ 8 Apr 2024 ~

US insurers use drone photos to deny home insurance policies

Home Depot confirms worker data leak after miscreant dumps info online

Puppies, kittens, data at risk after 'cyber incident' at veterinary giant

Google Chrome Adds V8 Sandbox - A New Defense Against Browser Attacks

Change Healthcare faces second ransomware dilemma weeks after ALPHV attack

AI Scam Calls: How to Protect Yourself, How to Detect

Watch Out for 'Latrodectus' - This Malware Could Be In Your Inbox

The Drop in Ransomware Attacks in 2024 and What it Means

Security Vulnerability of HTML Emails

7 reasons why cybercriminals want your personal data

Cybercriminals Targeting Latin America with Sophisticated Phishing Scheme

Head of Israeli cyber spy unit exposed ... by his own privacy mistake

Google Sues App Developers Over Fake Crypto Investment App Scam

~ 7 Apr 2024 ~

A Breakthrough Online Privacy Proposal Hits Congress

~ 6 Apr 2024 ~

What can be done to protect open source devs from next xz backdoor drama?

Best Privacy Browsers (2024): Brave, Safari, Ghostery, Firefox, DuckDuckGo

Hackers Exploit Magento Bug to Steal Payment Data from E-commerce Websites

Identity Thief Lived as a Different Man for 33 Years

~ 5 Apr 2024 ~

Friday Squid Blogging: SqUID Bots

US government excoriates Microsoft for 'avoidable errors' but keeps paying for its products

AI-as-a-Service Providers Vulnerable to PrivEsc and Cross-Tenant Attacks

Hotel check-in terminal bug spews out access codes for guest rooms

The devil is in the fine print Week in security with Tony Anscombe

CISO Perspectives on Complying with Cybersecurity Regulations

Maybe the Phone System Surveillance Vulnerabilities Will Be Fixed

From PDFs to Payload: Bogus Adobe Acrobat Reader Installers Distribute Byakugan Malware

New Wave of JSOutProx Malware Targeting Financial Firms in APAC and MENA

Researchers Identify Multiple China Hacker Groups Exploiting Ivanti Security Flaws

Academics probe Apple's privacy settings and get lost and confused

World's second-largest eyeglass lens-maker blinded by infosec incident

~ 4 Apr 2024 ~

Feds probe massive alleged classified US govt data theft and leak

Explore Microsofts AI innovations at RSA Conference 2024

Vietnam-Based Hackers Steal Financial Data Across Asia with Malware

New Phishing Campaign Targets Oil & Gas with Evolved Data-Stealing Malware

Ivanti commits to secure-by-design overhaul after vulnerability nightmare

Fake Lawsuit Threat Exposes Privnote Phishing Sites

Schweitzer Engineering Laboratories SEL

Hitachi Energy Asset Suite 9

Considerations for Operational Technology Cybersecurity

New HTTP/2 Vulnerability Exposes Web Servers to DoS Attacks

Surveillance by the New Microsoft Outlook App

Ransomware gang <em>did</em> steal residents' confidential data, UK city council admits

A Vigilante Hacker Took Down North Koreas Internet. Now Hes Taking Off His Mask

When AI attacks

Ivanti Rushes Patches for 4 New Flaw in Connect Secure and Policy Secure

~ 3 Apr 2024 ~

Nearly 1M medical records feared stolen from City of Hope cancer centers

Omni Hotels IT systems down since Friday, hitting bookings, payments, door locks

Google Warns: Android Zero-Day Flaws in Pixel Phones Exploited by Forensic Companies

Get end-to-end protection with Microsofts unified security operations platform, now in public preview

U.S. Cyber Safety Board Slams Microsoft Over Breach by China-Based Hackers

The Mystery of Jia Tan, the XZ Backdoor Mastermind

The Manipulaters Improve Phishing, Still Fail at Opsec

Google Chrome Beta Tests New DBSC Protection Against Cookie-Stealing Attacks

Security pioneer Ross Anderson dies at 67

Google bakes new cookie strategy that will leave crooks with a bad taste

Attack Surface Management vs. Vulnerability Management