Port 22

~ 17 Jul 2024 ~

Master Cloud Threat Detection with Cutting-Edge Techniques

Iran's MuddyWater phishes Israeli orgs with custom BugSleep backdoor

~ 16 Jul 2024 ~

Scattered Spider's fave new ransomware tools are RansomHub and Qilin

Vulnerabilities in VPNs: Paper presented at the Privacy Enhancing Technologies Symposium 2024

Microsoft Purview Data Governance will be generally available September 1, 2024

Dont be complacent on cybersecurity resilience

'Konfety' Ad Fraud Uses 250+ Google Play Decoy Apps to Hide Malicious Twins

Rockwell Automation Pavilion 8

Privacy group complains to UK regulator about Meta scraping user data to train AI

Threat Prevention & Detection in SaaS Environments - 101

Malicious npm Packages Found Using Image Files to Hide Backdoor Code

Small but mighty: Top 5 pocket-sized gadgets to boost your ethical hacking skills

Iranian Hackers Deploy New BugSleep Backdoor in Middle East Cyber Attacks

Void Banshee APT Exploits Microsoft MHTML Flaw to Spread Atlantida Stealer

Kaspersky Exits U.S. Market Following Commerce Department Ban

CISA Warns of Actively Exploited RCE Flaw in GeoServer GeoTools Software

FBI gains access to Trump rally shooter's phone

Lessons Learned on the Impact of Training on Hiring Success: A Mastercard Use Case

How to Become a SOC Analyst

Developing Successful Cybersecurity Maturity Models: A Microsoft Use Case

DarkGate, the evil Swiss Army knife of malware, sees boom after rival Qbot crushed

~ 15 Jul 2024 ~

Kaspersky culls staff, closes doors in US amid Biden's ban

Hackers Claim to Have Leaked 1.1 TB of Disney Slack Messages

US Senators Secretly Work to Block Safeguards Against Surveillance Abuse

Hacking Scientific Citations

GitHub Token Leak Exposes Python's Core Repositories to Potential Attacks

Researchers: Weak Security Defaults Enabled Squarespace Domains Hijacks

ZDI shames Microsoft for yet another coordinated vulnerability disclosure snafu

Infoseccers claim Squarespace migration linked to DNS hijackings at Web3 firms

Hello, is it me youre looking for? How scammers get your phone number

10,000 Victims a Day: Infostealer Garden of Low-Hanging Fruit

CRYSTALRAY Hackers Infect Over 1,500 Victims Using Network Mapping Tool

Singapore Banks to Phase Out OTPs for Online Logins Within 3 Months

New HardBit Ransomware 4.0 Uses Passphrase Protection to Evade Detection

Google reportedly in talks to buy infosec outfit Wiz for $23 billion

I spy another mSpy breach: Millions more stalkerware buyers exposed

Defending Against SCATTERED SPIDER and The Com with Cybercrime Intelligence

UK cyber-boss slams China's bug-hoarding laws

~ 14 Jul 2024 ~

AT&T Paid a Hacker $370,000 to Delete Stolen Phone Records

Upcoming Speaking Engagements

~ 13 Jul 2024 ~

Three words to send a chill down your spine: Snowflake. Intrusion. Alert

Spyware Users Exposed in Major Data Breach

AT&T Confirms Data Breach Affecting Nearly All Wireless Customers

~ 12 Jul 2024 ~

Car dealer software slinger CDK Global said to have paid $25M ransom after cyberattack

Friday Squid Blogging: 1994 Lair of Squid Game

White House urged to double check Microsoft isn't funneling AI to China via G42 deal

Hackers Steal Phone, SMS Records for Nearly All AT&T Customers

CISA broke into a US federal agency, and no one noticed for a full 5 months

The Sweeping Danger of the AT&T Phone Records Breach

DarkGate Malware Exploits Samba File Shares in Short-Lived Campaign

Identity: the new security perimeter

Call, text logs for 110M AT&T customers stolen from compromised cloud storage

Break-in at 'third-party cloud platform' leaked 110M customer records, says AT&T

Should ransomware payments be banned? Week in security with Tony Anscombe

Australian Defence Force Private and Husband Charged with Espionage for Russia

The NSA Has a Long-Lost Lecture by Adm. Grace Hopper

Critical Exim Mail Server Vulnerability Exposes Millions to Malicious Attachments

Ever Wonder How Hackers Really Steal Passwords? Discover Their Tactics in This Webinar

U.S. Seizes Domains Used by AI-Powered Russian Bot Farm for Disinformation

Singapore's banks to ditch texted one-time passwords

China's APT41 crew adds a stealthy malware loader and fresh backdoor to its toolbox

Addressing Cybersecurity Hiring Challenges: Insights from Leidos

'Gay furry hackers' say they've disbanded after raiding Project 2025's Heritage Foundation

~ 11 Jul 2024 ~

Pressure Grows in Congress to Treat Crypto Investigator Tigran Gambaryan, Jailed in Nigeria, as a Hostage

OpenSSH bug leaves RHEL 9 and the RHELatives vulnerable

Notorious Hacker Kingpin Tank Is Finally Going to Prison

Simplified Zero Trust security with the Microsoft Entra Suite and unified security operations platform, now generally available

Palo Alto Networks Patches Critical Flaw in Expedition Migration Tool

Apple Is Alerting iPhone Users of Spyware Attacks

60 New Malicious Packages Uncovered in NuGet Supply Chain Attack

Advance Auto Parts: 2.3M people's data accessed when crims broke into our Snowflake account

Chinese APT41 Upgrades Malware Arsenal with DodgeBox and MoonWalk

Siemens TIA Portal and SIMATIC STEP 7

Siemens Teamcenter Visualization and JT2Go

Siemens SINEMA Remote Connect Server

Siemens SINEMA Remote Connect Server

Siemens Simcenter Femap

Siemens SIMATIC and SIMIT

Siemens SCALANCE, RUGGEDCOM, SIPLUS, and SINEC

Siemens RUGGEDCOM APE 1808

Siemens RUGGEDCOM

Siemens Remote Connect Server

Siemens JT Open and PLM XML SDK

Rockwell Automation ThinManager ThinServer

Streamlined Security Solutions: PAM for Small to Medium-sized Businesses

Privacy expert put away for 9 years after 'grotesque' cyberstalking campaign

New Poco RAT Targets Spanish-Speaking Victims in Phishing Campaign

When spear phishing met mass phishing

You had a year to patch this Veeam flaw and now it's going to hurt

Japanese space agency spotted zero-day attacks while cleaning up attack on M365

PHP Vulnerability Exploited to Spread Malware and Launch DDoS Attacks

GitLab Patches Critical Flaw Allowing Unauthorized Pipeline Jobs

~ 10 Jul 2024 ~

Snowflake lets admins make MFA mandatory across all user accounts

The Stark Truth Behind the Resurgence of Russias Fin7

RADIUS Vulnerability

Malware that is 'not ransomware' wormed its way through Fujitsu Japan's systems

New Ransomware Group Exploiting Veeam Backup Software Vulnerability

Smash-and-Grab Extortion

Microsoft's July Update Patches 143 Flaws, Including Two Actively Exploited

True Protection or False Promise? The Ultimate ITDR Shortlisting Guide