Port 22

~ 29 Oct 2024 ~

Belgian cops cuff 2 suspected cybercrooks in Redline, Meta infostealer sting

The story behind the Health Infrastructure Security and Accountability Act

Admins better Spring into action over latest critical open source vuln

Risk reduction redefined: How compromise assessment helps strengthen cyberdefenses

Researchers Uncover Vulnerabilities in Open-Source AI and ML Models

Solar-Log Base 15

Siemens InterMesh Subscriber Devices

Delta Electronics InfraSuite Device Master

Law Enforcement Deanonymizes Tor Users

A Sherlock Holmes Approach to Cybersecurity: Eliminate the Impossible with Exposure Validation

Dutch Police Disrupt Major Info Stealers RedLine and MetaStealer in Operation Magnus

Merde! Macron's bodyguards reveal his location by sharing Strava data

Lumma/Amadey: fake CAPTCHAs want to know if youre human

Don't become a statistic: Tips to help keep your personal data off the dark web

Five Eyes nations tell tech startups to take infosec seriously. Again

U.S. Government Issues New TLP Guidance for Cross-Sector Threat Intelligence Sharing

Wanted. Top infosec pros willing to defend Britain on shabby salaries

New Research Reveals Spectre Vulnerability Persists in Latest AMD and Intel Processors

~ 28 Oct 2024 ~

JPMorgan Chase sues scammers following viral 'infinite money glitch'

Feds investigate China's Salt Typhoon amid campaign phone hacks

Chinese Hackers Use CloudScout Toolset to Steal Session Cookies from Cloud Services

Criminals Are Blowing up ATMs in Germany

Brazen crims selling stolen credit cards on Meta's Threads

Delta officially launches lawyers at $500M CrowdStrike problem

Russian Espionage Group Targets Ukrainian Military with Malware via Telegram

BeaverTail Malware Resurfaces in Malicious npm Packages Targeting Developers

Cybercriminals Pose a Greater Threat of Disruptive US Election Hacks Than Russia or China

Dutch cops pwn the Redline and Meta infostealers, leak 'VIP' aliases

THN Cybersecurity Recap: Top Threats, Tools and News (Oct 21 - Oct 27)

Cybercriminals Use Webflow to Deceive Users into Sharing Sensitive Login Credentials

Sailing the Seven Seas Securely from Port to Port OT Access Security for Ships and Cranes

Tony Fadell: Innovating to save our planet | Starmus highlights

CloudScout: Evasive Panda scouting cloud services

WordPress forces user conf organizers to share social media credentials, arousing suspicions

Researchers Uncover OS Downgrade Vulnerability Targeting Microsoft Windows Kernel

A Visual Summary of SANS HackFest Hollywood Summit 2024

~ 27 Oct 2024 ~

Senator accuses sloppy domain registrars of aiding Russian disinfo campaigns

~ 26 Oct 2024 ~

Notorious Hacker Group TeamTNT Launches New Cloud Attacks for Crypto Mining

Four REvil Ransomware Members Sentenced in Rare Russian Cybercrime Convictions

Worker surveillance must comply with credit reporting rules

CERT-UA Identifies Malicious RDP Files in Latest Attack on Ukrainian Entities

~ 25 Oct 2024 ~

Chinese Hackers Target Trump Campaign via Verizon Breach

Friday Squid Blogging: Giant Squid Found on Spanish Beach

Just how private is Apple's Private Cloud Compute? You can test it to find out

Watermark for LLM-Generated Text

Researchers Discover Command Injection Flaw in Wi-Fi Alliance's Test Suite

Apple Opens PCC Source Code for Researchers to Identify Bugs in Cloud AI Security

Eliminating AI Deepfake Threats: Is Your Identity Security AI-Proof?

SEC Charges 4 Companies Over Misleading SolarWinds Cyberattack Disclosures

Irish Watchdog Imposes Record 310 Million Fine on LinkedIn for GDPR Violations

Putin's pro-Trump trolls accuse Harris of poaching rhinos

~ 24 Oct 2024 ~

AWS Cloud Development Kit flaw exposed accounts to full takeover

Emergency patch: Cisco fixes bug under exploit in brute-force attacks

New Qilin.B Ransomware Variant Emerges with Improved Encryption and Evasion Tactics

AWS Cloud Development Kit Vulnerability Exposes Users to Potential Account Takeover Risks

Cisco Issues Urgent Fix for ASA and FTD Software Vulnerability Under Active Attack

VIMESA VHF/FM Transmitter Blue Plus

iniNet Solutions SpiderControl SCADA PC HMI Editor

Deep Sea Electronics DSE855

Bitwarden's FOSS halo slips as new SDK requirement locks down freedoms

Why Phishing-Resistant MFA Is No Longer Optional: The Hidden Risks of Legacy MFA

Ransomware's ripple effect felt across ERs as patient care suffers

Lazarus Group Exploits Google Chrome Vulnerability to Control Infected Devices

Meet ZachXBT, the Masked Vigilante Tracking Down Billions in Crypto Scams and Thefts

ESET Research Podcast: CosmicBeetle

Voice-enabled AI agents can automate everything, even your phone scams

Fortinet Warns of Critical Vulnerability in FortiManager Under Active Exploitation

China's top messaging app WeChat banned from Hong Kong government computers

Anthropic's latest Claude model can interact with computers what could go wrong?

Perfctl malware strikes again as crypto-crooks target Docker Remote API servers

Samsung phone users under attack, Google warns

~ 23 Oct 2024 ~

Penn State pays DoJ $1.25M to settle cybersecurity compliance case

Warning! FortiManager critical vulnerability under active attack

'Satanic' data thief claims to have slipped into 350M Hot Topic shoppers info

Microsoft SharePoint RCE flaw exploits in the wild you've had 3 months to patch

Are Automatic License Plate Scanners Constitutional?

New Grandoreiro Banking Malware Variants Emerge with Advanced Tactics to Evade Detection

Microsoft Warns Foreign Disinformation Is Hitting the US Election From All Directions

Nigeria Drops Charges Against Tigran Gambaryan, Jailed Binance Exec and Former IRS Agent

Permiso State of Identity Security 2024: A Shake-up in Identity Security Is Looming Large

CISA Warns of Active Exploitation of Microsoft SharePoint Vulnerability (CVE-2024-38094)

The Global Surveillance Free-for-All in Mobile Ad Data

The Crypto Game of Lazarus APT: Investors vs. Zero-days

Researchers Reveal 'Deceptive Delight' Method to Jailbreak AI Models

Think Youre Secure? 49% of Enterprises Underestimate SaaS Risks

Ransomware Gangs Use LockBit's Fame to Intimidate Victims in Latest Attacks

Embargo ransomware: RocknRust

Millions of Android and iOS users at risk from hardcoded creds in popular apps

~ 22 Oct 2024 ~

US lawmakers push DOJ to prosecute tax prep firms for leaking taxpayer data to big tech

Grandoreiro, the global trojan with grandiose ambitions

Exposed United Nations Database Left Sensitive Information Accessible Online

TSMC blows whistle on potential sanctions-busting shenanigans from Huawei

Gophish Framework Used in Phishing Campaigns to Deploy Remote Access Trojans

VMware fixes critical RCE, make-me-root bugs in vCenter -for the second time

Tech firms to pay millions in SEC penalties for misleading SolarWinds disclosures

Microsoft Threat Intelligence healthcare ransomware report highlights need for collective industry action

Akira ransomware is encrypting victims again following pure extortion fling

The Shitposting Cartoon Dogs Sending Trucks, Drones, and Weapons to Ukraines Front Lines

Security Flaw in Styra's OPA Exposes NTLM Hashes to Remote Attackers

Cybercriminals Exploiting Docker API Servers for SRBMiner Crypto Mining Attacks