Port 22

~ 5 Apr 2024 ~

Hotel check-in terminal bug spews out access codes for guest rooms

The devil is in the fine print Week in security with Tony Anscombe

CISO Perspectives on Complying with Cybersecurity Regulations

Maybe the Phone System Surveillance Vulnerabilities Will Be Fixed

From PDFs to Payload: Bogus Adobe Acrobat Reader Installers Distribute Byakugan Malware

New Wave of JSOutProx Malware Targeting Financial Firms in APAC and MENA

Researchers Identify Multiple China Hacker Groups Exploiting Ivanti Security Flaws

Academics probe Apple's privacy settings and get lost and confused

World's second-largest eyeglass lens-maker blinded by infosec incident

~ 4 Apr 2024 ~

Feds probe massive alleged classified US govt data theft and leak

Explore Microsofts AI innovations at RSA Conference 2024

Vietnam-Based Hackers Steal Financial Data Across Asia with Malware

New Phishing Campaign Targets Oil & Gas with Evolved Data-Stealing Malware

Ivanti commits to secure-by-design overhaul after vulnerability nightmare

Fake Lawsuit Threat Exposes Privnote Phishing Sites

Considerations for Operational Technology Cybersecurity

New HTTP/2 Vulnerability Exposes Web Servers to DoS Attacks

Surveillance by the New Microsoft Outlook App

Ransomware gang <em>did</em> steal residents' confidential data, UK city council admits

A Vigilante Hacker Took Down North Koreas Internet. Now Hes Taking Off His Mask

When AI attacks

Ivanti Rushes Patches for 4 New Flaw in Connect Secure and Policy Secure

~ 3 Apr 2024 ~

Nearly 1M medical records feared stolen from City of Hope cancer centers

Omni Hotels IT systems down since Friday, hitting bookings, payments, door locks

Google Warns: Android Zero-Day Flaws in Pixel Phones Exploited by Forensic Companies

Get end-to-end protection with Microsofts unified security operations platform, now in public preview

U.S. Cyber Safety Board Slams Microsoft Over Breach by China-Based Hackers

The Mystery of Jia Tan, the XZ Backdoor Mastermind

The Manipulaters Improve Phishing, Still Fail at Opsec

Google Chrome Beta Tests New DBSC Protection Against Cookie-Stealing Attacks

Security pioneer Ross Anderson dies at 67

Google bakes new cookie strategy that will leave crooks with a bad taste

Attack Surface Management vs. Vulnerability Management

Class-Action Lawsuit against Googles Incognito Mode

Mispadu Trojan Targets Europe, Thousands of Credentials Compromised

How often should you change your passwords?

Meet clickjacking's slicker cousin, 'gesture jacking,' aka 'cross window forgery'

Critical Security Flaw Found in Popular LayerSlider WordPress Plugin

Microsoft slammed for lax security that led to Exchange Online attack

Microsoft slammed for lax security that led to China's cyber-raid on Exchange Online

4 Trends That Will Define the CISO's Role in 2024

~ 2 Apr 2024 ~

Feds finally decide to do something about years-old SS7 spy holes in phone networks

Citizen Lab submission to the Congressional-Executive Commission on China about the State of Human Rights in China

xz Utils Backdoor

OWASP server blunder exposes decade of resumes

Declassified NSA Newsletters

Pandabuy admits to data breach of 1.3 million unique records

Microsoft warns deepfake election subversion is disturbingly easy

Rubrik files to go public following alliance with Microsoft

Malicious Code in XZ Utils for Linux Systems Enables Remote Code Execution

Microsoft Priva announces new solutions to help modernize your privacy program

Polish officials may face criminal charges in Pegasus spyware probe

Harnessing the Power of CTEM for Cloud Security

INC Ransom claims to be behind 'cyber incident' at UK city council

China-linked Hackers Deploy New 'UNAPIMON' Malware for Stealthy Operations

Malware hiding in pictures? More likely than you think

Happy 20th birthday Gmail, you're mostly grown up now fix the spam

The XZ Backdoor: Everything You Need to Know

Apple's GoFetch silicon security fail was down to an obsession with speed

Google to Delete Billions of Browsing Records in 'Incognito Mode' Privacy Lawsuit Settlement

Massive Phishing Campaign Strikes Latin America: Venom RAT Targeting Multiple Sectors

A Visual Summary of SANS New2Cyber Summit 2024

Six banks share customer info to help Singapore fight money laundering

~ 1 Apr 2024 ~

US House of Reps tells staff: No Microsoft Copilot for you!

The Incognito Mode Myth Has Fully Unraveled