Port 22

~ 22 Oct 2024 ~

ICONICS and Mitsubishi Electric Products

No, The Chinese Have Not Broken Modern Encryption Systems with a Quantum Computer

A Comprehensive Guide to Finding Service Accounts in Active Directory

Bumblebee and Latrodectus Malware Return with Sophisticated Phishing Strategies

Malicious npm Packages Target Developers' Ethereum Wallets with SSH Backdoor

VMware Releases vCenter Server Update to Fix Critical RCE Vulnerability

Pixel perfect Ghostpulse malware loader hides inside PNG image files

CISA Adds ScienceLogic SL1 Vulnerability to Exploited Catalog After Active Zero-Day Attack

~ 21 Oct 2024 ~

Chinas Spamouflage cranks up trolling of US Senator Rubio as election day looms

Sophos to snatch Secureworks in $859M buyout: Why fight when you can just buy?

Misinformed about misinformation Gabrielle Lims piece for the Harvard Kennedy School Misinformation Review

The Citizen Lab at Regardless of Frontiers: First Amendment & Exchange of Ideas Across Borders

The billionaire behind Trump's 'unhackable' phone is on a mission to fight Tesla's FSD

ICE's $2 Million Contract With a Spyware Vendor Is Under White House Review

macOS HM Surf vuln might already be under exploit by major malware family

Chinese Nation-State Hackers APT41 Hit Gambling Sector for Financial Gain

Guide: The Ultimate Pentest Checklist for Full-Stack Security

THN Cybersecurity Recap: Top Threats, Tools and News (Oct 14 - Oct 20)

AI and the SEC Whistleblower Program

How a Trump Win Could Unleash Dangerous AI

Stealer here, stealer there, stealers everywhere!

US Government Says Relying on Chinese Lithium Batteries Is Too Risky

Google Voice scams: What are they and how do I avoid them?

Researchers Discover Severe Security Flaws in Major E2EE Cloud Storage Providers

Tesla, Intel, deny they're the foreign company China just accused of making maps that threaten national security

Internet Archive exposed again this time through Zendesk

~ 20 Oct 2024 ~

Open source LLM tool primed to sniff out Python zero-days

Hackers Exploit Roundcube Webmail XSS Vulnerability to Steal Login Credentials

~ 19 Oct 2024 ~

Google Chromes uBlock Origin Purge Has Begun

Acronym Overdose Navigating the Complex Data Security Landscape

Crypt Ghouls Targets Russian Firms with LockBit 3.0 and Babuk Ransomware Attacks

The Disinformation Warning Coming From the Edge of Europe

~ 18 Oct 2024 ~

Jetpack fixes 8-year-old flaw affecting millions of WordPress sites

Friday Squid Blogging: Squid Scarf

Justice Department Indicts Tech CEO for Falsifying Security Certifications

North Korean IT Workers in Western Firms Now Demanding Ransom for Stolen Data

Brazil Arrests USDoD, Hacker in FBI Infragard Breach

Alleged Bitcoin crook faces 5 years after SEC's X account pwned

Threat actors exploiting zero-days faster than ever Week in security with Tony Anscombe

The Ultimate DSPM Guide: Webinar on Building a Strong Data Security Posture

ESET denies it was compromised as Israeli orgs targeted with 'ESET-branded' wipers

U.S. and Allies Warn of Iranian Cyberattacks on Critical Infrastructure in Year-Long Campaign

Analysis of the Crypt Ghouls group: continuing the investigation into a series of attacks on Russia

Beware: Fake Google Meet Pages Deliver Infostealers in Ongoing ClickFix Campaign

What the US Armys 1959 Soldier of Tomorrow Got Right About the Future of Warfare

Microsoft Reveals macOS Vulnerability that Bypasses Privacy Controls in Safari Browser

Intel robustly refutes China's accusations it bakes in NSA backdoors

Intel lightly hits back at China's accusations it bakes in NSA backdoors

Biz hired, and fired, a fake North Korean IT worker then the ransom demands began

Uncle Sam puts $10M bounty on Russian troll farm Rybar

~ 17 Oct 2024 ~

Troubled US insurance giant hit by extortion after data leak

Russian RomCom Attacks Target Ukrainian Government with New SingleCamper RAT Variant

New macOS vulnerability, HM Surf, could lead to unauthorized data access

Sudanese Brothers Arrested in AnonSudan Takedown

Brazilian police claim they've cuffed serial cybercrook behind FBI and Airbus attacks

Researchers Uncover Cicada3301 Ransomware Operations and Its Affiliate Program

Mitsubishi Electric CNC Series

LCDS LAquis SCADA

Kieback&Peter DDC4000 Series

HMS Networks EWON FLEXY 202

Elvaco M-Bus Metering Gateway CMe3100

GPS Jamming Is Screwing With Norwegian Planes

This Prompt Can Make an AI Chatbot Identify and Extract Personal Details From Your Chats

SideWinder APT Strikes Middle East and Africa With Stealthy Multi-Stage Attack

SAS CTF and the many ways to persist a kernel shellcode on Windows 7

U.S. Charges Two Sudanese Brothers for Record 35,000 DDoS Attacks

WeChat devs introduced security flaws when they modded TLS, say researchers

Anonymous Sudan isn't any more: two alleged operators named, charged

Critical Kubernetes Image Builder Vulnerability Exposes Nodes to Root Access Risk

~ 16 Oct 2024 ~

US contractor pays $300k to settle accusation it didn't properly look after Medicare users' data

Critical default credential bug in Kubernetes Image Builder allows SSH root access

Volkswagen monitoring data dump threat from 8Base ransomware crew

SolarWinds critical hardcoded credential bug under active exploit

Chinas infosec leads accuse Intel of NSA backdoor, cite chip security flaws

Hacker Charged With Seeking to Kill Using Cyberattacks on Hospitals

Hackers Abuse EDRSilencer Tool to Bypass Security and Hide Malicious Activity

FIDO Alliance Drafts New Protocol to Simplify Passkey Transfers Across Different Platforms

From Misuse to Abuse: AI Risks and Attacks

Cheating at Conkers

North Korean ScarCruft Exploits Windows Zero-Day to Spread RokRAT Malware

5 Techniques for Collecting Cyber Threat Intelligence

Protecting children from grooming | Unlocked 403 cybersecurity podcast (ep. 7)

Strengthen your cybersecurity with automation

Internet Archive wobbles back online, with limited functionality

Astaroth Banking Malware Resurfaces in Brazil via Spear-Phishing Attack

IBM acquires Indian SaaS startup Prescinto to shine a light on renewable energy assets

GitHub Patches Critical Flaw in Enterprise Server Allowing Unauthorized Instance Access

CISA Warns of Active Exploitation in SolarWinds Help Desk Software Vulnerability

WhatsApp may expose the OS you use to run it which could expose you to crooks

The 2024 State of ICS/OT Cybersecurity: Our Past and Our Future

ICS/OT Cybersecurity & AI: Considerations for Now and the Future (Part II)

~ 15 Oct 2024 ~

Cisco confirms 'ongoing investigation' after crims brag about selling tons of data

Should We Chat, Too? FAQ

Should We Chat, Too? Security Analysis of WeChats MMTLS Encryption Protocol

Microsoft says more ransomware stopped before reaching encryption

TrickMo Banking Trojan Can Now Capture Android PINs and Unlock Patterns

New Malware Campaign Uses PureCrypter Loader to Deliver DarkVision RAT