Port 22

~ 9 Oct 2024 ~

Google Joins Forces with GASA and DNS RF to Tackle Online Scams at Scale

69,000 Bitcoins Are Headed for the US TreasuryWhile the Agent Who Seized Them Is in Jail

Researchers Uncover Major Security Vulnerabilities in Industrial MMS Protocol Libraries

Microsoft cleans up hot mess of Patch Tuesday preview

Ransomware gang Trinity joins pile of scumbags targeting healthcare

N. Korean Hackers Use Fake Interviews to Infect Developers with Cross-Platform Malware

Auto-Identification Smart Glasses

Social Media Accounts: The Weak Link in Organizational SaaS Security

Microsoft Issues Security Update Fixing 118 Flaws, Two Actively Exploited in the Wild

Microsoft Detects Growing Use of File Hosting Services in Business Email Compromise Attacks

Key Insights from Steve Sims' Keynote on the Current Threat Landscape and AI in Cybersecurity

~ 8 Oct 2024 ~

Microsoft issues 117 patches some for flaws already under attack

Patch Tuesday, October 2024 Edition

Qualcomm urges device makers to push patches after 'targeted' exploitation

Using iPhone Mirroring at work? You might have just overshared to your boss

Zero-Day Alert: Three Critical Ivanti CSA Vulnerabilities Actively Exploited

Gamers Tricked Into Downloading Lua-Based Malware via Fake Cheating Script Engines

File hosting services misused for identity phishing

What Google's U-Turn on Third-Party Cookies Means for Chrome Privacy

Cyberattack Group 'Awaken Likho' Targets Russian Government with Advanced Tools

China Possibly Hacking US Lawful Access Backdoor

New Case Study: The Evil Twin Checkout Page

The Value of AI-Powered Identity

GoldenJackal Target Embassies and Air-Gapped Systems Using Malware Toolsets

Cyber insurance, human risk, and the potential for cyber-ratings

Happy birthday, Putin you've been pwned

Pro-Ukrainian Hackers Strike Russian State TV on Putin's Birthday

Qualcomm Urges OEMs to Patch Critical DSP and WLAN Flaws Amid Active Exploits

Google brings better bricking to Androids, to curtail crims

Feds reach for sliver of crypto-cash nicked by North Korea's notorious Lazarus Group

~ 7 Oct 2024 ~

American Water stops billing for H2O due to 'cybersecurity incident'

American Water rinsed in cyberattack, turns off app

Cops love facial recognition, and withholding info on its use from the courts

Chinese cyberspies reportedly breached Verizon, AT&T, Lumen

Microsoft Defender for Cloud remediated threats 30% faster than other solutions, according to Forrester TEI study

Vulnerable APIs and Bot Attacks Costing Businesses Up to $186 Billion Annually

Largest Recorded DDoS Attack is 3.8 Tbps

Modernization of Authentication: Webinar on MFA, Passwords, and the Shift to Passwordless

Awaken Likho is awake: new techniques of an APT group

New Gorilla Botnet Launches Over 300,000 DDoS Attacks Across 100 Countries

Critical Apache Avro SDK Flaw Allows Remote Code Execution in Java Applications

THN Cybersecurity Recap: Top Threats and Trends (Sep 30 - Oct 6)

Google Blocks Unsafe Android App Sideloading in India for Improved Fraud Protection

Mind the (air) gap: GoldenJackal gooses government guardrails

Embattled users worn down by privacy options? Let them eat code

E.U. Court Limits Meta's Use of Personal Facebook Data for Targeted Ads

~ 5 Oct 2024 ~

Stealthy Malware Has Infected Thousands of Linux Systems for Years

The FBI Still Hasnt Cracked NYC Mayor Eric Adams Phone

Ryanair faces GDPR turbulence over customer ID checks

UK's Sellafield nuke waste processing plant fined 333K for infosec blunders

Apple Releases Critical iOS and iPadOS Updates to Fix VoiceOver Password Vulnerability

~ 4 Oct 2024 ~

Friday Squid Blogging: Map of All Colossal Squid Sightings

About a quarter million Comcast subscribers had their data stolen from debt collector

About a quarter million Comcast subscribers had data stolen from debt collector

U.S. and Microsoft Seize 107 Russian Domains in Major Cyber Fraud Crackdown

The complexities of attack attribution Week in security with Tony Anscombe

Apple fixes bug that let VoiceOver shout your passwords

This Video Game Controller Has Become the US Militarys Weapon of Choice

How to Get Going with CTEM When You Don't Know Where to Start

Cloudflare Thwarts Largest-Ever 3.8 Tbps DDoS Attack Targeting Global Sectors

WordPress LiteSpeed Cache Plugin Security Flaw Exposes Sites to XSS Attacks

Visit CyberThreat 2024 to hone your cybersecurity skills

Scam Information and Event Management

Harvard duo hacks Meta Ray-Bans to dox strangers on sight in seconds

Big names among thousands infected by payment-card-stealing CosmicSting crooks

HUMINT and its Role within Cybersecurity

~ 3 Oct 2024 ~

Android 14 Adds New Security Features to Block 2G Exploits and Baseband Attacks

Disrupting COLDRIVER: U.S. court orders seizure of domains used in Russian cyberattacks

DOJ, Microsoft seize 107 domains used in Russia's Star Blizzard phishing attacks

The Secret Weakness Execs Are Overlooking: Non-Human Identities

New Perfctl Malware Targets Linux Servers for Cryptocurrency Mining and Proxyjacking

Average North American CISO salary now $565K, mainly thanks to one weird trick

A Single Cloud Compromise Can Feed an Army of AI Sex Bots

North Korean Hackers Using New VeilShell Backdoor in Stealthy Cyber Attacks

Two British-Nigerian men sentenced over multimillion-dollar business email scam

TEM Opera Plus FM Family Transmitter

Subnet Solutions Inc. PowerSYSTEM Center

Delta Electronics DIAEnergie

Weird Zimbra Vulnerability

License Plate Readers Are Creating a US-Wide Database of Political Lawn Signs and Bumper Stickers

Ransomware crew infects 100+ orgs monthly with new MedusaLocker variant

Brits hate how big tech handles their data, but can't be bothered to do much about it

INTERPOL Arrests 8 in Major Phishing and Romance Fraud Crackdown in West Africa

LockBit Ransomware and Evil Corp Leaders Arrested and Sanctioned in Joint Global Effort

Ivanti Endpoint Manager Flaw Actively Targeted, CISA Warns Agencies to Patch

~ 2 Oct 2024 ~

700K+ DrayTek routers are sitting ducks on the internet, open to remote hijacking

Two simple give-me-control security bugs found in Optigo network switches used in critical manufacturing

Gender-based digital transnational repression as a global authoritarian practice: Article by The Citizen Lab published in Globalizations

Fake Trading Apps Target Victims Globally via Apple App Store and Google Play

China-Linked CeranaKeeper Targeting Southeast Asia with Data Exfiltration

Fake Job Applications Deliver Dangerous More_eggs Malware to HR Professionals

Separating the bee from the panda: CeranaKeeper making a beeline for Thailand

Alert: Over 700,000 DrayTek Routers Exposed to Hacking via 14 New Vulnerabilities

NIST's security flaw database still backlogged with 17K+ unprocessed bugs. Not great

Alert: Adobe Commerce and Magento Stores Under Attack from CosmicSting Exploit

California AI Safety Bill Vetoed

5 Must-Have Tools for Effective Dynamic Malware Analysis

'Patch yesterday': Zimbra mail servers under siege through RCE vuln

Finding a needle in a haystack: Machine learning at the forefront of threat hunting research

Andariel Hacking Group Shifts Focus to Financial Attacks on U.S. Organizations