Port 22

~ 12 Jun 2024 ~

Cryptojacking Campaign Targets Misconfigured Kubernetes Clusters

Lessons from the Ticketmaster-Snowflake Breach

Black Basta Ransomware May Have Exploited MS Windows Zero-Day Flaw

Using AI for Political Polling

Medical-Targeted Ransomware Is Breaking Records After Change Healthcares $22M Payout

New Phishing Campaign Deploys WARMCOOKIE Backdoor Targeting Job Seekers

China-Backed Hackers Exploit Fortinet Flaw, Infecting 20,000 Systems Globally

Microsoft Issues Patches for 51 Flaws, Including Critical MSMQ Vulnerability

Allianz Cyber Talent Academy - The First Foundation to Bridge the Cybersecurity Skills Shortage

Let's kick off our summer with a pwn-me-by-Wi-Fi bug in Microsoft Windows

~ 11 Jun 2024 ~

Patch Tuesday, June 2024 Recall Edition

Pure Storage pwned, claims data plundered by crims who broke into Snowflake workspace

Cylance clarifies data breach details, except where the data came from

US Leaders Dodge Questions About Israels Influence Campaign

How Cynet Makes MSPs Rich & Their Clients Secure

Chinese Actor SecShow Conducts Massive DNS Probing on Global Scale

UK and Canada's data chiefs join forces to investigate 23andMe mega-breach

Rockwell Automation ControlLogix, GuardLogix, and CompactLogix

Intrado 911 Emergency Gateway

AVEVA PI Web API

AVEVA PI Asset Framework Client

LLMs Acting Deceptively

Top 10 Critical Pentest Findings 2024: What You Need to Know

Apple Integrates OpenAI's ChatGPT into Siri for iOS, iPadOS, and macOS

China-Linked ValleyRAT Malware Resurfaces with Advanced Data Theft Tactics

QR code SQL injection and other vulnerabilities in a popular biometric terminal

Snowflake Breach Exposes 165 Customers' Data in Ongoing Extortion Campaign

Arm Warns of Actively Exploited Zero-Day Vulnerability in Mali GPU Drivers

Snowflake customers not using MFA are not unique over 165 of them have been compromised

Cyber attack flattens Japanese vid-sharing site Niconico and others

~ 10 Jun 2024 ~

Christie's confirms RansomHub crooks stole data on 45K clients

More_eggs Malware Disguised as Resumes Targets Recruiters in Phishing Attack

WeLiveSecurity wins Best Cybersecurity Vendor Blog award!

Ransomware Is More Brutal Than Ever in 2024

Snowflake tells customers to enable MFA as investigations continue

Two cuffed over suspected smishing campaign using 'text message blaster'

Two arrested in UK over fake cell tower-powered smishing campaign

Cybersecurity CPEs: Unraveling the What, Why & How

Azure Service Tags Vulnerability: Microsoft Warns of Potential Abuse by Hackers

Exploiting Mistyped URLs

Google Takes Down Influence Campaigns Tied to China, Indonesia, and Russia

Bypassing 2FA with phishing and OTP bots

Sticky Werewolf Expands Cyber Attack Targets in Russia and Belarus

~ 9 Jun 2024 ~

Akira: Perhaps the next big thing in ransomware, says Tidal threat intelligence chief

~ 8 Jun 2024 ~

Uber ex-CSO Joe Sullivan: We need security leaders running to work, not giving up

Apple Is Coming for Your Password Manager

New PHP Vulnerability Exposes Windows Servers to Remote Code Execution

Microsoft Revamps Controversial AI-Powered Recall Feature Amid Privacy Concerns

~ 7 Jun 2024 ~

'New York Times source code' leaks online via 4chan

FCC takes some action against notorious BGP

Friday Squid Blogging: Squid Catch Quotas in Peru

Security and Human Behavior (SHB) 2024

Defiant Microsoft pushes ahead with controversial Recall tho as an opt-in

Op-ed by Kate Robertson and Ron Deibert in The Globe and Mail

Frontier Communications: 750k people's data stolen in April attack on systems

Microsoft Will Switch Off Recall by Default After Security Backlash

Ultimate Cyber Hygiene Guide: Learn How to Simplify Your Security Efforts

LightSpy Spyware's macOS Variant Found with Advanced Surveillance Capabilities

How to navigate NIS2 and secure your vulnerabilities

Cisco fixes WebEx flaw that allowed government, military meetings to be spied on

560 million Ticketmaster customer data for sale? Week in security with Tony Anscombe

Cyber Landscape is Evolving - So Should Your SCA

The AI Debate: Google's Guidelines, Meta's GDPR Dispute, Microsoft's Recall Backlash

The Justice Department Took Down the 911 S5 Botnet

Russian hacktivists vow mass attacks against EU elections

FBI Distributes 7,000 LockBit Ransomware Decryption Keys to Help Victims

SPECTR Malware Targets Ukraine Defense Forces in SickSync Campaign

Spam blocklist SORBS closed by its owner, Proofpoint

Commando Cat Cryptojacking Attacks Target Misconfigured Docker Instances

POC exploit code published for 9.8-rated Apache HugeGraph RCE flaw

Microsoft's Recall Feature Is Even More Hackable Than You Thought

~ 6 Jun 2024 ~

FBI encourages LockBit victims to step right up for free encryption keys

FBI encourages LockBit victims to step right up for free decryption keys

The Snowflake Attack May Be Turning Into One of the Largest Data Breaches Ever

Espionage with a Drone

Uncle Sam seeks to claw back $5M+ stolen from trade union through spoofed email

Muhstik Botnet Exploiting Apache RocketMQ Flaw to Expand DDoS Attacks

Microsoft shows venerable and vulnerable NTLM security protocol the door

Mitsubishi Electric CC-Link IE TSN Industrial Managed Switch

Johnson Controls Software House iStar Pro Door Controller

Emerson PACSystem and Fanuc

Emerson Ovation

Third-Party Cyber Attacks: The Threat No One Sees Coming Here's How to Stop Them

Hackers Target Python Developers with Fake "Crytic-Compilers" Package on PyPI

7-year-old Oracle WebLogic bug under active exploitation

The Lords of Silicon Valley Are Thrilled to Present a Handheld Iron Dome

Prevent Account Takeover with Better Password Security

Hackers Exploit Legitimate Packer Software to Spread Malware Undetected

The job hunters guide: Separating genuine offers from scams

Microsoft Research chief scientist has no issue with Windows Recall

Google Maps Timeline Data to be Stored Locally on Your Device for Privacy

How to Lead an Army of Digital Sleuths in the Age of AI

~ 5 Jun 2024 ~

TikTok confirms CNN, other high-profile accounts hijacked via zero-day vulnerability

Who are these RansomHub cyber-thieves? Looks like a Knight ransomware reboot

Emergency patches released for critical vulns impacting EOL Zyxel NAS boxes

4 cuffed following probe into holiday scheme for cybercrooks

Chinese State-Backed Cyber Espionage Targets Southeast Asian Government

Online Privacy and Overfishing

Unpacking 2024's SaaS Threat Predictions

Rebranded Knight Ransomware Targeting Healthcare and Businesses Worldwide