Port 22

~ 8 May 2024 ~

CISA boss: Secure code is the 'only way to make ransomware a shocking anomaly'

How implementing a trust fabric strengthens identity and network

A SaaS Security Challenge: Getting Permissions All in One Place

New Spectre-Style 'Pathfinder' Attack Targets Intel CPU, Leak Encryption Keys and Data

One year on, universities org admits MOVEit attack hit data of 800k people

UK opens investigation of MoD payroll contractor after confirming attack

The Fundamentals of Cloud Security Stress Testing

Hijack Loader Malware Employs Process Hollowing, UAC Bypass in Latest Version

State of ransomware in 2024

A (Strange) Interview the Russian-Military-Linked Hackers Targeting US Water Utilities

Ten years since the first corp ransomware, Mikko Hyppnen sees no end in sight

Ten years since the first corp ransomware, Mikko Hyppnen sees no end in sight

Hackers Exploiting LiteSpeed Cache Bug to Gain Full Control of WordPress Sites

From infosec to skunks, RSA Conference SVP spills the tea

UnitedHealth's 'egregious negligence' led to Change Healthcare infection

~ 7 May 2024 ~

America's War on Drugs and Crime will be AI powered, says Homeland Security boss

Watch out for rogue DHCP servers decloaking your VPN connections

CISA's early-warning system helped critical orgs close 852 ransomware holes

TikTok sues America to undo divest-or-die law

U.S. Charges Russian Man as Boss of LockBit Ransomware Group

Microsoft announces the 2024 Microsoft Security Excellence Awards winners

Russian Hacker Dmitry Khoroshev Unmasked as LockBit Ransomware Administrator

New Attack on VPNs

How to inspire the next generation of scientists | Unlocked 403: Cybersecurity podcast

Investigators finally unmask LockBit kingpin after two-month tease

Cops finally unmask 'LockBit kingpin' after two-month tease

The Alleged LockBit Ransomware Mastermind Has Been Identified

APT42 Hackers Pose as Journalists to Harvest Credentials and Access Cloud Data

China-Linked Hackers Used ROOTROT Webshell in MITRE Network Intrusion

SUBNET Substation Server

PTC Codebeamer

The truth about KEV: CISAs vuln deadlines good influence on private-sector patching

New Case Study: The Malicious Comment

Physical security biz exposes 1.2M files via unprotected database

Google Simplifies 2-Factor Authentication Setup (It's More Important Than Ever)

Exploits and vulnerabilities in Q1 2024

Russian Operator of BTC-e Crypto Exchange Pleads Guilty to Money Laundering

Ransomware evolves from mere extortion to 'psychological attacks'

Google, Meta, Spotify break Apple's device fingerprinting rules new claim

~ 6 May 2024 ~

Fed-run LockBit site back from the dead and vows to really spill the beans on gang

Mastodon delays fix for link previews DDoSing websites

Consultant charged over $1.5M extortion scheme against IT giant

New capabilities to help you secure your AI transformation

Why Your VPN May Not Be As Secure As It Claims

Critical Tinyproxy Flaw Opens Over 50,000 Hosts to Remote Code Execution

China-Linked Hackers Suspected in ArcaneDoor Cyberattacks Targeting Network Devices

CISA says 'no more' to decades-old directory traversal bugs

Apples iPhone Spyware Problem Is Getting Worse. Heres What You Should Know

New Lawsuit Attempting to Make Adversarial Interoperability Legal

It Costs How Much?!? The Financial Pitfalls of Cyberattacks on SMBs

Xiaomi Android Devices Hit by Multiple Flaws Across Apps and System Components

Financial cyberthreats in 2023

The hackers toolkit: 4 gadgets that could spell security trouble

New 'Cuckoo' Persistent macOS Spyware Targeting Intel and Arm Macs

Germany points finger at Fancy Bear for widespread 2023 hacks, DDoS attacks

The Distinctive Worlds of OT Cybersecurity and IT Cybersecurity

~ 5 May 2024 ~

End-to-end encryption may be the bane of cops, but they can't close that Pandora's Box

Building a Cloud Security Flywheel: Lessons from the Field

~ 4 May 2024 ~

Dating apps kiss'n'tell all sorts of sensitive personal info

A New Surveillance Tool Invades Border Towns

Microsoft Outlook Flaw Exploited by Russia's APT28 to Hack Czech, German Entities

~ 3 May 2024 ~

Kaspersky hits back at claims it helped Russia develop military drone systems

Kaspersky accused of helping Russia develop military drone systems

Friday Squid Blogging: Squid Purses

My TED Talks

It may take decade to shore up software supply chain security, says infosec CEO

Pay up, or else? Week in security with Tony Anscombe

Security above all elseexpanding Microsofts Secure Future Initiative

Expert-Led Webinar - Uncovering Latest DDoS Tactics and Learn How to Fight Back

Hackers Increasingly Abusing Microsoft Graph API for Stealthy Malware Communications

Rare Interviews with Enigma Cryptanalyst Marian Rejewski

New Guide Explains How to Eliminate the Risk of Shadow SaaS and Protect Corporate Data

NSA, FBI Alert on N. Korean Hackers Spoofing Emails from Trusted Sources

These Dangerous Scammers Dont Even Bother to Hide Their Crimes

Google Announces Passkeys Adopted by Over 400 Million Accounts

Europol op shutters 12 scam call centers and cuffs 21 suspected fraudsters

Four Critical Vulnerabilities Expose HPE Aruba Devices to RCE Attacks

Indonesia sneakily buys spyware, claims Amnesty International

Chinese government website security is often worryingly bad, say Chinese researchers

How AI and ML are Changing Mobile Device Forensics Investigations

~ 2 May 2024 ~

Microsoft, Google do a victory lap around passkeys

Florida man gets 6 years behind bars for flogging fake Cisco kit to US military

Patch up 4 critical bugs in ArubaOS lead to remote code execution

New "Goldoon" Botnet Targets D-Link Routers With Decade-Old Flaw

Microsoft named an overall leader in KuppingerCole Leadership Compass for ITDR

The Breach of a Face Recognition Firm Reveals a Hidden Danger of Biometrics

Popular Android Apps Like Xiaomi, WPS Office Vulnerable to File Overwrite Flaw

Federal frenzy to patch gaping GitLab account takeover hole

Microsoft introduces passkeys for consumer accounts

Ukrainian REvil Hacker Sentenced to 13 Years and Ordered to Pay $16 Million

Delta Electronics DIAEnergie

CyberPower PowerPanel

The UK Bans Default Passwords

When is One Vulnerability Scanner Not Enough?

Dropbox Discloses Breach of Digital Signature Service Affecting All Users

Adding insult to injury: crypto recovery scams

Think tank: China's tech giants refine and define Beijing's propaganda push

REvil ransomware scum sentenced to almost 14 years inside, ordered to pay $16 million

CISA Warns of Active Exploitation of Severe GitLab Password Reset Vulnerability

Inside Ukraines Killer-Drone Startup Industry