Port 22

~ 1 Nov 2024 ~

Inside Irans Cyber Playbook: AI, Fake Hosting, and Psychological Warfare

UK councils bat away DDoS barrage from pro-Russia keyboard warriors

Massive Git Config Breach Exposes 15,000 Credentials; 10,000 Private Repos Cloned

5 SaaS Misconfigurations Leading to Major Fu*%@ Ups

Zero-Click Flaw Exposes Potentially Millions of Popular Storage Devices to Attack

Microsoft Warns of Chinese Botnet Exploiting Router Flaws for Credential Theft

Microsoft Delays Windows Copilot+ Recall Release Over Privacy Concerns

Hack Nintendo's alarm clock to show cat pics? Let's-a-go!

Stop LUCR-3 Attacks: Learn Key Identity Security Tactics in This Expert Webinar

New Phishing Kit Xi gu Targets Users Across Five Countries With 2,000 Fake Sites

~ 31 Oct 2024 ~

Gang gobbles 15K credentials from cloud and email providers' garbage Git configs

LottieFiles Issues Warning About Compromised "lottie-player" npm Package

Microsoft now a Leader in three major analyst reports for SIEM

Microsoft now a Leader in three major analyst reports for SIEM

Chinese threat actor Storm-0940 uses credentials from password spray attacks from a covert network

7 cybersecurity trends and tips for small and medium businesses to stay protected

Roger Grimes on Prioritizing Cybersecurity Advice

Tracking World Leaders Using Strava

New LightSpy Spyware Version Targets iPhones with Increased Surveillance Tactics

Month in security with Tony Anscombe October 2024 edition

Inside Sophos' 5-Year War With the Chinese Hackers Hijacking Its Devices

Rockwell Automation FactoryTalk ThinManager

LottieFiles supply chain attack exposes users to malicious crypto wallet drainer

Enterprise Identity Threat Report 2024: Unveiling Hidden Threats to Corporate Identities

LiteSpeed Cache Plugin Vulnerability Poses Significant Risk to WordPress Websites

Loose-lipped neural networks and lazy scammers

The Untold Story of Trump's Failed Attempt to Overthrow Venezuela's President

Tower PC case used as 'creative cavity' by drug importer

Chinese attackers accessed Canadian government networks for five years

~ 30 Oct 2024 ~

Windows Themes zero-day bug exposes users to NTLM credential theft

Microsoft Ignite: Sessions and demos to improve your security strategy

North Korean Group Collaborates with Play Ransomware in Significant Cyber Attack

Were a Fortress Now: The Militarization of US Elections Is Here

Fired Disney staffer accused of hacking menu to add profanity, wingdings, while removing allergen info

Simson Garfinkel on Spooky Cryptographic Action at a Distance

Simpson Garfinkel on Spooky Cryptographic Action at a Distance

Change Healthcare Breach Hits 100M Americans

Opera Browser Fixes Big Security Hole That Could Have Exposed Your Information

Malvertising Campaign Hijacks Facebook Accounts to Spread SYS01stealer Malware

Russian spies use remote desktop protocol files in unusual mass phishing drive

Researchers Uncover Python Package Targeting Crypto Wallets with Malicious Code

Embarking on a Compliance Journey? Heres How Intruder Can Help

How to remove your personal information from Google Search results

Beijing claims it's found 'underwater lighthouses' that its foes use for espionage

~ 29 Oct 2024 ~

Uncle Sam outs a Russian accused of developing Redline infostealing malware

Cast a hex on ChatGPT to trick the AI into writing exploit code

Empty Promises? Ron Deibert on the U.S. decision to remove Sandvine from blacklist following promises of transformative change

Job Opportunity: Systems and Security Administrator

Midnight Blizzard conducts large-scale spear-phishing campaign using RDP files

Belgian cops cuff 2 suspected cybercrooks in Redline, Meta infostealer sting

The story behind the Health Infrastructure Security and Accountability Act

Admins better Spring into action over latest critical open source vuln

Risk reduction redefined: How compromise assessment helps strengthen cyberdefenses

Researchers Uncover Vulnerabilities in Open-Source AI and ML Models

Solar-Log Base 15

Siemens InterMesh Subscriber Devices

Delta Electronics InfraSuite Device Master

Law Enforcement Deanonymizes Tor Users

A Sherlock Holmes Approach to Cybersecurity: Eliminate the Impossible with Exposure Validation

Dutch Police Disrupt Major Info Stealers RedLine and MetaStealer in Operation Magnus

Merde! Macron's bodyguards reveal his location by sharing Strava data

Lumma/Amadey: fake CAPTCHAs want to know if youre human

Don't become a statistic: Tips to help keep your personal data off the dark web

Five Eyes nations tell tech startups to take infosec seriously. Again

U.S. Government Issues New TLP Guidance for Cross-Sector Threat Intelligence Sharing

Wanted. Top infosec pros willing to defend Britain on shabby salaries

New Research Reveals Spectre Vulnerability Persists in Latest AMD and Intel Processors

~ 28 Oct 2024 ~

JPMorgan Chase sues scammers following viral 'infinite money glitch'

Feds investigate China's Salt Typhoon amid campaign phone hacks

Chinese Hackers Use CloudScout Toolset to Steal Session Cookies from Cloud Services

Criminals Are Blowing up ATMs in Germany

Brazen crims selling stolen credit cards on Meta's Threads

Delta officially launches lawyers at $500M CrowdStrike problem

Russian Espionage Group Targets Ukrainian Military with Malware via Telegram

BeaverTail Malware Resurfaces in Malicious npm Packages Targeting Developers

Cybercriminals Pose a Greater Threat of Disruptive US Election Hacks Than Russia or China

Dutch cops pwn the Redline and Meta infostealers, leak 'VIP' aliases

THN Cybersecurity Recap: Top Threats, Tools and News (Oct 21 - Oct 27)

Cybercriminals Use Webflow to Deceive Users into Sharing Sensitive Login Credentials

Sailing the Seven Seas Securely from Port to Port OT Access Security for Ships and Cranes

Tony Fadell: Innovating to save our planet | Starmus highlights

CloudScout: Evasive Panda scouting cloud services

WordPress forces user conf organizers to share social media credentials, arousing suspicions

Researchers Uncover OS Downgrade Vulnerability Targeting Microsoft Windows Kernel

A Visual Summary of SANS HackFest Hollywood Summit 2024

~ 27 Oct 2024 ~

Senator accuses sloppy domain registrars of aiding Russian disinfo campaigns

~ 26 Oct 2024 ~

Notorious Hacker Group TeamTNT Launches New Cloud Attacks for Crypto Mining

Four REvil Ransomware Members Sentenced in Rare Russian Cybercrime Convictions

Worker surveillance must comply with credit reporting rules

CERT-UA Identifies Malicious RDP Files in Latest Attack on Ukrainian Entities

~ 25 Oct 2024 ~

Chinese Hackers Target Trump Campaign via Verizon Breach

Friday Squid Blogging: Giant Squid Found on Spanish Beach

Just how private is Apple's Private Cloud Compute? You can test it to find out

Watermark for LLM-Generated Text

Researchers Discover Command Injection Flaw in Wi-Fi Alliance's Test Suite

Apple Opens PCC Source Code for Researchers to Identify Bugs in Cloud AI Security

Eliminating AI Deepfake Threats: Is Your Identity Security AI-Proof?

SEC Charges 4 Companies Over Misleading SolarWinds Cyberattack Disclosures

Irish Watchdog Imposes Record 310 Million Fine on LinkedIn for GDPR Violations

Putin's pro-Trump trolls accuse Harris of poaching rhinos