Port 22

~ 12 Mar 2024 ~

JetBrains is still mad at Rapid7 for the ransomware attacks on its customers

Watch Out: These PyPI Python Packages Can Drain Your Crypto Wallets

UK council yanks IT systems and phone lines offline following cyber ambush

Jailbreaking LLMs with ASCII Art

CTEM 101 - Go Beyond Vulnerability Management with Continuous Threat Exposure Management

Election cybersecurity: Protecting the ballot box and building trust in election integrity

Top 10 web application vulnerabilities in 20212023

Malware Campaign Exploits Popup Builder WordPress Plugin to Infect 3,900+ Sites

South Korean Citizen Detained in Russia on Cyber Espionage Charges

French government sites disrupted by <i>trs grande</i> DDoS

Binances Top Crypto Crime Investigator Is Being Detained in Nigeria

White House and lawmakers increase pressure on UnitedHealth to ease providers' pain

~ 11 Mar 2024 ~

Kremlin accuses America of plotting cyberattack on Russian voting systems

The 4 Big Questions the Pentagons New UFO Report Fails to Answer

Incognito Darknet Market Mass-Extorts Buyers, Sellers

New Banking Trojan CHAVECLOAK Targets Brazilian Users via Phishing Tactics

Embracing the Cloud: Revolutionizing Privileged Access Management with One Identity PAM Essentials

Airbnb Bans All Indoor Security Cameras

British Library pushes the cloud button, says legacy IT estate cause of hefty rebuild

Data Leakage Prevention in the Age of Cloud Computing: A New Approach

How do you lot feel about Pay or say OK to ads model, asks ICO

Using LLMs to Unredact Text

BianLian Threat Actors Exploiting JetBrains TeamCity Flaws in Ransomware Attacks

Google Is Getting Thousands of Deepfake Porn Complaints

Proof-of-Concept Exploit Released for Progress Software OpenEdge Vulnerability

Magnet Goblin Hacker Group Leveraging 1-Day Exploits to Deploy Nerbian RAT

Microsoft waited 6 months to patch actively exploited admin-to-kernel vulnerability

~ 9 Mar 2024 ~

Russian Hackers Stole Microsoft Source Codeand the Attack Isnt Over

Microsoft Confirms Russian Hackers Stole Source Code, Some Customer Secrets

~ 8 Mar 2024 ~

Cybercrime crew Magnet Goblin bursts onto the scene exploiting Ivanti holes

Friday Squid Blogging: New Plant Looks Like a Squid

Essays from the Second IWORD

International Womens Day: Expanding cybersecurity opportunities in the era of AI

Microsoft confirms Russian spies stole source code, accessed internal systems

Change Healthcare registers pulse after crippling ransomware attack

Meta Details WhatsApp and Messenger Interoperability to Comply with EU's DMA Regulations

A Close Up Look at the Consumer Data Broker Radaris

APT attacks taking aim at Tibetans Week in security with Tony Anscombe

Swiss cheese security? Play ransomware gang milks government of 65,000 files

A Taxonomy of Prompt Injection Attacks

Secrets Sensei: Conquering Secrets Management Challenges

Cisco Issues Patch for High-Severity VPN Hijacking Bug in Secure Client

QEMU Emulator Exploited as Tunneling Tool to Breach Company Network

CISA Warns of Actively Exploited JetBrains TeamCity Vulnerability

Font security 'still a Helvetica of a problem' says Australian graphics outfit Canva

Securing open source software: Whose job is it, anyway?

Top 25 Cybersecurity Resources for International Womens Day

Top 20 Cybersecurity Resources for International Womens Day

~ 7 Mar 2024 ~

We're not Meta support: State AGs tell Zuck to fix rampant account takeover problem

Chrome users get an alert when extensions are in danger of falling into wrong hands

Possible China link to Change Healthcare ransomware attack

Evolving Microsoft Security Development Lifecycle (SDL): How continuous SDL can help you build more secure software

JetBrains TeamCity under attack by ransomware thugs after disclosure mess

Hacked WordPress Sites Abusing Visitors' Browsers for Distributed Brute-Force Attacks

Chinese State Hackers Target Tibetans with Supply Chain, Watering Hole Attacks

Belgian ale legend Duvels brewery borked as ransomware halts production

How Public AI Can Strengthen Democracy

Human vs. Non-Human Identity in SaaS

Evasive Panda leverages Monlam Festival to target Tibetans

Ex-Google Engineer Arrested for Stealing AI Technology Secrets for China

Spam and phishing in 2023

New Python-Based Snake Info Stealer Spreading Through Facebook Messages

VMware urges emergency action to blunt hypervisor flaws

Heres something else AI can do: expose bad infosec to give cyber-crims a toehold in your organization

Watch Out for Spoofed Zoom, Skype, Google Meet Sites Delivering Malware