Port 22

~ 14 Feb 2024 ~

Bumblebee malware wakes from hibernation, forgets what year it is, attacks with macros

The art of digital sleuthing: How digital forensics unlocks the truth

AI Girlfriends Are a Privacy Nightmare

DarkMe Malware Targets Traders Using Microsoft SmartScreen Zero-Day Vulnerability

Microsoft Rolls Out Patches for 73 Flaws, Including 2 Windows Zero-Days

Australian Tax Office probed 150 staff over social media refund scam

Crims found and exploited these two Microsoft bugs before Redmond fixed 'em

~ 13 Feb 2024 ~

Just one bad DNS packet can bring down a public DNSSEC server

Fat Patch Tuesday, February 2024 Edition

A Hackers Mind is Out in Paperback

QNAP vulnerability disclosure ends up an utter shambles

ALPHV blackmails Canadian pipeline and claims it stole 190GB of vital info

Glupteba Botnet Evades Detection with Undocumented UEFI Bootkit

Crooks hook hundreds of exec accounts after phishing in Azure C-suite pond

PikaBot Resurfaces with Streamlined Code and Deceptive Tactics

Molly White Reviews Blockchain Book

Mitsubishi Electric MELSEC iQ-R Series Safety CPU

Midnight Blizzard and Cloudflare-Atlassian Cybersecurity Incidents: What to Know

Deepfakes in the global election year of 2024: A weapon of mass deception?

Meta says risk of account theft after phone number recycling isn't its problem to solve

Ivanti Vulnerability Exploited to Install 'DSLog' Backdoor on 670+ IT Infrastructures

Infosys subsidiary named as source of Bank of America data leak

Alert: CISA Warns of Active 'Roundcube' Email Attacks - Patch Now

Korean eggheads crack Rhysida ransomware and release free decryptor tool

~ 12 Feb 2024 ~

A Backroom Deal Looms Over Section 702 Surveillance Fight

Dutch insurers demand nudes from breast cancer patients despite ban

FCC gets tough: Telcos must now tell you when your personal info is stolen

Jet engine dealer to major airlines discloses 'unauthorized activity'

On Passkey Usability

Satellite Images Point to Indiscriminate Israeli Attacks on Gazas Health Care Facilities

Rhysida Ransomware Cracked, Free Decryption Tool Released

The Hidden Injustice of Cyberattacks

Europe's largest caravan club admits wide array of personal data potentially accessed

4 Ways Hackers use Social Engineering to Bypass MFA

2054, Part VI: Standoff at Arlington

CISA and OpenSSF Release Framework for Package Repository Security

Why Are Compromised Identities the Nightmare to IR Speed and Efficiency?

Mon Dieu! Nearly half the French population have data nabbed in massive breach

Microsoft Introduces Linux-Like 'sudo' Command to Windows 11

U.S. Offers $10 Million Bounty for Info Leading to Arrest of Hive Ransomware Leaders

Solving the Human Risk Problem: Engaging and Securing Your Workforce

~ 11 Feb 2024 ~

A Celebrated Cryptography-Breaking Algorithm Just Got an Upgrade

U.S. DoJ Dismantles Warzone RAT Infrastructure, Arrests Key Operators

~ 10 Feb 2024 ~

How 3 Million Hacked Toothbrushes Became a Cyber Urban Legend

Alert: New Stealthy "RustDoor" Backdoor Targeting Apple macOS Devices

Meet VexTrio, a network of 70K hijacked websites crooks use to sling malware, fraud

~ 9 Feb 2024 ~

Friday Squid Blogging: A Penguin Named Squid

Ivanti discloses fifth vulnerability, doesn't credit researchers who found it

No, Toothbrushes Were Not Used in a Massive DDoS Attack

Raspberry Robin Malware Upgrades with Discord Spread and New Exploits

Juniper Support Portal Exposed Customer Device Info

Fortinet's week to forget: Critical vulns, disclosure screw-ups, and <em>that</em> toothbrush DDoS attack claim

The ever-present state of cyber security alert

Ransomware payments hit a record high in 2023 Week in security with Tony Anscombe

MoqHao Android Malware Evolves with Auto-Execution Capability

2054, Part V: From Tokyo With Love

Hands-on Review: Myrror Security Code-Aware and Attack-Aware SCA

New Coyote Trojan Targets 61 Brazilian Banks with Nim-Powered Attack

Wazuh in the Cloud Era: Navigating the Challenges of Cybersecurity

Stealthy Zardoor Backdoor Targets Saudi Islamic Charity Organizations

Fortinet Warns of Critical FortiOS SSL VPN Vulnerability Under Active Exploitation

India to make its digital currency programmable

Crime gang targeted jobseekers across Asia, looted two million email addresses

Warning: New Ivanti Auth Bypass Flaw Affects Connect Secure and ZTA Gateways

Uncle Sam sweetens the pot with $15M bounty on Hive ransomware gang members

FBI: Give us warrantless Section 702 snooping powers or China wins

~ 8 Feb 2024 ~

Fake LastPass lookalike made it into Apple App Store

The Far-Right's Favorite Web Host Has a Shadowy New Owner

London Underground Is Testing Real-Time AI Surveillance Tools to Spot Crime

Raspberry Robin devs are buying exploits for faster attacks

Microsoft Copilot for Security provides immediate impact for the Microsoft Defender Experts team

Cybercrime duo accused of picking $2.5M from Apple's orchard

Chinese Hackers Operate Undetected in U.S. Critical Infrastructure for Half a Decade

On Software Liabilities

Qolsys IQ Panel 4, IQ4 HUB

I Stopped Using Passwords. It's Greatand a Total Mess

2054, Part IV: A Nation Divided

Unified Identity look for the meaning behind the hype!

The buck stops here: Why the stakes are high for CISOs

HijackLoader Evolves: Researchers Decode the Latest Evasion Methods

Google Starts Blocking Sideloading of Potentially Dangerous Android Apps in Singapore

Coyote: A multi-stage banking Trojan abusing the Squirrel installer

Rust can help make software secure but it's no cure-all

Kimsuky's New Golang Stealer 'Troll' and 'GoBear' Backdoor Target South Korea

Critical Patches Released for New Flaws in Cisco, Fortinet, VMware Products

IT suppliers hacked off with Uncle Sam's demands in aftermath of cyberattacks

~ 7 Feb 2024 ~

Volt Typhoon not the only Chinese crew lurking in US energy, critical networks

Half of polled infosec pros say their degree was less than useful for real-world work

US says China's Volt Typhoon is readying destructive cyberattacks

From Cybercrime Saul Goodman to the Russian GRU

Iran's cyber operations in Israel a potential prelude to US election interference

Raspberry Pi Pico cracks BitLocker in under a minute

After FBI Takedown, KV-Botnet Operators Shift Tactics in Attempt to Bounce Back

Ransomware Payments Hit a Record $1.1 Billion in 2023

Critical Bootloader Vulnerability in Shim Impacts Nearly All Linux Distros

PAPERWALL: Chinese Websites Posing as Local News Outlets Target Global Audiences with Pro-Beijing Content

JetBrains urges swift patching of latest critical TeamCity flaw

Teaching LLMs to Be Deceptive

2054, Part III: The Singularity

New Webinar: 5 Steps to vCISO Success for MSPs and MSSPs