Port 22

~ 2 May 2024 ~

New Cuttlefish Malware Hijacks Router Connections, Sniffs for Cloud Credentials

A million Australian pubgoers wake up to find personal info listed on leak site

Unveiling the 2024 SANS | GIAC Cyber Workforce Research Report: Building and Sustaining Mid-Level Cybersecurity Roles

Dropbox dropped the ball on security, haemorrhaging customer and third-party info

Block accused of mass compliance failures that saw digi-dollars reach terrorists

~ 1 May 2024 ~

Microsoft named overall leader in KuppingerCole Leadership Compass for ITDR

Infosec biz boss accused of BS'ing the world about his career, anti-crime product, customers

Dirty stream attack: Discovering and mitigating a common vulnerability pattern in Android apps

US charges 16 over 'depraved' grandparent scams

The US Government Is Asking Big Tech to Promise Better Cybersecurity

Qantas app glitch sees boarding passes fly to other accounts

Bitcoin Forensic Analysis Uncovers Money Laundering Clusters and Criminal Proceeds

Android Malware Wpeeper Uses Compromised WordPress Sites to Hide C2 Servers

A Vast New Data Set Could Supercharge the AI Hunt for Crypto Money Laundering

AI Voice Scam

Everyone's an Expert: How to Empower Your Employees for Cybersecurity Success

ZLoader Malware Evolves with Anti-Analysis Trick from Zeus Banking Trojan

Ex-NSA Employee Sentenced to 22 Years for Trying to Sell U.S. Secrets to Russia

Open source programming language R patches critical arbitrary code exec flaw

~ 30 Apr 2024 ~

Cyber-bastard jailed for stealing psychotherapy files, blackmailing patients

UnitedHealth CEO: 'Decision to pay ransom was mine'

China Has a Controversial Plan for Brain-Computer Interfaces

The Dangerous Rise of GPS Attacks

NSA employee who tried and failed to spy for Russia gets 262 months in the slammer

The White House Has a New Master Plan to Stop Worst-Case Scenarios

Millions of Malicious 'Imageless' Containers Planted on Docker Hub Over 5 Years

Man Who Mass-Extorted Psychotherapy Patients Gets Six Years

European Commission starts formal probe of Meta over election misinformation

Delta Electronics CNCSoft-G2 DOPSoft

WhatsApp in India

U.S. Government Releases New AI Security Guidelines for Critical Infrastructure

MDR: Unlocking the power of enterprise-grade security for businesses of all sizes

Managed Detection and Response in 2023

Apple's 'incredibly private' Safari is not so private in Europe

New U.K. Law Bans Default Passwords on Smart Devices Starting April 2024

Deploying Multi Factor Authentication The What, How, and Why

~ 29 Apr 2024 ~

AT&T, Verizon, Sprint, T-Mobile US fined $200M for selling off people's location info

Google blocked 2.3M apps from Play Store last year for breaking the G law

FCC Fines Major U.S. Wireless Carriers for Selling Customer Location Data

Why space exploration is important for Earth and its future: Q&A with David Eicher

London Drugs closes all of its pharmacies following 'cybersecurity incident'

Google Prevented 2.28 Million Malicious Apps from Reaching Play Store in 2023

China-Linked 'Muddling Meerkat' Hijacks DNS to Map Internet on Global Scale

France willing to buy key Atos assets to keep them French

UK lays down fresh legislation banning crummy default device passwords

Whale Song Code

Navigating the Threat Landscape: Understanding Exposure Management, Pentesting, Red Teaming and RBVM

New R Programming Vulnerability Exposes Projects to Supply Chain Attacks

Watchdog reveals lingering Google Privacy Sandbox worries

Sandbox Escape Vulnerabilities in Judge0 Expose Systems to Complete Takeover

The next step up for high-impact identity authorization

Discord dismantles Spy.pet site that snooped on millions of users

Insane Incident Incursion Recursion: Mastering Incident Response Reporting Regulations

~ 28 Apr 2024 ~

Okta Warns of Unprecedented Surge in Proxy-Driven Credential Stuffing Attacks

~ 27 Apr 2024 ~

Ukraine Targeted in Cyberattack Exploiting 7-Year-Old Microsoft Office Flaw

School Employee Allegedly Framed a Principal With Racist Deepfake Rant

Russia Vetoed a UN Resolution to Ban Space Nukes

Bogus npm Packages Used to Trick Software Developers into Installing Malware

~ 26 Apr 2024 ~

Friday Squid Blogging: Searching for the Colossal Squid

Kaiser Permanente shared 13.4M people's data with Microsoft Bing, Google, others

Second time lucky for Thoma Bravo, which scoops up Darktrace for $5.3B

Severe Flaws Disclosed in Brocade SANnav SAN Management Software

Major phishing-as-a-service platform disrupted Week in security with Tony Anscombe

UK's Investigatory Powers Bill to become law despite tech world opposition

Long Article on GM Spying on Its Cars Drivers

10 Critical Endpoint Security Tips You Should Know

New 'Brokewell' Android Malware Spread Through Fake Browser Updates

Palo Alto Networks Outlines Remediation for Critical PAN-OS Flaw Under Attack

Four trends to top the CISOs packed agenda

Hackers Exploiting WP-Automatic Plugin Bug to Create Admin Accounts on WordPress Sites

Flaws in Chinese keyboard apps leave 750 million users open to snooping, researchers claim

Spring 2024 Update: Explore the Latest Enhancements to SANS FOR585: Smartphone Forensic Analysis In-Depth

~ 25 Apr 2024 ~

Cops cuff man for allegedly framing colleague with AI-generated hate speech clip

Ring dinged for $5.6M after, among other claims, rogue insider spied on 'pretty girls'

Two cuffed in Samourai Wallet crypto dirty money sting

North Korea's Lazarus Group Deploys New Kaolin RAT via Fake Job Lures

Investigating industrial control systems using Microsofts ICSpector open-source framework

Russia, Iran pose most aggressive threat to 2024 elections, say infoseccers

Siemens RUGGEDCOM APE1808 Devices Configured with Palo Alto Networks Virtual NGFW

Multiple Vulnerabilities in Hitachi Energy RTU500 Series

Honeywell Experion PKS, Experion LX, PlantCruise by Experion, Safety Manager, Safety Manager SC

Hitachi Energy MACH SCM

Network Threats: A Step-by-Step Attack Demonstration

The Rise of Large-Language-Model Optimization

DOJ Arrests Founders of Crypto Mixer Samourai for $2 Billion in Illegal Transactions

Gripped by Python: 5 reasons why Python is popular among cybersecurity professionals

What to do in the age of the critical breach

Google Postpones Third-Party Cookie Deprecation Amid U.K. Regulatory Scrutiny

Indian banks IT is so shabby its been banned from opening new accounts

State-Sponsored Hackers Exploit Two Cisco Zero-Day Vulnerabilities for Espionage

Australias spies and cops want accountable encryption - aka access to backdoors

~ 24 Apr 2024 ~

Governments issue alerts after 'sophisticated' state-backed actor found exploiting flaws in Cisco security boxes

Shouldn't Teams, Zoom, Slack all interoperate securely for the Feds? Wyden is asking

Microsoft cannot keep its own security in order, so what hope for its add-ons customers?

5 ways a CNAPP can strengthen your multicloud security environment

'ArcaneDoor' Cyberspies Hacked Cisco Firewalls to Access Government Networks

Management company settles for $18.4M after nuclear weapons plant staff fudged their timesheets

Google cools on cookie phase-out while regulators chew on plans

US charges Iranians with cyber snooping on government, companies

U.S. Treasury Sanctions Iranian Firms and Individuals Tied to Cyber Attacks