Port 22

~ 12 Sep 2024 ~

Siemens User Management Component (UMC)

Siemens SINUMERIK ONE, SINUMERIK 840D and SINUMERIK 828D

Siemens SIMATIC SCADA and PCS 7 Systems

Siemens Mendix Runtime

About that Windows Installer 'make me admin' security hole. Here's how it's exploited

Top 3 Threat Report Insights for Q2 2024

Iranian Cyber Group OilRig Targets Iraqi Government in Sophisticated Malware Attack

Ireland's Watchdog Launches Inquiry into Google's AI Data Practices in Europe

Apple Vision Pros Eye Tracking Exposed What People Type

Mind your header! There's nothing refreshing about phishers' latest tactic

NIS2, DORA, and Tiber-EU expanding cybersecurity regulation

If HDMI screen rips aren't good enough for you pirates, DeCENC is another way to beat web video DRM

Pokmon GO was an intelligence tool, claims Belarus military official

WordPress Mandates Two-Factor Authentication for Plugin and Theme Developers

Healthcare giant to pay $65M settlement after crooks stole and leaked nude patient pics

~ 11 Sep 2024 ~

Cyber crooks shut down UK, US schools, thousands of kids affected

Apple Intelligence Promises Better AI Privacy. Heres How It Actually Works

Major sales and ops overhaul leads to much more activity ... for Meow ransomware gang

Hunters International claims ransom on Chinese mega-bank's London HQ

Quad7 Botnet Expands to Target SOHO Routers and VPN Appliances

DragonRank Black Hat SEO Campaign Targeting IIS Servers Across Asia and Europe

So you paid a ransom demand and now the decryptor doesn't work

Singapore Police Arrest Six Hackers Linked to Global Cybercrime Syndicate

Evaluating the Effectiveness of Reward Modeling of Generative AI Systems

How $20 and a lapsed domain allowed security pros to undermine internet integrity

Why Is It So Challenging to Go Passwordless?

Mind the talent gap: Infosec vacancies abound, but hiring is flat

Developers Beware: Lazarus Group Uses Fake Coding Tests to Spread Malware

6 common Geek Squad scams and how to defend against them

Microsoft Issues Patches for 79 Flaws, Including 3 Actively Exploited Windows Flaws

Ivanti Releases Urgent Security Updates for Endpoint Manager Vulnerabilities

India to train 5000 'Cyber Commandos'

Microsoft says it broke some Windows 10 patching as it fixes flaws under attack

~ 10 Sep 2024 ~

Bug Left Some Windows PCs Dangerously Unpatched

Lex Gill at CBC Ideas at Crows Theatre: Making Justice Imaginable

CosmicBeetle Deploys Custom ScRansom Ransomware, Partnering with RansomHub

Crypto scams rake in $5.6B a year for cyberscum lowlifes, FBI says

Viessmann Climate Solutions SE Vitogate 300

Rockwell Automation SequenceManager

iniNet Solutions SpiderControl SCADA Web Server

Experts Identify 3 Chinese-Linked Clusters Behind Cyberattacks in Southeast Asia

Shining a Light on Shadow Apps: The Invisible Gateway to SaaS Data Breaches

New Chrome Zero-Day

New PIXHELL Attack Exploits Screen Noise to Exfiltrates Data from Air-Gapped Computers

Mustang Panda Deploys Advanced Malware to Spy on Asia-Pacific Governments

CosmicBeetle steps up: Probation period at RansomHub

Thanks, Edward Snowden: you propelled China to quantum networking leadership

Strengthen Your Supply Chain Security with Effective SBOM Management

Enhance your Cyber Threat Intelligence with the Admiralty System

~ 9 Sep 2024 ~

WhatsApp's 'View Once' could be 'View Whenever' due to a flaw

Russia's top-secret military unit reportedly plots undersea cable 'sabotage'

New RAMBO Attack Uses RAM Radio Signals to Steal Data from Air-Gapped Networks

Avis alerts nearly 300k car renters that crooks stole their info

1.7M potentially pwned after payment services provider takes a year to notice break-in

Strengthening enterprise storage against cyber threats

Kremlin-linked COLDRIVER crooks take pro-democracy NGOs for phishy ride

One More Tool Will Do It? Reflecting on the CrowdStrike Fallout

Blind Eagle Targets Colombian Insurance Sector with Customized Quasar RAT

Chinese Hackers Exploit Visual Studio Code in Southeast Asian Cyberattacks

Webinar: How to Protect Your Company from GenAI Data Leakage Without Losing Its Productivity Benefits

Australia Threatens to Force Companies to Break Encryption

Wing Security SaaS Pulse: Continuous Security & Actionable Insights For Free

What You Need to Know About Grok AI and Your Privacy

Progress Software Issues Patch for Vulnerability in LoadMaster and MT Hypervisor

Cybersecurity regulation stepping up

New Android SpyAgent Malware Uses OCR to Steal Crypto Wallet Recovery Keys

Loki: a new private agent for the popular Mythic framework

TIDRONE Espionage Group Targets Taiwan Drone Makers in Cyber Campaign

U.S. Offers $10 Million for Info on Russian Cadet Blizzard Hackers Behind Major Attacks

Predator spyware updated withn dangerous new features, also now harder to track

Why ICS Is the Business: Essential Cybersecurity Strategies for Critical Infrastructure

A Visual Summary of SANS AI Cybersecurity Summit 2024

~ 7 Sep 2024 ~

Despite cyberattacks, water security standards remain a pipe dream

Hackers Threaten to Leak Planned Parenthood Data

North Korean Threat Actors Deploy COVERTCATCH Malware via LinkedIn Job Scams

FBI Cracks Down on Dark Web Marketplace Managed by Russian and Kazakh Nationals

~ 6 Sep 2024 ~

Google says replacing C/C++ in firmware with Rust is easy

Live Video of Promachoteuthis Squid

Cisco merch shoppers stung in Magecart attack

Locked In, Locked Out: How Data Breaches Shatter Refugees Safety

SonicWall Urges Users to Patch Critical Firewall Flaw Amid Possible Exploitation

YubiKey Side-Channel Attack

GeoServer Vulnerability Targeted by Hackers to Deliver Backdoors and Botnet Malware

GitHub Actions Vulnerable to Typosquatting, Exposing Developers to Hidden Malicious Code

The NSA Has a PodcastHere's How to Decode It

Therapy Sessions Exposed by Mental Health Care Firms Unsecured Database

Bitcoin ATM scams skyrocket Week in security with Tony Anscombe

The State of the Virtual CISO Report: MSP/MSSP Security Strategies for 2025

To patch this server, we need to get someone drunk

Critical Security Flaw Found in LiteSpeed Cache Plugin for WordPress

Apache OFBiz Update Fixes High-Severity Flaw Leading to Remote Code Execution

Pavel Durov Criticizes Outdated Laws After Arrest Over Telegram Criminal Activity

~ 5 Sep 2024 ~

Homeland security hopes to scuttle maritime cyber-threats with port infosec testbed

White Houses new fix for cyber job gaps: Serve the nation in infosec

YubiKeys Are a Security Gold Standardbut They Can Be Cloned

US charges Russian GRU hackers behind WhisperGate intrusions

Cisco's Smart Licensing Utility flaws suggest it's pretty dumb on security

Russias Most Notorious Special Forces Unit Now Has Its Own Cyber Warfare Team

Chinese-Speaking Hacker Group Targets Human Rights Studies in Middle East

Veeam Releases Security Updates to Fix 18 Flaws, Including 5 Critical Issues