Port 22

~ 17 Oct 2024 ~

Russian RomCom Attacks Target Ukrainian Government with New SingleCamper RAT Variant

New macOS vulnerability, HM Surf, could lead to unauthorized data access

Sudanese Brothers Arrested in AnonSudan Takedown

Brazilian police claim they've cuffed serial cybercrook behind FBI and Airbus attacks

Researchers Uncover Cicada3301 Ransomware Operations and Its Affiliate Program

Mitsubishi Electric CNC Series

LCDS LAquis SCADA

Kieback&Peter DDC4000 Series

HMS Networks EWON FLEXY 202

Elvaco M-Bus Metering Gateway CMe3100

GPS Jamming Is Screwing With Norwegian Planes

This Prompt Can Make an AI Chatbot Identify and Extract Personal Details From Your Chats

SideWinder APT Strikes Middle East and Africa With Stealthy Multi-Stage Attack

SAS CTF and the many ways to persist a kernel shellcode on Windows 7

U.S. Charges Two Sudanese Brothers for Record 35,000 DDoS Attacks

WeChat devs introduced security flaws when they modded TLS, say researchers

Anonymous Sudan isn't any more: two alleged operators named, charged

Critical Kubernetes Image Builder Vulnerability Exposes Nodes to Root Access Risk

~ 16 Oct 2024 ~

US contractor pays $300k to settle accusation it didn't properly look after Medicare users' data

Critical default credential bug in Kubernetes Image Builder allows SSH root access

Volkswagen monitoring data dump threat from 8Base ransomware crew

SolarWinds critical hardcoded credential bug under active exploit

Chinas infosec leads accuse Intel of NSA backdoor, cite chip security flaws

Hacker Charged With Seeking to Kill Using Cyberattacks on Hospitals

Hackers Abuse EDRSilencer Tool to Bypass Security and Hide Malicious Activity

FIDO Alliance Drafts New Protocol to Simplify Passkey Transfers Across Different Platforms

From Misuse to Abuse: AI Risks and Attacks

Cheating at Conkers

North Korean ScarCruft Exploits Windows Zero-Day to Spread RokRAT Malware

5 Techniques for Collecting Cyber Threat Intelligence

Protecting children from grooming | Unlocked 403 cybersecurity podcast (ep. 7)

Strengthen your cybersecurity with automation

Internet Archive wobbles back online, with limited functionality

Astaroth Banking Malware Resurfaces in Brazil via Spear-Phishing Attack

IBM acquires Indian SaaS startup Prescinto to shine a light on renewable energy assets

GitHub Patches Critical Flaw in Enterprise Server Allowing Unauthorized Instance Access

CISA Warns of Active Exploitation in SolarWinds Help Desk Software Vulnerability

WhatsApp may expose the OS you use to run it which could expose you to crooks

The 2024 State of ICS/OT Cybersecurity: Our Past and Our Future

ICS/OT Cybersecurity & AI: Considerations for Now and the Future (Part II)

~ 15 Oct 2024 ~

Cisco confirms 'ongoing investigation' after crims brag about selling tons of data

Should We Chat, Too? FAQ

Should We Chat, Too? Security Analysis of WeChats MMTLS Encryption Protocol

Microsoft says more ransomware stopped before reaching encryption

TrickMo Banking Trojan Can Now Capture Android PINs and Unlock Patterns

New Malware Campaign Uses PureCrypter Loader to Deliver DarkVision RAT

New Linux Variant of FASTCash Malware Targets Payment Switches in ATM Heists

Escalating cyber threats demand stronger global defense and cooperation

Siemens Siveillance Video Camera

Schneider Electric Data Center Expert

More Details on Israel Sabotaging Hezbollah Pagers and Walkie-Talkies

The Rise of Zero-Day Vulnerabilities: Why Traditional Security Solutions Fall Short

It Seemed Like an AI Crime-Fighting Super Tool. Then Defense Attorneys Started Asking Questions

Millions of People Are Using Abusive AI Nudify Bots on Telegram

Beyond the Surface: the evolution and expansion of the SideWinder APT group

Quishing attacks are targeting electric car owners: Heres how to slam on the brakes

China Accuses U.S. of Fabricating Volt Typhoon to Hide Its Own Hacking Campaigns

Researchers Uncover Hijack Loader Malware Using Stolen Code-Signing Certificates

WordPress Plugin Jetpack Patches Major Vulnerability Affecting 27 Million Sites

AI amplifies systemic risk to financial sector, says India's Reserve Bank boss

China again claims Volt Typhoon hack gang was invented by the US to discredit it

~ 14 Oct 2024 ~

US healthcare org admits up to 400,000 people's personal info was snatched

Upcoming Speaking Engagements

Leveraging AI/ML for next-gen SOC environments

Trump campaign arms up with 'unhackable' phones after Iranian intrusion

The War on Passwords Is One Step Closer to Being Over

Thousands of Fortinet instances vulnerable to actively exploited flaw

Nation-State Attackers Exploiting Ivanti CSA Flaws for Network Infiltration

5 Steps to Boost Detection and Response in a Multi-Layered Cloud

Supply Chain Attacks Exploit Entry Points in Python, npm, and Open-Source Ecosystems

Perfectl Malware

THN Cybersecurity Recap: Top Threats, Tools and Trends (Oct 7 - Oct 13)

How to head off data breaches with CIAM

Aspiring digital defender? Explore cybersecurity internships, scholarships and apprenticeships

Critical Veeam Vulnerability Exploited to Spread Akira and Fog Ransomware

Whispers from the Dark Web Cave. Cyberthreats in the Middle East

Crypto-apocalypse soon? Chinese researchers find a potential quantum attack on classical encryption

~ 13 Oct 2024 ~

Schools bombarded by nation-state attacks, ransomware gangs, and everyone in between

OilRig Exploits Windows Kernel Flaw in Espionage Campaign Targeting UAE and Gulf

~ 12 Oct 2024 ~

The FBI Made a Crypto Coin Just to Catch Fraudsters

Pig Butchering Scams Are Going High Tech

A Mysterious Hacking Group Has 2 New Tools to Steal Data From Air-Gapped Machines

FBI Creates Fake Cryptocurrency to Expose Widespread Crypto Market Manipulation

US and UK govts warn: Russia scanning for your unpatched vulnerabilities

~ 11 Oct 2024 ~

INC ransomware rebrands to Lynx same code, new name, still up to no good

US lawmakers seek answers on alleged Salt Typhoon breach of telecom giants

Indian Fishermen Are Catching Less Squid

More on My AI and Democracy Book

GitHub, Telegram Bots, and QR Codes Abused in New Wave of Phishing Attacks

Microsofts guidance to help mitigate Kerberoasting

GoldenJackal jumps the air gap twice Week in security with Tony Anscombe

RAC duo busted for stealing and selling crash victims' data

Keir Starmer hands ex-Darktrace boss investment minister gig

IronNet Has Shut Down

How Hybrid Password Attacks Work and How to Defend Against Them

CISA Warns of Threat Actors Exploiting F5 BIG-IP Cookies for Network Reconnaissance

New Critical GitLab Vulnerability Could Allow Arbitrary CI/CD Pipeline Execution