Port 22

~ 17 Apr 2024 ~

Big Tech Squares Off Against US Spies

Attackers exploiting new critical OpenMetadata vulnerabilities on Kubernetes clusters

Russian APT Deploys New 'Kapeka' Backdoor in Eastern European Attacks

Exploit code for Palo Alto Networks zero-day now public

Using AI-Generated Legislative Amendments as a Delaying Technique

GenAI: A New Headache for SaaS Security Teams

Critical Atlassian Flaw Exploited to Deploy Linux Variant of Cerber Ransomware

Hackers Exploit Fortinet Flaw, Deploy ScreenConnect, Metasploit in New Campaign

OpenAI's GPT-4 can exploit real vulnerabilities by reading security advisories

SoumniBot: the new Android bankers unique techniques

Hackers Linked to Russias Military Claim Credit for Sabotaging US Water Utilities

Cisco Warns of Global Surge in Brute-Force Attacks Targeting VPN and SSH Services

Japanese government rejects Yahoo<i>!</i> infosec improvement plan

Enhancing Your Cyber Defense: Comparing Simulations and Tabletop Exercises

Fire in the Cisco! Networking giant's Duo MFA leaks message logs

~ 16 Apr 2024 ~

MGM says FTC can't possibly probe its ransomware downfall watchdog chief Lina Khan was a guest at the time

Change Healthcares New Ransomware Nightmare Goes From Bad to Worse

US Senate to Vote on a Wiretap Bill That Critics Call Stasi-Like

Alleged cryptojacker accused of stealing $3.5M from cloud to mine under $1M in crypto

New Microsoft guidance for the DoD Zero Trust Strategy

SIM swap crooks solicit T-Mobile US, Verizon staff via text to do their dirty work

OpenJS Foundation Targeted in Potential JavaScript Project Takeover Attempt

Open sourcerers say suspected xz-style attacks continue to target maintainers

TA558 Hackers Weaponize Images for Wide-Scale Malware Attacks

AWS, Google, and Azure CLI Tools Could Leak Credentials in Build Logs

Change Healthcares ransomware attack costs edge toward $1B so far

Rockwell Automation ControlLogix and GuardLogix

RoboDK RoboDK

Measuresoft ScadaPro

Electrolink FM/DAB/TV Transmitter

Who Stole 3.6M Tax Records from South Carolina?

Widely-Used PuTTY SSH Client Found Vulnerable to Key Recovery Attack

Identity in the Shadows: Shedding Light on Cybersecurity's Unseen Threats

X.com Automatically Changing Link Text but Not URLs

Google location tracking deal could be derailed by politics

The ABCs of how online ads can impact childrens well-being

FTC Fines Mental Health Startup Cerebral $7 Million for Major Privacy Violations

Hive RAT Creators and $3.5M Cryptojacking Mastermind Arrested in Global Crackdown

~ 15 Apr 2024 ~

CISA in a flap as Chirp smart door locks can be trivially unlocked remotely

Intel and Lenovo BMCs Contain Unpatched Lighttpd Server Flaw

Microsoft recognized as a Leader in the Forrester Wave: Workforce Identity Platform, Q1 2024

Roku makes 2FA mandatory for all after nearly 600K accounts pwned

Crickets from Chirp Systems in Smart Lock Key Leak

Delinea Secret Server customers should apply latest patches

AI Copilot: Launching Innovation Rockets, But Beware of the Darkness Ahead

Muddled Libra Shifts Focus to SaaS and Cloud for Extortion and Data Theft Attacks

US senator wants to put the brakes on Chinese EVs

New Lattice Cryptanalytic Technique

The US Government Has a Microsoft Problem

Timing is Everything: The Role of Just-in-Time Privileged Access in Security Evolution

Using the LockBit builder to generate targeted ransomware

Bitcoin scams, hacks and heists and how to avoid them

Chinese-Linked LightSpy iOS Spyware Targets South Asian iPhone Users

Palo Alto Networks Releases Urgent Fixes for Exploited PAN-OS Vulnerability

Identifying third-party risk

US House approves FISA renewal warrantless surveillance and all

Beyond Compliance: Leveraging NIS2 for Enhanced Cyber Resilience and Leadership Accountability

~ 14 Apr 2024 ~

Upcoming Speaking Engagements

How Israel Is Defending Against Iran's Drone Attack

~ 13 Apr 2024 ~

Ex-Security Engineer Jailed 3 Years for $12.3 Million Crypto Exchange Thefts

U.S. Treasury Hamas Spokesperson for Cyber Influence Operations

Space Force Is Planning a Military Exercise in Orbit

Roku Breach Hits 567,000 Users

Hackers Deploy Python Backdoor in Palo Alto Zero-Day Attack

~ 12 Apr 2024 ~

Zero-day exploited right now in Palo Alto Networks' GlobalProtect gateways

Friday Squid Blogging: The Awfulness of Squid Fishing Boats

Google One VPN axed for everyone but Pixel loyalists ... for now

House Votes to Extendand Expanda Major US Spy Program

Change Healthcare Faces Another Ransomware Threatand It Looks Credible

Popular Rust Crate liblzma-sys Compromised with XZ Utils Backdoor Files

Microsoft breach allowed Russian spies to steal emails from US government

eXotic Visit includes XploitSPY malware Week in security with Tony Anscombe

Code Keepers: Mastering Non-Human Identity Management

Smuggling Gold by Disguising it as Machine Parts

Iranian MuddyWater Hackers Adopt New C2 Tool 'DarkBeatC2' in Latest Campaign

Zero-Day Alert: Critical Palo Alto Networks PAN-OS Flaw Under Active Attack

XZ backdoor story Initial analysis

French issue <em>alerte rouge</em> after local governments knocked offline by cyber attack

Sneaky Credit Card Skimmer Disguised as Harmless Facebook Tracker

Apple stops warning of 'state-sponsored' attacks, now alerts about 'mercenary spyware'

U.S. Federal Agencies Ordered to Hunt for Signs of Microsoft Breach and Mitigate Risks

~ 11 Apr 2024 ~

Space Force boss warns 'the US will lose' without help from Musk and Bezos

Why CISA is Warning CISOs About a Breach at Sisense

How Microsoft discovers and mitigates evolving attacks against AI guardrails

96% of US hospital websites share visitor info with Meta, Google, data brokers

Siemens Telecontrol Server Basic

Siemens SINEC NMS

Siemens SIMATIC WinCC

Siemens SIMATIC S7-1500

Siemens Scalance W1750D

Siemens RUGGEDCOM APE1808 before V11.0.1

Siemens RUGGEDCOM APE1808

Siemens Parasolid

Rockwell Automation 5015-AENFTXT

DuckDuckGo Is Taking Its Privacy Fight to Data Brokers

TA547 Phishing Attack Hits German Firms with Rhadamanthys Stealer

Python's PyPI Reveals Its Secrets

Python's PyPI Reveals Its Secrets

Backdoor in XZ Utils That Almost Happened

Global taxi software vendor exposes details of nearly 300K across UK and Ireland