Port 22

~ 16 Aug 2024 ~

Friday Squid Blog: The Market for Squid Oil Is Growing

After nearly 3B personal records leak online, Florida data broker confirms it was ransacked by cyber-thieves

Unicoin hints at potential data meddling after G-Suite compromise

The Slow-Burn Nightmare of the National Public Data Breach

Attackers Exploit Public .env Files to Breach Cloud and Social Media Accounts

Navigating the future of cybersecurity

Russian Hacker Jailed 3+ Years for Selling Stolen Credentials on Dark Web

Russian Hackers Using Fake Brand Sites to Spread DanaBot and StealC Malware

Multi-Stage ValleyRAT Targets Chinese Users with Advanced Tactics

The Hidden Security Gaps in Your SaaS Apps: Are You Doing Due Diligence?

New Windows IPv6 Zero-Click Vulnerability

How a BEC scam cost a company $60 Million Week in security with Tony Anscombe

New Banshee Stealer Targets 100+ Browser Extensions on Apple macOS Systems

Google Pixel Devices Shipped with Vulnerable App, Leaving Millions at Risk

Best Practices for Securing Your Network with Zero Trust Network Access

~ 15 Aug 2024 ~

NationalPublicData.com Hack Exposes a Nations Data

DARPA, ARPA-H award $14m to 7 AIxCC semifinalists, with a catch

Google raps Iran's APT42 for raining down spear-phishing attacks

Google raps Iran's APT42 for raining down spear-phishing attacks

NIST Releases First Post-Quantum Encryption Algorithms

SolarWinds Releases Patch for Critical Flaw in Web Help Desk Software

Nearly All Google Pixel Phones Exposed by Unpatched Flaw in Hidden Android App

Russian man who sold logins to nearly 3,000 accounts gets 40 months in jail

Tusk: unraveling a complex infostealer campaign

Siemens Teamcenter Visualization and JT2Go

Siemens SINEC Traffic Analyzer

Siemens SINEC NMS

Siemens SCALANCE M-800, RUGGEDCOM RM1224

Siemens NX

Siemens LOGO! V8.3 BM Devices

Siemens Location Intelligence

Siemens INTRALOG WMS

Siemens COMOS

PTC Kepware ThingWorx Kepware Server

AVEVA Historian Web Server

Russian-Linked Hackers Target Eastern European NGOs and Media

Identity Threat Detection and Response Solution Guide

RansomHub Group Deploys New EDR-Killing Tool in Latest Cyber Attacks

Mad Liberator extortion crew emerges on the cyber-crook scene

GitHub Vulnerability 'ArtiPACKED' Exposes Repositories to Potential Takeover

New Cyber Threat Targets Azerbaijan and Israel Diplomats, Stealing Sensitive Data

Over 40 million Kakao Pay users' data somehow ended up with Alipay

New Gafgyt Botnet Variant Targets Weak SSH Passwords for GPU Crypto Mining

China-linked cyber-spies infect Russian govt, IT sector

Zero Trust Content Security: A New Frontier in Safeguarding Unstructured Data

~ 14 Aug 2024 ~

A Single Iranian Hacker Group Targeted Both Presidential Campaigns, Google Says

Russian cyber snoops linked to massive credential-stealing campaign

Texas sues GM for selling driver data to analytics, insurance companies

Your Gym Locker May Be Hackable

Black Basta-Linked Attackers Target Users with SystemBC Malware

Enzo Biochem ordered to cough up $4.5 million over lousy security that led to ransomware disaster

Texas Sues GM for Collecting Driving Data without Consent

Upcoming Speaking Engagements

Palo Alto Networks execs apologize for 'hostesses' dressed as lamps at Black Hat booth

Belarusian-Ukrainian Hacker Extradited to U.S. for Ransomware and Cybercrime Charges

EastWind campaign: new CloudSorcerer attacks on government organizations in Russia

Rivers of Phish: Sophisticated Phishing Targets Russias Perceived Enemies Around the Globe

How to Augment Your Password Security with EASM

Want to Win a Bike Race? Hack Your Rivals Wireless Shifters

Is Lenovo a blind spot in US anti-China security measures?

DDoS Attacks Surge 46% in First Half of 2024, Gcore Report Reveals

Indian telcos to cut off scammy, spammy, telemarketers for two whole years

Microsoft Issues Patches for 90 Flaws, Including 10 Critical Zero-Day Exploits

Critical Flaw in Ivanti Virtual Traffic Manager Could Allow Rogue Admin Access

China-Backed Earth Baku Expands Cyber Attacks to Europe, Middle East, and Africa

NIST finalizes trio of post-quantum encryption standards

Navigating Zero Trust in the Hybrid Workforce: Insights from Industry Leaders

How to Become a Cyber Risk and Compliance Analyst

Patch Tuesday brings 90 new Microsoft CVEs, six already under exploit

Microsoft patches scary wormable hijack-my-box-via-IPv6 security bug and others

~ 13 Aug 2024 ~

Six 0-Days Lead Microsofts August 2024 Patch Push

Six ransomware gangs behind over 50% of 2024 attacks

US accuses man of being 'elite' ransomware pioneer they've hunted for years

Feds bust minor league Radar/Dispossessor ransomware gang

GhostWrite: New T-Head CPU Bugs Expose Devices to Unrestricted Attacks

Researchers Uncover Vulnerabilities in AI-Powered Azure Health Bot Service

APT trends report Q2 2024

Rockwell Automation Pavilion8

Rockwell Automation Micro850/870

Rockwell Automation GuardLogix/ControlLogix 5580 Controller

Rockwell Automation FactoryTalk View Site Edition

Rockwell Automation DataMosaix Private Cloud

Rockwell Automation ControlLogix, GuardLogix 5580, CompactLogix, Compact GuardLogix 5380

Rockwell Automation ControlLogix, GuardLogix 5580, CompactLogix, and Compact GuardLogix 5380

Rockwell Automation AADvance Standalone OPC-DA Server

Ocean Data Systems Dream Report

AVEVA SuiteLink Server

Orion SA says scammers conned company out of $60 million

On the Voynich Manuscript

Why Hardsec Matters: From Protecting Critical Services to Enhancing Resilience

Who uses LLM prompt injection attacks IRL? Mostly unscrupulous job seekers, jokesters and trolls

FBI Shuts Down Dispossessor Ransomware Group's Servers Across U.S., U.K., and Germany

Why scammers want your phone number

'Digital arrest' scams are big in India and may be spreading

Ukraine Warns of New Phishing Campaign Targeting Government Computers

AMD wont patch Sinkclose security bug on older Zen CPUs

Up and Running with Siftgrab

~ 12 Aug 2024 ~

Attacker steals personal data of 200k+ people with links to Arizona tech school

The great location leak: Privacy risks in dating apps

Mega money, unfathomable violence pervade thriving underground doxxing scene