Port 22

~ 26 Jun 2024 ~

Yahoo<i>!</i> Japan to waive $189 million ad revenue after detecting fraudulent clicks

Over 110,000 Websites Affected by Hijacked Polyfill Supply Chain Attack

Organized crime and domestic violence perps are big buyers of tracking devices

Microsoft blamed for million-plus patient record theft at US hospital giant

~ 25 Jun 2024 ~

If you're using Polyfill.io code on your site like 100,000+ are remove it immediately

Fiend touts stolen Neiman Marcus customer info for $150K

Crypto scammers circle back, pose as lawyers, steal an extra $10M in truly devious plan

How to boost your incident response readiness

CISA says crooks used Ivanti bugs to snoop around high-risk chemical facilities

The Julian Assange Saga Is Finally Over

UK and US cops band together to tackle Qilin's ransomware shakedowns

PTC Creo Elements/Direct License Server

ABB Ability System 800xA

Breaking the M-209

The Mystery of AI Gunshot-Detection Accuracy Is Finally Unraveling

New Attack Technique Exploits Microsoft Management Console Files

Cybersecurity in the SMB space a growing threat

Deepfake Creators Are Revictimizing GirlsDoPorn Sex Trafficking Survivors

How to Cut Costs with a Browser Security Platform

New Cyberthreat 'Boolka' Deploying BMANAGER Trojan via SQLi Attacks

Buying a VPN? Heres what to know and look for

Ransomware thieves beware

Protect your network

Wikileaks' Julian Assange Released from U.K. Prison, Heads to Australia

4 FIN9-linked Vietnamese Hackers Indicted in $71M U.S. Cybercrime Spree

Multiple WordPress Plugins Compromised: Hackers Create Rogue Admin Accounts

Julian Assange freed after agreeing to plead guilty to US charges

America's best chance for nationwide privacy law could do more harm than good

~ 24 Jun 2024 ~

Ollama drama as 'easy-to-exploit' critical flaw found in open source AI server

Job Opportunity: Informatics Security Analyst and Network Administrator

Car dealers stuck in the slow lane after cyber woes at software biz CDK

Google Introduces Project Naptime for AI-Powered Vulnerability Research

'Mirai-like' botnet observed attacking EOL Zyxel NAS devices

Critical RCE Vulnerability Discovered in Ollama AI Infrastructure Tool

Britain's Ministry of Defence accused of wasting 174M on 'external advice'

Ease the Burden with AI-Driven Threat Intelligence Reporting

Paul Nakasone Joins OpenAIs Board of Directors

Levi's and more affected in pants-dropping week of data breaches

Levi's and more affected in pants-dropping week of data breaches

XZ backdoor: Hook analysis

Red Tape Is Making Hospital Ransomware Attacks Worse

Meta and SQL Server make strange bedfellows on a couch of cyber-pain

RedJuliett Cyber Espionage Campaign Hits 75 Taiwanese Organizations

Techie took out a call center - and almost their career - with a cut and paste error

Multiple Threat Actors Deploying Open-Source Rafel RAT to Target Android Devices

Snowflake breach snowballs as more victims, perps, come forward

SANS Institute: Leading the Way in Artificial Intelligence and Machine Learning Cybersecurity Training

From Uncertainty to Strategy: A New Course to Master Cybersecurity Risk and Compliance

~ 23 Jun 2024 ~

Risk of getting malicious extension from Chrome store way worse than Google's letting on, study suggests

~ 22 Jun 2024 ~

ExCobalt Cyber Gang Targets Russian Sectors with New GoRed Backdoor

Warning: New Adware Campaign Targets Meta Quest App Seekers

A Catastrophic Hospital Hack Ends in a Leak of 300M Patient Records

From network security to nyet work in perpetuity: What's up with the Kaspersky US ban?

U.S. Treasury Sanctions 12 Kaspersky Executives Amid Software Ban

~ 21 Jun 2024 ~

Change Healthcare finally spills the tea on what medical data was stolen by cyber-crew

Friday Squid Blogging: Squid Nebula

Uncle Sam sanctions Kaspersky's top bosses but not Mr K himself

Perplexity Plagiarized Our Story About How Perplexity Is a Bullshit Machine

Phoenix UEFI flaw puts long list of Intel chips in hot seat

Why attack surfaces are expanding

Chinese Hackers Deploy SpiceRAT and SugarGh0st in Global Espionage Campaign

Military-themed Email Scam Spreads Malware to Infect Pakistani Users

The long-tail costs of a data breach Week in security with Tony Anscombe

Qilin cyber scum leak data they claim belongs to London hospitals pathology provider

Ross Andersons Memorial Service

Oyster Backdoor Spreading via Trojanized Popular Software Downloads

SolarWinds Serv-U Vulnerability Under Active Attack - Patch Immediately

Since joining NATO, Sweden claims Russia has been borking Nordic satellites

Coding error in forgotten API blamed for massive data breach

U.S. Bans Kaspersky Software, Citing National Security Risks

~ 20 Jun 2024 ~

Crooks get their hands on 500K+ radiology patients' records in cyber-attack

Biden puts a bullet in Kaspersky: Sales, updates to be banned in America

Car dealer software bigshot CDK pulls systems offline twice amid 'cyber incident'

US Bans Kaspersky Software

KrebsOnSecurity Threatened with Defamation Lawsuit Over Fake Radaris CEO

Crypto exchange Kraken accuses blockchain security outfit CertiK of extortion

Researchers Uncover UEFI Vulnerability Affecting Multiple Intel CPUs

French Diplomatic Entities Targeted in Russian-Linked Cyber Attacks

Russia's cyber spies still threatening French national security, democracy

Yokogawa CENTUM

Westermo L210-F2G

CAREL Boss-Mini

Recovering Public Keys from Signatures

Tool Overload: Why MSPs Are Still Drowning with Countless Cybersecurity Tools in 2024

Qilin: We knew our Synnovis attack would cause a healthcare crisis at London hospitals

Chinese Cyber Espionage Targets Telecom Operators in Asia Since 2021

My health information has been stolen. Now what?

New Rust-based Fickle Malware Uses PowerShell for UAC Bypass and Data Exfiltration

Experts Uncover New Evasive SquidLoader Malware Targeting Chinese Organizations

~ 19 Jun 2024 ~

New Blog Moderation Policy

Kraken Crypto Exchange Hit by $3 Million Theft Exploiting Zero-Day Flaw

Chinese Cyber Espionage Group Exploits Fortinet, Ivanti and VMware Zero-Days

Amtrak confirms crooks are breaking into user accounts, derailing email addresses

Perplexity Is a Bullshit Machine

The Hacking of Culture and the Creation of Socio-Technical Debt

New Case Study: Unmanaged GTM Tags Become a Security Nightmare

Void Arachne Uses Deepfakes and AI to Deliver Malicious VPNs to Chinese Users

Warning: Markopolo's Scam Targeting Crypto Users via Fake Meeting Software

This Is What Would Happen if China Invaded Taiwan

Hacktivism is evolving and that could be bad news for organizations everywhere