Port 22

~ 10 Jan 2024 ~

NoaBot: Latest Mirai-Based Botnet Targeting SSH Servers for Crypto Mining

Heres Some Bitcoin: Oh, and Youve Been Served!

Facial Scanning by Burger King in Brazil

Getting off the Attack Surface Hamster Wheel: Identity Can Help

Free Decryptor Released for Black Basta and Babuk's Tortilla Ransomware Victims

Attack of the copycats: How fake messaging apps and app mods could bite you

FTC Bans Outlogic (X-Mode) From Selling Sensitive Location Data

Microsoft's January 2024 Windows Update Patches 48 New Vulnerabilities

CISA Flags 6 Vulnerabilities - Apple, Apache, Adobe , D-Link, Joomla Under Attack

~ 9 Jan 2024 ~

New year, new bugs in Windows, Adobe, Android, more to be fixed

The SEC's Official X Account Was Compromised and Used to Post Fake Bitcoin News

SEC Twitter hijacked to push fake news of hotly anticipated Bitcoin ETF approval

US Navy sailor swaps sea for cell after accepting bribes from Chinese snoops

Alert: Water Curupira Hackers Actively Distributing PikaBot Loader Malware

Turkish Hackers Exploiting Poorly Secured MS SQL Servers Across the Globe

And that's a wrap for Babuk Tortilla ransomware as free decryptor released

PIN-Stealing Android Malware

Why Public Links Expose Your SaaS Attack Surface

Love is in the AI: Finding love online takes on a whole new meaning

Alert: New Vulnerabilities Discovered in QNAP and Kyocera Device Manager

Beware! YouTube Videos Promoting Cracked Software Distribute Lumma Stealer

Cloud Attacks: Whats New is New Part 2

~ 8 Jan 2024 ~

Meet Ika & Sal: The Bulletproof Hosting Duo from Hell

Apache OFBiz zero-day pummeled by exploit attempts after disclosure

Syrian Hackers Distributing Stealthy C#-Based Silver RAT to Cybercriminals

British Library: Finances remain healthy as ransomware recovery continues

Second Interdisciplinary Workshop on Reimagining Democracy

Unifying Security Tech Beyond the Stack: Integrating SecOps with Managed Risk and Strategy

Webinar Leverage Zero Trust Security to Minimize Your Attack Surface

NIST Warns of Security and Privacy Risks from Rapid AI System Deployment

Facebook, Instagram now mine web links you visit to fuel targeted ads

DoJ Charges 19 Worldwide in $68 Million xDedic Dark Web Marketplace Fraud

North Korea's Cyber Heist: DPRK Hackers Stole $600 Million in Cryptocurrency in 2023

~ 6 Jan 2024 ~

23andMe Blames Users for Recent Data Breach as It's Hit With Dozens of Lawsuits

Ransomware payment ban: Wrong idea at the wrong time

Cracking the 2023 SANS Holiday Hack Challenge

Sea Turtle Cyber Espionage Campaign Targets Dutch IT and Telecom Companies

Pro-Iranian Hacker Group Targeting Albania with No-Justice Wiper Malware

~ 5 Jan 2024 ~

Friday Squid Blogging18th Anniversary Post: New Species of Pygmy Squid Discovered

After crippling cancer hospital with ransomware, crims threaten to swat patients

SpectralBlur: New macOS Backdoor Threat from North Korean Hackers

BreachForums boss busted for bond blunders including using a VPN

Cybersecurity trends and challenges to watch out for in 2024 Week in security with Tony Anscombe

Improving Shors Algorithm

How to Be More Anonymous Online

Exposed Secrets are Everywhere. Here's How to Tackle Them

Orange Spain Faces BGP Traffic Hijack After RIPE Account Hacked by Malware

Alert: Ivanti Releases Patch for Critical Vulnerability in Endpoint Manager Solution

Sandworm's Kyivstar attack should serve as a reminder of the Kremlin crew's 'global reach'

Russian Hackers Had Covert Access to Ukraine's Telecom Giant for Months

New Bandook RAT Variant Resurfaces, Targeting Windows Machines

Helping CTI Analysts Approach and Report on Emerging Technology Threats and Trends (Part 1)

~ 4 Jan 2024 ~

Best EDR Of The Market (BEOTM) Endpoint Detection and Response Testing Tool

X-ploited: Mandiant restores hijacked Twitter account after attempted crypto heist

Infosec experts divided over 23andMe's 'victim-blaming' stance on data breach

To Beat Russia, Ukraine Needs a Major Tech Breakthrough

Infostealer malware, weak password leaves Orange Spain RIPE for plucking

Three Ways To Supercharge Your Software Supply Chain Security

New iPhone Exploit Uses Four Zero-Days

Rockwell Automation FactoryTalk Activation

Mitsubishi Electric Factory Automation Products

As lawmakers mull outlawing poor security, what can they really do to tackle online gangs?

Beware: 3 Malicious PyPI Packages Found Targeting Linux with Crypto Miners

Lost and found: How to locate your missing devices and more

Three Chinese balloons float near Taiwanese airbase

UAC-0050 Group Using New Phishing Tactics to Distribute Remcos RAT

Mandiant's Twitter Account Restored After Six-Hour Crypto Scam Hack

Microsoft kills off Windows app installation from the web, again

Helping CTI Analysts Approach and Report on Emerging Technology Threats and Trends (Part 2)

~ 3 Jan 2024 ~

Freight giant Estes refuses to deliver ransom, says personal data opened and stolen

Atos confirms talks with Airbus over cybersecurity wing sale

Malware Using Google MultiLogin Exploit to Maintain Access Despite Password Reset

Copy that? Xerox confirms 'security incident' at subsidiary

Facial Recognition Systems in the US

5 Ways to Reduce SaaS Security Risks

SMTP Smuggling: New Flaw Lets Attackers Bypass Security and Spoof Emails

Say what you will? Your favorite speech-to-text app may be a privacy risk

Formal ban on ransomware payments? Asking orgs nicely to not cough up ain't working

DOJ Slams XCast with $10 Million Fine Over Massive Illegal Robocall Operation

~ 2 Jan 2024 ~

Google password resets not enough to stop these info-stealing malware strains

Court hearings become ransomware concern after justice system breach

TikTok Editorial Analysis

What Its Like to Use Apples Lockdown Mode

The Definitive Enterprise Browser Buyer's Guide

Google Settles $5 Billion Privacy Lawsuit Over Tracking Users in 'Incognito Mode'

Crypto-crook Sam Bankman-Fried spared a second trial

Beyond The Foundations: Diving into IAM in AWS

~ 1 Jan 2024 ~

New Variant of DLL Search Order Hijacking Bypasses Windows 10 and 11 Protections

New Terrapin Flaw Could Let Attackers Downgrade SSH Protocol Security

New JinxLoader Targeting Users with Formbook and XLoader Malware

Evolution of Cybercriminal Operations in 2023

~ 31 Dec 2023 ~

Google Fixes Nearly 100 Android Security Issues

~ 30 Dec 2023 ~

Beware: Scam-as-a-Service Aiding Cybercriminals in Crypto Wallet-Draining Attacks

~ 29 Dec 2023 ~

Happy 14th Birthday, KrebsOnSecurity!

Albanian Parliament and One Albania Telecom Hit by Cyber Attacks

AI Is Scarily Good at Guessing the Location of Random Photos

The Worst Hacks of 2023

CERT-UA Uncovers New Malware Wave Distributing OCEANMAP, MASEPIE, STEELHOOK

Friday Squid Blogging: Sqids

Kimsuky Hackers Deploying AppleSeed, Meterpreter, and TinyNuke in Latest Attacks