Port 22

~ 2 Feb 2024 ~

Friday Squid Blogging: Illex Squid in Argentina Waters

Blackbaud settles with FTC after that IT breach exposed millions of people's info

David Kahn

Critical vulnerability in Mastodon is pounced upon by fast-acting admins

Russian APT28 Hackers Targeting High-Value Orgs with NTLM Relay Attacks

Grandoreiro banking malware disrupted Week in security with Tony Anscombe

DirtyMoe Malware Infects 2,000+ Ukrainian Computers for DDoS and Cryptojacking

Interpol's latest cybercrime intervention dismantles ransomware, banking malware servers

A Self-Enforcing Protocol to Solve Gerrymandering

Former CIA Engineer Sentenced to 40 Years for Leaking Classified Documents

Cloudzy Elevates Cybersecurity: Integrating Insights from Recorded Future to Revolutionize Cloud Security

INTERPOL Arrests 31 in Global Operation, Identifies 1,900+ Ransomware-Linked IPs

Cloudflare Breach: Nation-State Hackers Access Source Code and Internal Docs

Wikileaks source and former CIA worker Joshua Schulte sentenced to 40 years jail

Managing the hidden risks of shadow APIs

Cloudflare sheds more light on Thanksgiving security breach in which tokens, source code accessed by suspected spies

~ 1 Feb 2024 ~

The Mystery of the $400 Million FTX Heist May Have Been Solved

Rise of deepfake threats means biometric security measures won't be enough

Arrests in $400M SIM-Swap Tied to Heist at FTX?

Connect with Microsoft at these cybersecurity events in 2024

A Startup Allegedly Hacked the World. Then Came the Censorshipand Now the Backlash

Biden will veto attempts to rip up SEC breach reporting rule

3 new ways the Microsoft Intune Suite offers security, simplification, and savings

FritzFrog Returns with Log4Shell and PwnKit, Spreading Malware Inside Your Network

LockBit shows no remorse for ransomware attack on children's hospital

Exposed Docker APIs Under Attack in 'Commando Cat' Cryptojacking Campaign

Facebooks Extensive Surveillance Network

Why the Right Metrics Matter When it Comes to Vulnerability Management

HeadCrab 2.0 Goes Fileless, Targeting Redis Servers for Crypto Mining

VajraSpy: A Patchwork of espionage apps

Confirming Large-Scale Pegasus Surveillance of Jordan-based Civil Society

Warning: New Malware Emerges in Attacks Exploiting Ivanti VPN Vulnerabilities

CISA Warns of Active Exploitation of Critical Vulnerability in iOS, iPadOS, and macOS

Congress told how Chinese attackers plan to incite 'societal chaos' in the US

YouTube, Discord, and Lord of the Rings Led Police to a Teen Accused of a US Swatting Spree

RunC Flaws Enable Container Escapes, Granting Attackers Host Access

~ 31 Jan 2024 ~

FBI confirms it issued remote kill command to blow out Volt Typhoon's botnet

Ransomware payment rates drop to new low only 29% of victims are forking over cash

Nearly 4-year-old Cisco vuln linked to recent Akira ransomware attacks

We know nations are going after critical systems, but what happens when crims join in?

Ivanti releases patches for VPN zero-days, discloses two more high-severity vulns

Alert: Ivanti Discloses 2 New Zero-Day Flaws, One Under Active Exploitation

Telegram Marketplaces Fuel Phishing Attacks with Easy-to-Use Kits and Malware

CFPBs Proposed Data Rules

Apple and Google Just Patched Their First Zero-Day Flaws of the Year

The SEC Won't Let CISOs Be: Understanding New SaaS Cybersecurity Rules

Italian Businesses Hit by Weaponized USBs Spreading Cryptojacking Malware

ESET Research Podcast: ChatGPT, the MOVEit hack, and Pandora

ICS and OT threat predictions for 2024

Chinese Hackers Exploiting VPN Flaws to Deploy KrustyLoader Malware

New Glibc Flaw Grants Attackers Root Access on Major Linux Distros

Continuous Purple Teaming: A Practical Approach for Strengthening Your Offensive Capabilities

~ 30 Jan 2024 ~

New Images of Colossus Released

Fla. Man Charged in SIM-Swapping Spree is Key Suspect in Hacker Groups Oktapus, Scattered Spider

US shorts China's Volt Typhoon crew targeting America's criticals

Jenkins jitters as 45,000 servers still vulnerable to RCE attacks after patch released

Brazilian Feds Dismantle Grandoreiro Banking Trojan, Arresting Top Operatives

URGENT: Upgrade GitLab - Critical Workspace Creation Flaw Allows File Overwrite

Reg story prompts fresh security bulletin, review of Juniper Networks' CVE process

China-Linked Hackers Target Myanmar's Top Ministries with Backdoor Blitz

NSA Buying Bulk Surveillance Data on Americans without a Warrant

Robots Are Fighting Robots in Russia's War in Ukraine

ESET takes part in global operation to disrupt the Grandoreiro banking trojan

Top Security Posture Vulnerabilities Revealed

Italian Data Protection Watchdog Accuses ChatGPT of Privacy Violations