Port 22

~ 4 Jul 2024 ~

Twilio's Authy App Breach Exposes Millions of Phone Numbers

~ 3 Jul 2024 ~

Citizen Lab submission to the United Nations Special Rapporteur on human rights defenders: Challenges faced by women human rights defenders working in conflict, post-conflict or crisis-affected settings

The Not-So-Secret Network Access Broker x999xx

Traeger security bugs bad news for grillers with neighborly beef

New Open SSH Vulnerability

The Emerging Role of AI in Open-Source Intelligence

Proton Is Launching Encrypted Documents to Take On Google Docs

Microsoft MSHTML Flaw Exploited to Deliver MerkSpy Spyware Tool

No room for error: Dont get stung by these common Booking.com scams

FakeBat Loader Malware Spreads Widely Through Drive-by Download Attacks

Israeli Entities Targeted by Cyberattack Using Donut and Sliver Frameworks

South Korean ERP Vendor's Server Hacked to Spread Xctdoor Malware

~ 2 Jul 2024 ~

Digital attacks against exiled and diaspora women activists re:publica 2024

Vulnerabilities in PanelView Plus devices could lead to remote code execution

Affirm admits customer info pwned in ransomware raid at Evolve Bank

mySCADA myPRO

Johnson Controls Kantech Door Controllers

ICONICS and Mitsubishi Electric Products

Public Surveillance of Bars

The Tech Crash Course That Trains US Diplomats to Spot Threats

How MFA Failures are Fueling a 500% Surge in Ransomware Losses

New Intel CPU Vulnerability 'Indirector' Exposes Sensitive Data

AI in the workplace: The good, the bad, and the algorithmic

'Almost every Apple device' vulnerable to CocoaPods supply chain attack

Baddies hijack Korean ERP vendor's update systems to spew malware

Meta's 'Pay or Consent' Approach Faces E.U. Competition Rules Scrutiny

Chinese Hackers Exploiting Cisco Switches Zero-Day to Deliver Malware

Australian Man Charged for Fake Wi-Fi Scam on Domestic Flights

~ 1 Jul 2024 ~

Upcoming Book on AI and Democracy

Critical Flaws in CocoaPods Expose iOS and macOS Apps to Supply Chain Attacks

Nasty regreSSHion bug in OpenSSH puts around 700K Linux boxes at risk

CapraRAT Spyware Disguised as Popular Apps Threatens Android Users

Indian Software Firm's Products Hacked to Spread Data-Stealing Malware

Juniper Networks flings out emergency patches for perfect 10 router vuln

Model Extraction from Neural Networks

End-to-End Secrets Security: Making a Plan to Secure Your Machine Identities

New OpenSSH Vulnerability Could Lead to RCE as Root on Linux Systems

Poyfill.io claims reveal new cracks in supply chain, but how deep do they go?

Polyfill.io claims reveal new cracks in supply chain, but how deep do they go?

The Problem the US TikTok Crackdown and Kaspersky Ban Have in Common

CISA director: US is 'not afraid' to shout about Big Tech's security failings

Hijacked: How hacked YouTube channels spread scams and malware

Juniper Networks Releases Critical Security Update for Routers

Police allege evil twin of in-flight Wi-Fi used to steal passengers credentials

Indonesian government didn't have backups of ransomwared data, because DR was only an option

Microsoft tells yet more customers their emails have been stolen

Why NIS2 Alone Cant Solve Information Sharing Issues

~ 29 Jun 2024 ~

Google to Block Entrust Certificates in Chrome Starting November 2024

The US Wants to Integrate the Commercial Space Industry With Its Military to Prevent Cyber Attacks

Security News This Week: Google Is Piloting Face Recognition for Office Security

~ 28 Jun 2024 ~

Friday Squid Blogging: New Squid Species

CISA looked at C/C++ projects and found a lot of C/C++ code. Wanna redo any of it in Rust?

TeamViewer says Russia broke into its corp IT network

Quoras Chatbot Platform Poe Allows Users to Download Paywalled Articles on Demand

Kimsuky Using TRANSLATEXT Chrome Extension to Steal Sensitive Data

Unlock the future of security

Google cuts ties with Entrust in Chrome over trust issues

GitLab Releases Patch for Critical CI/CD Pipeline Vulnerability and 13 Others

Microsoft hits snooze again on security certificate renewal

Key trends shaping the threat landscape in H1 2024 Week in security with Tony Anscombe

8220 Gang Exploits Oracle WebLogic Server Flaws for Cryptocurrency Mining

James Bamford on Section 702 Extension

Combatting the Evolving SaaS Kill Chain: How to Stay Ahead of Threat Actors

Inside a Violent Gang's Ruthless Crypto-Stealing Home Invasion Spree

New SnailLoad Attack Exploits Network Latency to Spy on Users' Web Activities

Researchers Warn of Flaws in Widely Used Industrial Gas Analysis Equipment

'Skeleton Key' attack unlocks the worst of AI, says Microsoft

TeamViewer Detects Security Breach in Corporate IT Environment

Polyfill.io owner punches back at 'malicious defamation' amid domain shutdown

The Importance of Cyber Threat Intelligence: Insights from Recent Nobelium Attacks

TeamViewer can't bring itself to say someone broke into its network but it happened

~ 27 Jun 2024 ~

Amazon Is Investigating Perplexity Over Claims of Scraping Abuse

Surprise! The Latest 'Comprehensive' US Privacy Bill Is Doomed

Rust-Based P2PInfect Botnet Evolves with Miner and Ransomware Payloads

US lawmakers wave red flags over Chinese drone dominance

Yokogawa FAST/TOOLS and CI Server

TELSAT marKoni FM Transmitter

SDG Technologies PnPSCADA

Johnson Controls Illustra Essentials Gen 4

Johnson Controls Illustra Essentials Gen 4

Johnson Controls Illustra Essentials Gen 4

Johnson Controls Illustra Essentials Gen 4

The Secrets of Hidden AI Training on Your Data

Security Analysis of the EUs Digital Wallet

How to Use Python to Build Secure Blockchain Applications

ESET Threat Report H1 2024

Prompt Injection Flaw in Vanna AI Exposes Databases to RCE Attacks

Russian National Indicted for Cyber Attacks on Ukraine Before 2022 Invasion

Critical SQLi Vulnerability Found in Fortra FileCatalyst Workflow Application

Korean telco allegedly infected its P2P users with malware

A Visual Summary of SANS Neurodiversity in Cybersecurity Summit

WhisperGate suspect indicted as US offers a $10M bounty for his capture

~ 26 Jun 2024 ~

Feds put $5M bounty on 'CryptoQueen' Ruja Ignatova

US convicts crypto-robbing gang leader who kidnapped victims before draining their accounts

War Crime Prosecutions Enter a New Digital Age

Mitigating Skeleton Key, a new type of generative AI jailbreak technique

Working with a cybersecurity committee of the board

New MOVEit Transfer Vulnerability Under Active Exploitation - Patch ASAP!

Batten down the hatches, it's time to patch some more MOVEit bugs

Cyber insurance as part of the cyber threat mitigation strategy