Port 22

~ 15 Oct 2024 ~

Should We Chat, Too? Security Analysis of WeChats MMTLS Encryption Protocol

Microsoft says more ransomware stopped before reaching encryption

TrickMo Banking Trojan Can Now Capture Android PINs and Unlock Patterns

New Malware Campaign Uses PureCrypter Loader to Deliver DarkVision RAT

New Linux Variant of FASTCash Malware Targets Payment Switches in ATM Heists

Escalating cyber threats demand stronger global defense and cooperation

Siemens Siveillance Video Camera

Schneider Electric Data Center Expert

More Details on Israel Sabotaging Hezbollah Pagers and Walkie-Talkies

The Rise of Zero-Day Vulnerabilities: Why Traditional Security Solutions Fall Short

It Seemed Like an AI Crime-Fighting Super Tool. Then Defense Attorneys Started Asking Questions

Millions of People Are Using Abusive AI Nudify Bots on Telegram

Beyond the Surface: the evolution and expansion of the SideWinder APT group

Quishing attacks are targeting electric car owners: Heres how to slam on the brakes

China Accuses U.S. of Fabricating Volt Typhoon to Hide Its Own Hacking Campaigns

Researchers Uncover Hijack Loader Malware Using Stolen Code-Signing Certificates

WordPress Plugin Jetpack Patches Major Vulnerability Affecting 27 Million Sites

AI amplifies systemic risk to financial sector, says India's Reserve Bank boss

China again claims Volt Typhoon hack gang was invented by the US to discredit it

~ 14 Oct 2024 ~

US healthcare org admits up to 400,000 people's personal info was snatched

Upcoming Speaking Engagements

Leveraging AI/ML for next-gen SOC environments

Trump campaign arms up with 'unhackable' phones after Iranian intrusion

The War on Passwords Is One Step Closer to Being Over

Thousands of Fortinet instances vulnerable to actively exploited flaw

Nation-State Attackers Exploiting Ivanti CSA Flaws for Network Infiltration

5 Steps to Boost Detection and Response in a Multi-Layered Cloud

Supply Chain Attacks Exploit Entry Points in Python, npm, and Open-Source Ecosystems

Perfectl Malware

THN Cybersecurity Recap: Top Threats, Tools and Trends (Oct 7 - Oct 13)

How to head off data breaches with CIAM

Aspiring digital defender? Explore cybersecurity internships, scholarships and apprenticeships

Critical Veeam Vulnerability Exploited to Spread Akira and Fog Ransomware

Whispers from the Dark Web Cave. Cyberthreats in the Middle East

Crypto-apocalypse soon? Chinese researchers find a potential quantum attack on classical encryption

~ 13 Oct 2024 ~

Schools bombarded by nation-state attacks, ransomware gangs, and everyone in between

OilRig Exploits Windows Kernel Flaw in Espionage Campaign Targeting UAE and Gulf

~ 12 Oct 2024 ~

The FBI Made a Crypto Coin Just to Catch Fraudsters

Pig Butchering Scams Are Going High Tech

A Mysterious Hacking Group Has 2 New Tools to Steal Data From Air-Gapped Machines

FBI Creates Fake Cryptocurrency to Expose Widespread Crypto Market Manipulation

US and UK govts warn: Russia scanning for your unpatched vulnerabilities

~ 11 Oct 2024 ~

INC ransomware rebrands to Lynx same code, new name, still up to no good

US lawmakers seek answers on alleged Salt Typhoon breach of telecom giants

Indian Fishermen Are Catching Less Squid

More on My AI and Democracy Book

GitHub, Telegram Bots, and QR Codes Abused in New Wave of Phishing Attacks

Microsofts guidance to help mitigate Kerberoasting

GoldenJackal jumps the air gap twice Week in security with Tony Anscombe

RAC duo busted for stealing and selling crash victims' data

Keir Starmer hands ex-Darktrace boss investment minister gig

IronNet Has Shut Down

How Hybrid Password Attacks Work and How to Defend Against Them

CISA Warns of Threat Actors Exploiting F5 BIG-IP Cookies for Network Reconnaissance

New Critical GitLab Vulnerability Could Allow Arbitrary CI/CD Pipeline Execution

Bohemia and Cannabia Dark Web Markets Taken Down After Joint Police Operation

FBI created a cryptocurrency so it could watch it being abused

Healthcare attacks spread beyond US just ask India's Star Health

~ 10 Oct 2024 ~

Crooks stole personal info of 77k Fidelity Investments customers

Secure your AI initiatives

Fore-get about privacy, golf tech biz leaves 32M data records on the fairway

CISA adds fresh Ivanti vuln, critical Fortinet bug to hall of shame

OpenAI Blocks 20 Global Malicious Campaigns Using AI for Cybercrime and Disinformation

Experts Warn of Critical Unpatched Vulnerability in Linear eMerge E3 Systems

Siemens Tecnomatix Plant Simulation

Siemens Teamcenter Visualization and JT2Go

Siemens SINEC Security Monitor

Siemens Simcenter Nastran

Siemens SIMATIC S7-1500 CPUs

Siemens SIMATIC S7-1500 and S7-1200 CPUs

Siemens Sentron Powercenter 1000

Siemens SENTRON PAC3200 Devices

Siemens RUGGEDCOM APE1808

Siemens Questa and ModelSim

Siemens PSS SINCAL

Siemens JT2Go

Siemens HiMed Cockpit

Schneider Electric Zelio Soft 2

Rockwell Automation Verve Asset Manager

Rockwell Automation PowerFlex 6000T

Rockwell Automation Logix Controllers

Rockwell Automation DataMosaix Private Cloud

Rockwell Automation DataMosaix Private Cloud

Rockwell Automation ControlLogix

Delta Electronics CNCSoft-G2

Mozilla patches critical Firefox vuln that attackers are already exploiting

Deebot Robot Vacuums Are Using Photos and Audio to Train Their AI

Cyber Signals Issue 8 | Education under siege: How cybercriminals target our schools

6 Simple Steps to Eliminate SOC Analyst Burnout

Telekopye transitions to targeting tourists via hotel booking scam

How to enable secure use of AI

How should CISOs respond to the rise of GenAI?

Cybercriminals Use Unicode to Hide Mongolian Skimmer in E-Commerce Platforms

Dutch cops reveal takedown of 'world's largest dark web market'

CISA Warns of Critical Fortinet Flaw as Palo Alto and Cisco Issue Urgent Security Patches

Firefox Zero-Day Under Attack: Update Your Browser Immediately

Internet Archive Breach Exposes 31 Million Users

Internet Archive user info stolen in cyberattack, succumbs to DDoS

Internet Archive leaks user info and succumbs to DDoS

~ 9 Oct 2024 ~

Moscow-adjacent GoldenJackal gang strikes air-gapped systems with custom malware