Port 22

~ 12 Apr 2024 ~

Google One VPN axed for everyone but Pixel loyalists ... for now

House Votes to Extendand Expanda Major US Spy Program

Change Healthcare Faces Another Ransomware Threatand It Looks Credible

Popular Rust Crate liblzma-sys Compromised with XZ Utils Backdoor Files

Microsoft breach allowed Russian spies to steal emails from US government

eXotic Visit includes XploitSPY malware Week in security with Tony Anscombe

Code Keepers: Mastering Non-Human Identity Management

Smuggling Gold by Disguising it as Machine Parts

Iranian MuddyWater Hackers Adopt New C2 Tool 'DarkBeatC2' in Latest Campaign

Zero-Day Alert: Critical Palo Alto Networks PAN-OS Flaw Under Active Attack

XZ backdoor story Initial analysis

French issue <em>alerte rouge</em> after local governments knocked offline by cyber attack

Sneaky Credit Card Skimmer Disguised as Harmless Facebook Tracker

Apple stops warning of 'state-sponsored' attacks, now alerts about 'mercenary spyware'

U.S. Federal Agencies Ordered to Hunt for Signs of Microsoft Breach and Mitigate Risks

~ 11 Apr 2024 ~

Space Force boss warns 'the US will lose' without help from Musk and Bezos

Why CISA is Warning CISOs About a Breach at Sisense

How Microsoft discovers and mitigates evolving attacks against AI guardrails

96% of US hospital websites share visitor info with Meta, Google, data brokers

Siemens Telecontrol Server Basic

Siemens SINEC NMS

Siemens SIMATIC WinCC

Siemens SIMATIC S7-1500

Siemens Scalance W1750D

Siemens RUGGEDCOM APE1808 before V11.0.1

Siemens RUGGEDCOM APE1808

Siemens Parasolid

Rockwell Automation 5015-AENFTXT

DuckDuckGo Is Taking Its Privacy Fight to Data Brokers

TA547 Phishing Attack Hits German Firms with Rhadamanthys Stealer

Python's PyPI Reveals Its Secrets

Python's PyPI Reveals Its Secrets

Backdoor in XZ Utils That Almost Happened

Global taxi software vendor exposes details of nearly 300K across UK and Ireland

Beyond fun and games: Exploring privacy risks in childrens apps

Apple Expands Spyware Alert System to Warn Users of Mercenary Attacks

Fortinet Rolls Out Critical Security Patches for FortiClientLinux Vulnerability

~ 10 Apr 2024 ~

It's 2024 and Intel silicon is still haunted by data-spilling Spectre

Trump Loyalists Kill Vote on US Wiretap Program

Twitters Clumsy Pivot to X.com Is a Gift to Phishers

'eXotic Visit' Spyware Campaign Targets Android Users in India and Pakistan

Rust rustles up fix for 10/10 critical command injection bug on Windows

Raspberry Robin Returns: New Malware Campaign Spreading Through WSF Files

Beware: GitHub's Fake Popularity Scam Tricking Developers into Downloading Malware

How to Stop Your Data From Being Used to Train AI

In Memoriam: Ross Anderson, 1956-2024

Hands-on Review: Cynomi AI-powered vCISO Platform

X fixes URL blunder that could enable convincing social media phishing campaigns

eXotic Visit campaign: Tracing the footprints of Virtual Invaders

Researchers Uncover First Native Spectre v2 Exploit Against Linux Kernel

Webinar: Learn How to Stop Hackers from Exploiting Hidden Identity Weaknesses

Turning the tide on third-party risk

Chrome Enterprise Premium promises extra security for a fee

Microsoft Fixes 149 Flaws in Huge April Patch Release, Zero-Days Included

Critical 'BatBadBut' Rust Vulnerability Exposes Windows Systems to Attacks

Microsoft squashes SmartScreen security bypass bug exploited in the wild

~ 9 Apr 2024 ~

Aprils Patch Tuesday Brings Record Number of Fixes

Section 702: The Future of the Biggest US Spy Program Hangs in the Balance

Got an unpatched LG 'smart' television? It could be watching you back

10-Year-Old 'RUBYCARP' Romanian Hacker Group Surfaces with Botnet

US Cyber Safety Review Board on the 2023 Microsoft Exchange Hack

Hackers Targeting Human Rights Activists in Morocco and Western Sahara

Researchers Discover LG Smart TV Vulnerabilities Allowing Root Access

UK businesses shockingly unaware of how to handle security threats

SUBNET PowerSYSTEM Server and Substation Server

CL0P's Ransomware Rampage - Security Measures for 2024

Attackers Using Obfuscation Tools to Deliver Multi-Stage Malware via Invoice Phishing

Critical Flaws Leave 92,000 D-Link NAS Devices Vulnerable to Malware Attacks

The Quest to Summit | SANS ICS Security Summit 2024

~ 8 Apr 2024 ~

US insurers use drone photos to deny home insurance policies

Home Depot confirms worker data leak after miscreant dumps info online

Puppies, kittens, data at risk after 'cyber incident' at veterinary giant

Google Chrome Adds V8 Sandbox - A New Defense Against Browser Attacks

Change Healthcare faces second ransomware dilemma weeks after ALPHV attack

AI Scam Calls: How to Protect Yourself, How to Detect

Watch Out for 'Latrodectus' - This Malware Could Be In Your Inbox

The Drop in Ransomware Attacks in 2024 and What it Means

Security Vulnerability of HTML Emails

7 reasons why cybercriminals want your personal data

Cybercriminals Targeting Latin America with Sophisticated Phishing Scheme

Head of Israeli cyber spy unit exposed ... by his own privacy mistake

Google Sues App Developers Over Fake Crypto Investment App Scam

~ 7 Apr 2024 ~

A Breakthrough Online Privacy Proposal Hits Congress

~ 6 Apr 2024 ~

What can be done to protect open source devs from next xz backdoor drama?

Best Privacy Browsers (2024): Brave, Safari, Ghostery, Firefox, DuckDuckGo

Hackers Exploit Magento Bug to Steal Payment Data from E-commerce Websites

Identity Thief Lived as a Different Man for 33 Years

~ 5 Apr 2024 ~

Friday Squid Blogging: SqUID Bots

US government excoriates Microsoft for 'avoidable errors' but keeps paying for its products

AI-as-a-Service Providers Vulnerable to PrivEsc and Cross-Tenant Attacks

Hotel check-in terminal bug spews out access codes for guest rooms

The devil is in the fine print Week in security with Tony Anscombe

CISO Perspectives on Complying with Cybersecurity Regulations

Maybe the Phone System Surveillance Vulnerabilities Will Be Fixed

From PDFs to Payload: Bogus Adobe Acrobat Reader Installers Distribute Byakugan Malware

New Wave of JSOutProx Malware Targeting Financial Firms in APAC and MENA

Researchers Identify Multiple China Hacker Groups Exploiting Ivanti Security Flaws

Academics probe Apple's privacy settings and get lost and confused

World's second-largest eyeglass lens-maker blinded by infosec incident

~ 4 Apr 2024 ~

Feds probe massive alleged classified US govt data theft and leak