Port 22

~ 25 Mar 2024 ~

Tech trade union confirms cyberattack behind IT, email outage

Mozilla fixes $100,000 Firefox zero-days following two-day hackathon

GoFetch security exploit can't be disabled on M1 and M2 Apple chips

Hackers Hijack GitHub Accounts in Supply Chain Attack Affecting Top-gg and Others

Key Lesson from Microsofts Password Spray Hack: Secure Every Account

Licensing AI Engineers

Cybersecurity starts at home: Help your children stay safe online with open conversations

Time to examine the anatomy of the British Library ransomware nightmare

Iran-Linked MuddyWater Deploys Atera for Surveillance in Phishing Attacks

That Asian meal you eat on holidays could launder money for North Korea

Microsoft confirms memory leak in March Windows Server security update

~ 24 Mar 2024 ~

Some 300,000 IPs vulnerable to this Loop DoS attack

Vans claims cyber crooks didn't run off with its customers' financial info

N. Korea-linked Kimsuky Shifts to Compiled HTML Help Files in Ongoing Cyberattacks

German Police Seize 'Nemesis Market' in Major International Darknet Raid

~ 23 Mar 2024 ~

Apple Chip Flaw Leaks Secret Encryption Keys

Russia's Cozy Bear caught phishing German politicos with phony dinner invites

Russian Hackers Use 'WINELOADER' Malware to Target German Political Parties

~ 22 Mar 2024 ~

Chinese snoops use F5, ConnectWise bugs to sell access into top US, UK networks

Friday Squid Blogging: New Species of Squid Discovered

Mozilla Drops Onerep After CEO Admits to Running People-Search Networks

3 million doors open to uninvited guests in keycard exploit

Hardware-level Apple Silicon vulnerability can leak cryptographic keys

New StrelaStealer Phishing Attacks Hit Over 100 Organizations in E.U. and U.S.

NVD slowdown leaves thousands of vulnerabilities without analysis data

AWS Patches Critical 'FlowFixation' Bug in Airflow Service to Prevent Session Hijacking

AceCryptor attacks surge in Europe Week in security with Tony Anscombe

China-Linked Group Breaches Networks via Connectwise, F5 Software Flaws

Massive Sign1 Campaign Infects 39,000+ WordPress Sites with Scam Redirects

Implementing Zero Trust Controls for Compliance

Google Pays $10M in Bug Bounties in 2023

U.S. Justice Department Sues Apple Over Monopoly and Messaging Security

Russian Hackers Target Ukrainian Telecoms with Upgraded 'AcidPour' Malware

Truck-to-truck worm could infect and disrupt entire US commercial fleet

~ 21 Mar 2024 ~

FBI v the bots: Feds urge denial-of-service defense after critical infrastructure alert

Apple's iMessage Encryption Puts Its Security Practices in the DOJ's Crosshairs

Microsoft faces bipartisan criticism for alleged censorship on Bing in China

Congress votes unanimously to ban brokers selling American data to enemies

Russia Hackers Using TinyTurla-NG to Breach European NGO's Systems

How Microsoft Incident Response and Microsoft Defender for Identity work together to detect and respond to cyberthreats

Yacht dealer to the stars attacked by Rhysida ransomware gang

Over 800 npm Packages Found with Discrepancies, 18 Exploitable to 'Manifest Confusion'

Hackers Found a Way to Open Any of 3 Million Hotel Keycard Locks in Seconds

AndroxGh0st Malware Targets Laravel Apps to Steal Cloud Credentials

UK council won't say whether two-week 'cyber incident' impacted resident data

How to Accelerate Vendor Risk Assessments in the Age of SaaS Sprawl

Public AI as an Alternative to Corporate AI

GitHub Launches AI-Powered Autofix Tool to Assist Devs in Patching Security Flaws

Making Sense of Operational Technology Attacks: The Past, Present, and Future

U.S. Sanctions Russians Behind 'Doppelganger' Cyber Influence Campaign

Exposed: Chinese smartphone farms that run thousands of barebones mobes to do crime

It's 2024 and North Korea's Kimsuky gang is exploiting Windows Help files

Ivanti Releases Urgent Fix for Critical Sentry RCE Vulnerability

Atlassian Releases Fixes for Over 2 Dozen Flaws, Including Critical Bamboo Bug

The Not-so-True People-Search Network from China

~ 20 Mar 2024 ~

It's tax season, and scammers are a step ahead of filers, Microsoft says

US task force aims to plug security leaks in water sector

Some of the Most Popular Websites Share Your Data With Over 1,500 Companies

London Clinic probes claim staffer tried to peek at Princess Kate's records

New 'Loop DoS' Attack Impacts Hundreds of Thousands of Systems

Serial extortionist of medical facilities pleads guilty to cybercrime charges

Stalkerware usage surging, despite data privacy concerns

Microsoft Threat Intelligence unveils targets and innovative tactics amidst tax season

Generative AI Security - Secure Your Business in a World Powered by LLMs

TeamCity Flaw Leads to Surge in Ransomware, Cryptomining, and RAT Attacks