Port 22

~ 27 Jun 2024 ~

Prompt Injection Flaw in Vanna AI Exposes Databases to RCE Attacks

Russian National Indicted for Cyber Attacks on Ukraine Before 2022 Invasion

Critical SQLi Vulnerability Found in Fortra FileCatalyst Workflow Application

Korean telco allegedly infected its P2P users with malware

A Visual Summary of SANS Neurodiversity in Cybersecurity Summit

WhisperGate suspect indicted as US offers a $10M bounty for his capture

~ 26 Jun 2024 ~

Feds put $5M bounty on 'CryptoQueen' Ruja Ignatova

US convicts crypto-robbing gang leader who kidnapped victims before draining their accounts

War Crime Prosecutions Enter a New Digital Age

Mitigating Skeleton Key, a new type of generative AI jailbreak technique

Working with a cybersecurity committee of the board

New MOVEit Transfer Vulnerability Under Active Exploitation - Patch ASAP!

Batten down the hatches, it's time to patch some more MOVEit bugs

Cyber insurance as part of the cyber threat mitigation strategy

The US Is Banning Kaspersky

Chinese and N. Korean Hackers Target Global Infrastructure with Ransomware

Practical Guidance For Securing Your Software Supply Chain

Apple Patches AirPods Bluetooth Vulnerability That Could Allow Eavesdropping

New Credit Card Skimmer Targets WordPress, Magento, and OpenCart Sites

New Medusa Android Trojan Targets Banking Users Across 7 Countries

Julian Assange pleads guilty, leaves courtroom a free man

Yahoo<i>!</i> Japan to waive $189 million ad revenue after detecting fraudulent clicks

Over 110,000 Websites Affected by Hijacked Polyfill Supply Chain Attack

Organized crime and domestic violence perps are big buyers of tracking devices

Microsoft blamed for million-plus patient record theft at US hospital giant

~ 25 Jun 2024 ~

If you're using Polyfill.io code on your site like 100,000+ are remove it immediately

Fiend touts stolen Neiman Marcus customer info for $150K

Crypto scammers circle back, pose as lawyers, steal an extra $10M in truly devious plan

How to boost your incident response readiness

CISA says crooks used Ivanti bugs to snoop around high-risk chemical facilities

The Julian Assange Saga Is Finally Over

UK and US cops band together to tackle Qilin's ransomware shakedowns

PTC Creo Elements/Direct License Server

ABB Ability System 800xA

Breaking the M-209

The Mystery of AI Gunshot-Detection Accuracy Is Finally Unraveling

New Attack Technique Exploits Microsoft Management Console Files

Cybersecurity in the SMB space a growing threat

Deepfake Creators Are Revictimizing GirlsDoPorn Sex Trafficking Survivors

How to Cut Costs with a Browser Security Platform

New Cyberthreat 'Boolka' Deploying BMANAGER Trojan via SQLi Attacks

Buying a VPN? Heres what to know and look for

Ransomware thieves beware

Protect your network

Wikileaks' Julian Assange Released from U.K. Prison, Heads to Australia

4 FIN9-linked Vietnamese Hackers Indicted in $71M U.S. Cybercrime Spree

Multiple WordPress Plugins Compromised: Hackers Create Rogue Admin Accounts

Julian Assange freed after agreeing to plead guilty to US charges

America's best chance for nationwide privacy law could do more harm than good

~ 24 Jun 2024 ~

Ollama drama as 'easy-to-exploit' critical flaw found in open source AI server

Job Opportunity: Informatics Security Analyst and Network Administrator

Car dealers stuck in the slow lane after cyber woes at software biz CDK

Google Introduces Project Naptime for AI-Powered Vulnerability Research

'Mirai-like' botnet observed attacking EOL Zyxel NAS devices

Critical RCE Vulnerability Discovered in Ollama AI Infrastructure Tool

Britain's Ministry of Defence accused of wasting 174M on 'external advice'

Ease the Burden with AI-Driven Threat Intelligence Reporting

Paul Nakasone Joins OpenAIs Board of Directors

Levi's and more affected in pants-dropping week of data breaches

Levi's and more affected in pants-dropping week of data breaches

XZ backdoor: Hook analysis

Red Tape Is Making Hospital Ransomware Attacks Worse

Meta and SQL Server make strange bedfellows on a couch of cyber-pain

RedJuliett Cyber Espionage Campaign Hits 75 Taiwanese Organizations

Techie took out a call center - and almost their career - with a cut and paste error

Multiple Threat Actors Deploying Open-Source Rafel RAT to Target Android Devices

Snowflake breach snowballs as more victims, perps, come forward

SANS Institute: Leading the Way in Artificial Intelligence and Machine Learning Cybersecurity Training

From Uncertainty to Strategy: A New Course to Master Cybersecurity Risk and Compliance

~ 23 Jun 2024 ~

Risk of getting malicious extension from Chrome store way worse than Google's letting on, study suggests

~ 22 Jun 2024 ~

ExCobalt Cyber Gang Targets Russian Sectors with New GoRed Backdoor

Warning: New Adware Campaign Targets Meta Quest App Seekers

A Catastrophic Hospital Hack Ends in a Leak of 300M Patient Records

From network security to nyet work in perpetuity: What's up with the Kaspersky US ban?

U.S. Treasury Sanctions 12 Kaspersky Executives Amid Software Ban

~ 21 Jun 2024 ~

Change Healthcare finally spills the tea on what medical data was stolen by cyber-crew

Friday Squid Blogging: Squid Nebula

Uncle Sam sanctions Kaspersky's top bosses but not Mr K himself

Perplexity Plagiarized Our Story About How Perplexity Is a Bullshit Machine

Phoenix UEFI flaw puts long list of Intel chips in hot seat

Why attack surfaces are expanding

Chinese Hackers Deploy SpiceRAT and SugarGh0st in Global Espionage Campaign

Military-themed Email Scam Spreads Malware to Infect Pakistani Users

The long-tail costs of a data breach Week in security with Tony Anscombe

Qilin cyber scum leak data they claim belongs to London hospitals pathology provider

Ross Andersons Memorial Service

Oyster Backdoor Spreading via Trojanized Popular Software Downloads

SolarWinds Serv-U Vulnerability Under Active Attack - Patch Immediately

Since joining NATO, Sweden claims Russia has been borking Nordic satellites

Coding error in forgotten API blamed for massive data breach

U.S. Bans Kaspersky Software, Citing National Security Risks

~ 20 Jun 2024 ~

Crooks get their hands on 500K+ radiology patients' records in cyber-attack

Biden puts a bullet in Kaspersky: Sales, updates to be banned in America

Car dealer software bigshot CDK pulls systems offline twice amid 'cyber incident'

US Bans Kaspersky Software

KrebsOnSecurity Threatened with Defamation Lawsuit Over Fake Radaris CEO

Crypto exchange Kraken accuses blockchain security outfit CertiK of extortion

Researchers Uncover UEFI Vulnerability Affecting Multiple Intel CPUs

French Diplomatic Entities Targeted in Russian-Linked Cyber Attacks

Russia's cyber spies still threatening French national security, democracy