Port 22

~ 24 Jan 2024 ~

The Unknown Risks of The Software Supply Chain: A Deep-Dive

U.S., U.K., Australia Sanction Russian REvil Hacker Behind Medibank Breach

COVID-19 test lab accused of exposing 1.3 million patient records to open internet

GCHQ's NCSC warns of 'realistic possibility' AI will help state-backed malware evade detection

Patch Your GoAnywhere MFT Immediately - Critical Flaw Lets Anyone Be Admin

~ 23 Jan 2024 ~

HP CEO Says They Brick Printers That Use Third-Party Ink Because of Hackers

CISA boss swatted: 'While my own experience was certainly harrowing, it was unfortunately not unique'

Accused PII seller faces jail for running underground fraud op

VexTrio: The Uber of Cybercrime - Brokering Malware for 60+ Affiliates

Malicious NPM Packages Exfiltrate Hundreds of Developer SSH Keys via GitHub

Side Channels Are Common

UK water giant admits attackers broke into system as gang holds it to ransom

From Megabits to Terabits: Gcore Radar Warns of a New Era of DDoS Attacks

Break the fake: The race is on to stop AI voice cloning scams

BreachForums Founder Sentenced to 20 Years of Supervised Release, No Jail Time

~40,000 Attacks in 3 Days: Critical Confluence RCE Under Active Exploitation

Australia imposes cyber sanctions on Russian it says ransomwared health insurer

Apple Issues Patch for Critical Zero-Day in iPhones, Macs - Update Now

~ 22 Jan 2024 ~

Atlassian Confluence Server RCE attacks underway from 600+ IPs

Slug slimes aerospace biz AerCap with ransomware, brags about 1TB theft

Apple iOS 17.3: How to Turn on iPhone's New Stolen Device Protection

North Korean Hackers Weaponize Fake Research to Deliver RokRAT Backdoor

MavenGate Attack Could Let Hackers Hijack Java and Android via Abandoned Libraries

EFF adds Street Surveillance Hub so Americans can check who's checking on them

Ivanti and Juniper Networks accused of bending the rules with CVE assignments

Subway's data torpedoed by LockBit, ransomware gang claims

AI Bots on X (Twitter)

Cops Used DNA to Predict a Suspects Faceand Tried to Run Facial Recognition on It

NS-STEALER Uses Discord Bots to Exfiltrate Your Secrets from Popular Browsers

52% of Serious Vulnerabilities We Find are Related to Windows 10

ICO fines spam slinging financial services biz

Safeguarding against the global ransomware threat

Cracked software beats gold: new macOS backdoor stealing cryptowallets

FTC Bans InMarket for Selling Precise User Location Without Consent

Apache ActiveMQ Flaw Exploited in New Godzilla Web Shell Attacks

BreachForums admin 'Pompourin' sentenced to 20 years of supervised release

SANS 2023 Multicloud Survey: Navigating the Complexities of Multiple Clouds

~ 20 Jan 2024 ~

Fujitsu Bugs That Sent Innocent People to Prison Were Known From the Start

Fujitsu Bugs That Sent Innocent People to Prison Were Known From the Start

US Agencies Urged to Patch Ivanti VPNs That Are Actively Being Hacked

Chinese Hackers Silently Weaponized VMware Zero-Day Flaw for 2 Years

CISA Issues Emergency Directive to Federal Agencies on Ivanti Zero-Day Exploits

Microsoft's Top Execs' Emails Breached in Sophisticated Russia-Linked APT Attack

Invoice Phishing Alert: TA866 Deploys WasabiSeed & Screenshotter Malware

Russians invade Microsoft exec mail while China jabs at VMware vCenter Server

~ 19 Jan 2024 ~

Friday Squid Blogging: New Foods from Squid Fins

Five ripped off IT giant with $7M+ in bogus work expenses, prosecutors claim

Zelle Is Using My Name and Voice without My Consent

Canadian Man Stuck in Triangle of E-Commerce Fraud

Why many CISOs consider quitting Week in security with Tony Anscombe

Thieves steal 35.5M customers data from Vans sneakers maker

How to Opt Out of Comcasts Xfinity Storing Your Sensitive Data

Experts Warn of macOS Backdoor Hidden in Pirated Versions of Popular Software

Speaking to the CIAs Creative Writing Group

Preventing Data Loss: Backup and Recovery Strategies for Exchange Server Administrators

IT consultant fined for daring to expose shoddy security

U.S. Cybersecurity Agency Warns of Actively Exploited Ivanti EPMM Vulnerability

US agencies warn made-in-China drones might help Beijing snoop on the world

~ 18 Jan 2024 ~

JPMorgan exec claims bank repels 45 billion cyberattack attempts per day

Future of America's Cyber Safety Review Board hangs in balance amid calls for rethink

Job Opportunity: Communication Strategist

Ransomware attacks hospitalizing security pros, as one admits suicidal feelings

Microsoft at Legalweek: Secure data and gain efficiencies with Microsoft Purview eDiscovery enhanced by generative AI

New Docker Malware Steals CPU for Crypto & Drives Fake Website Traffic

Two more Citrix NetScaler bugs exploited in the wild