Port 22

~ 2 Oct 2024 ~

California AI Safety Bill Vetoed

5 Must-Have Tools for Effective Dynamic Malware Analysis

'Patch yesterday': Zimbra mail servers under siege through RCE vuln

Finding a needle in a haystack: Machine learning at the forefront of threat hunting research

Andariel Hacking Group Shifts Focus to Financial Attacks on U.S. Organizations

Protecting private data in AI deployments

The fix for BGP's weaknesses has big, scary, issues of its own, boffins find

Researchers Sound Alarm on Active Attacks Exploiting Critical Zimbra Postjournal Flaw

PyPI Repository Found Hosting Fake Crypto Wallet Recovery Tools That Steal User Data

~ 1 Oct 2024 ~

ICE Signs $2 Million Contract With Spyware Maker Paragon Solutions

Euro cops arrest 4 including suspected LockBit dev chilling on holiday

Notorious Evil Corp Hackers Targeted NATO Allies for Russian Intelligence

AI-Powered Rhadamanthys Stealer Targets Crypto Wallets with Image Recognition

Cybersecurity Awareness Month: Securing our worldtogether

Evil Corp's deep ties with Russia and NATO member attacks exposed

NCA unmasks man it suspects is both 'Evil Corp kingpin' and LockBit affiliate

Why system resilience should mainly be the job of the OS, not just third-party applications

Optigo Networks ONS-S8 Spectra Aggregation Switch

Mitsubishi Electric MELSEC iQ-F FX5-OPC

Hacking ChatGPT by Planting False Memories into Its Data

5 Actionable Steps to Prevent GenAI Data Leaks Without Fully Blocking AI Usage

Key Group: another ransomware group using leaked builders

Cybersecurity Awareness Month needs a radical overhaul it needs legislation

Free Sniper Dz Phishing Tools Fuel 140,000+ Cyber Attacks Targeting User Credentials

New Cryptojacking Attack Targets Docker API to Create Malicious Swarm Botnet

U.K. Hacker Charged in $3.75 Million Insider Trading Scheme Using Hacked Executive Emails

Securing the Grid: Lessons from China's Cyberattacks on U.S. Providers

Australian e-tailer digiDirect customers' info allegedly stolen and dumped online

~ 30 Sep 2024 ~

Rackspace monitoring systems hit by zero-day

Ransomware forces hospital to turn away ambulances

T-Mobile US to cough up $31.5M after that long string of security SNAFUs

Crooked Cops, Stolen Laptops & the Ghost of UGNazi

If you're holding important data, Iran is probably trying spearphish it

THN Cybersecurity Recap: Last Week's Top Threats and Trends (September 23-29)

Remote ID verification tech is often biased, bungling, and no good on its own

Critical Flaws in Tank Gauge Systems Expose Gas Stations to Remote Attacks

Cloud threats have execs the most freaked out because they're not prepared

Session Hijacking 2.0 The Latest Way That Attackers are Bypassing MFA

AI and the 2024 US Elections

A Hacker's Era: Why Microsoft 365 Protection Reigns Supreme

The Pig Butchering Invasion Has Begun

Meta Fined 91 Million for Storing Millions of Facebook and Instagram Passwords in Plaintext

AI code helpers just can't stop inventing package names

Forget the Kia Boyz: Hackers could hijack your car with just a smartphone

Binance claims it helped to bust Chinese crypto scam app in India

A Visual Summary of SANS CloudSecNext Summit 2024

~ 29 Sep 2024 ~

Red team hacker on how she 'breaks into buildings and pretends to be the bad guy'

~ 28 Sep 2024 ~

The US Could Finally Ban Inane Forced Password Changes

Crypto Scam App Disguised as WalletConnect Steals $70K in Five-Month Campaign

U.S. Charges Three Iranian Nationals for Election Interference and Cybercrimes

~ 27 Sep 2024 ~

Feds charge 3 Iranians with 'hack-and-leak' of Trump 2024 campaign

Squid Fishing in Japan

Recall that Recall recall? Now Microsoft thinks it can make Windows feature palatable

Progress Software Releases Patches for 6 Flaws in WhatsUp Gold Patch Now

Ransomware gang using stolen Microsoft Entra ID creds to bust into the cloud

Gamaredon's operations under the microscope Week in security with Tony Anscombe

Critical Linux CUPS Printing System Flaws Could Allow Remote Command Execution

How to Plan and Prepare for Penetration Testing

Microsoft Identifies Storm-0501 as Major Threat in Hybrid Cloud Ransomware Attacks

NIST Recommends Some Common-Sense Password Rules

Teslas Cybertruck Goes, Inevitably, to War

Cybersecurity Certifications: The Gateway to Career Advancement

New HTML Smuggling Campaign Delivers DCRat Malware to Russian-Speaking Users

U.S. Sanctions Two Crypto Exchanges for Facilitating Cybercrime and Money Laundering

Critical NVIDIA Container Toolkit Vulnerability Could Grant Full Host Access to Attackers

Advanced Evidence Collection: DFIR's 2024 Mobile and Cloud Shift

~ 26 Sep 2024 ~

Patch now: Critical Nvidia bug allows container escape, complete host takeover

HPE patches three critical security holes in Aruba PAPI

That doomsday critical Linux bug: It's CUPS. May lead to remote hijacking of devices

Doomsday '9.9 RCE bug' could hit every Linux system

Storm-0501: Ransomware attacks expanding to hybrid cloud environments

Hackers Could Have Remotely Controlled Kia Cars Using Only License Plates

U.S. Indicts 2 Top Russian Hackers, Sanctions Cryptex

Securing intellectual property in AI-powered enterprises

Victims lose $70k to one single wallet-draining app on Google's Play Store

Overloaded with SIEM Alerts? Discover Effective Strategies in This Expert-Led Webinar

N. Korean Hackers Deploy New KLogEXE and FPSpy Malware in Targeted Attacks

Amid Air Strikes and Rockets, an SMS From the Enemy

goTenna Pro X and Pro X2

goTenna Pro ATAK Plugin

Atelmo Atemio AM 520 HD Full HD Satellite Receiver

Advantech ADAM-5630

Advantech ADAM-5550

An Analysis of the EUs Cyber Resilience Act

Millions of Vehicles Could Be Hacked and Tracked Thanks to a Simple Website Bug

EPSS vs. CVSS: Whats the Best Approach to Vulnerability Prioritization?

Watering Hole Attack on Kurdish Sites Distributing Malicious APKs and Spyware

Public Wi-Fi operator investigating cyberattack at UK's busiest train stations

Cyberespionage the Gamaredon way: Analysis of toolset used to spy on Ukraine in 2022 and 2023

UK government's bank data sharing plan slammed as 'financial snoopers' charter'

Threat landscape for industrial automation systems, Q2 2024

Cloudflare Warns of India-Linked Hackers Targeting South and East Asian Entities

Chinese Hackers Infiltrate U.S. Internet Providers in Cyber Espionage Campaign

WordPress.org denies service to WP Engine, potentially putting sites at risk

Practical Applications of GenAI in a SOC

~ 25 Sep 2024 ~

China's Salt Typhoon cyber spies are deep inside US ISPs

Microsoft is named a Leader in the 2024 Gartner Magic Quadrant for Endpoint Protection Platforms

RansomHub genius tries to put the squeeze on Delaware Libraries

Google's Shift to Rust Programming Cuts Android Memory Vulnerabilities by 52%

Timeshare Owner? The Mexican Drug Cartels Want You