Port 22

~ 8 Jul 2024 ~

Microsoft forgets about SwiftKey's support site

New Ransomware-as-a-Service 'Eldorado' Targets Windows and Linux Systems

Avast secretly gave DoNex ransomware decryptors to victims before crims vanished

5 Key Questions CISOs Must Ask Themselves About Their Cybersecurity Strategy

AI-Powered Super Soldiers Are More Than Just a Pipe Dream

Experts Warn of Mekotio Banking Trojan Targeting Latin American Countries

Navigating Europes digital identity crossroads

CloudSorcerer A new APT targeting Russian government entities

Critical Unpatched Flaws Disclosed in Popular Gogs Open-Source Git Service

Apple Removes VPN Apps from Russian App Store Amid Government Pressure

Selfie-based authentication raises eyebrows among infosec experts

Not-so-OpenAI allegedly never bothered to report 2023 data breach

A decade after collapsing, crypto exchange Mt Gox repays some investors

~ 6 Jul 2024 ~

Hackers Leaking Taylor Swift Tickets? Dont Get Your Hopes Up

~ 5 Jul 2024 ~

Friday Squid Blogging: Newly Discovered Vampire Squid

Devs claim Apple is banning VPNs in Russia 'more effectively' than Putin

Cancer patient forced to make terrible decision after Qilin attack on London hospitals

Latest Ghostscript vulnerability haunts experts as the next big breach enabler

Webinar Alert: Learn How ITDR Solutions Stop Sophisticated Identity Attacks

OVHcloud Hit with Record 840 Million PPS DDoS Attack Using MikroTik Routers

The Worlds Most Popular 3D-Printed Gun Was Designed by an Aspiring Terrorist

Blueprint for Success: Implementing a CTEM Operation

GootLoader Malware Still Active, Deploys New Versions for Enhanced Attacks

Europol says mobile roaming tech is making its job too hard

Polyfill[.]io Attack Impacts Over 380,000 Hosts, Including Major Companies

New Golang-Based Zergeca Botnet Capable of Powerful DDoS Attacks

~ 4 Jul 2024 ~

Social media and teen mental health Week in security with Tony Anscombe

How Apple Intelligences Privacy Stacks Up Against Androids Hybrid AI

Microsoft Uncovers Critical Flaws in Rockwell Automation PanelView Plus

Europol nukes nearly 600 IP addresses in Cobalt Strike crackdown

Brazil Halts Meta's AI Data Processing Amid Privacy Concerns

Ransomware scum who hit Indonesian government apologizes, hands over encryption key

Global Police Operation Shuts Down 600 Cybercrime Servers Linked to Cobalt Strike

Twilio's Authy App Breach Exposes Millions of Phone Numbers

~ 3 Jul 2024 ~

Citizen Lab submission to the United Nations Special Rapporteur on human rights defenders: Challenges faced by women human rights defenders working in conflict, post-conflict or crisis-affected settings

The Not-So-Secret Network Access Broker x999xx

Traeger security bugs bad news for grillers with neighborly beef

New Open SSH Vulnerability

The Emerging Role of AI in Open-Source Intelligence

Proton Is Launching Encrypted Documents to Take On Google Docs

Microsoft MSHTML Flaw Exploited to Deliver MerkSpy Spyware Tool

No room for error: Dont get stung by these common Booking.com scams

FakeBat Loader Malware Spreads Widely Through Drive-by Download Attacks

Israeli Entities Targeted by Cyberattack Using Donut and Sliver Frameworks

South Korean ERP Vendor's Server Hacked to Spread Xctdoor Malware

~ 2 Jul 2024 ~

Digital attacks against exiled and diaspora women activists re:publica 2024

Vulnerabilities in PanelView Plus devices could lead to remote code execution

Affirm admits customer info pwned in ransomware raid at Evolve Bank

mySCADA myPRO

Johnson Controls Kantech Door Controllers

ICONICS and Mitsubishi Electric Products

Public Surveillance of Bars

The Tech Crash Course That Trains US Diplomats to Spot Threats

How MFA Failures are Fueling a 500% Surge in Ransomware Losses

New Intel CPU Vulnerability 'Indirector' Exposes Sensitive Data

AI in the workplace: The good, the bad, and the algorithmic

'Almost every Apple device' vulnerable to CocoaPods supply chain attack

Baddies hijack Korean ERP vendor's update systems to spew malware

Meta's 'Pay or Consent' Approach Faces E.U. Competition Rules Scrutiny

Chinese Hackers Exploiting Cisco Switches Zero-Day to Deliver Malware

Australian Man Charged for Fake Wi-Fi Scam on Domestic Flights

~ 1 Jul 2024 ~

Upcoming Book on AI and Democracy

Critical Flaws in CocoaPods Expose iOS and macOS Apps to Supply Chain Attacks

Nasty regreSSHion bug in OpenSSH puts around 700K Linux boxes at risk

CapraRAT Spyware Disguised as Popular Apps Threatens Android Users

Indian Software Firm's Products Hacked to Spread Data-Stealing Malware

Juniper Networks flings out emergency patches for perfect 10 router vuln

Model Extraction from Neural Networks

End-to-End Secrets Security: Making a Plan to Secure Your Machine Identities

New OpenSSH Vulnerability Could Lead to RCE as Root on Linux Systems

Poyfill.io claims reveal new cracks in supply chain, but how deep do they go?

Polyfill.io claims reveal new cracks in supply chain, but how deep do they go?

The Problem the US TikTok Crackdown and Kaspersky Ban Have in Common

CISA director: US is 'not afraid' to shout about Big Tech's security failings

Hijacked: How hacked YouTube channels spread scams and malware

Juniper Networks Releases Critical Security Update for Routers

Police allege evil twin of in-flight Wi-Fi used to steal passengers credentials

Indonesian government didn't have backups of ransomwared data, because DR was only an option

Microsoft tells yet more customers their emails have been stolen

Why NIS2 Alone Cant Solve Information Sharing Issues

~ 29 Jun 2024 ~

Google to Block Entrust Certificates in Chrome Starting November 2024

The US Wants to Integrate the Commercial Space Industry With Its Military to Prevent Cyber Attacks

Security News This Week: Google Is Piloting Face Recognition for Office Security

~ 28 Jun 2024 ~

Friday Squid Blogging: New Squid Species

CISA looked at C/C++ projects and found a lot of C/C++ code. Wanna redo any of it in Rust?

TeamViewer says Russia broke into its corp IT network

Quoras Chatbot Platform Poe Allows Users to Download Paywalled Articles on Demand

Kimsuky Using TRANSLATEXT Chrome Extension to Steal Sensitive Data

Unlock the future of security

Google cuts ties with Entrust in Chrome over trust issues

GitLab Releases Patch for Critical CI/CD Pipeline Vulnerability and 13 Others

Microsoft hits snooze again on security certificate renewal

Key trends shaping the threat landscape in H1 2024 Week in security with Tony Anscombe

8220 Gang Exploits Oracle WebLogic Server Flaws for Cryptocurrency Mining

James Bamford on Section 702 Extension

Combatting the Evolving SaaS Kill Chain: How to Stay Ahead of Threat Actors

Inside a Violent Gang's Ruthless Crypto-Stealing Home Invasion Spree

New SnailLoad Attack Exploits Network Latency to Spy on Users' Web Activities

Researchers Warn of Flaws in Widely Used Industrial Gas Analysis Equipment

'Skeleton Key' attack unlocks the worst of AI, says Microsoft