Port 22

~ 3 Sep 2024 ~

The Top 5 Items to Bring Along to a Live Training Event

~ 2 Sep 2024 ~

Owners of 1-Time Passcode Theft Service Plead Guilty

Telegram CEO was 'too free' on content moderation, says Russian minister

RansomHub Ransomware Group Targets 210 Victims Across Critical Sectors

SQL Injection Attack on Airport Security

Head Mare: adventures of a unicorn in Russia and Belarus

Webinar: Learn to Boost Cybersecurity with AI-Powered Vulnerability Management

Next-Generation Attacks, Same Targets - How to Protect Your Users' Identities

Malicious npm Packages Mimicking 'noblox.js' Compromise Roblox Developers Systems

Novel attack on Windows spotted in phishing campaign run from and targeting China

How to Prepare for Your Upcoming SANS Live Training Event

~ 31 Aug 2024 ~

Check your IP cameras: There's a new Mirai botnet on the rise

North Korean Hackers Deploy FudModule Rootkit via Chrome Zero-Day Exploit

Taylor Swift Concert Terror Plot Was Thwarted by Key CIA Tip

~ 30 Aug 2024 ~

RansomHub hits 210 victims in just 6 months

Friday Squid Blogging: Economic Fallout from Falklands Halting Squid Fishing

Green Berets storm building after hacking its Wi-Fi

Emile Dirks at the 2024 APSA Annual Meeting & Exhibition

North Korean threat actor Citrine Sleet exploiting Chromium zero-day

Tired of airport security queues? SQL inject yourself into the cockpit, claim researchers

Cyberattackers Exploit Google Sheets for Malware Control in Global Espionage Campaign

Iranian Hackers Set Up New Network to Target U.S. Political Campaigns

New Malware Masquerades as Palo Alto VPN Targeting Middle East Users

Breaking Down AD CS Vulnerabilities: Insights for InfoSec Professionals

North Korean Hackers Target Developers with Malicious npm Packages

SANS Institute Unveils Critical Infrastructure Strategy Guide for 2024: A Call to Action for Securing ICS/OT Environments

New Cyberattack Targets Chinese-Speaking Businesses with Cobalt Strike Payloads

Atlassian Confluence Vulnerability Exploited in Crypto Mining Campaigns

Iran hunts down double agents with fake recruiting sites, Mandiant reckons

~ 29 Aug 2024 ~

US indicts duo over alleged Swatting spree that targeted elected officials

Oh, great. Attacks developed by spyware vendors are being re-used by Russia's Cozy Bear cretins

Feds claim sinister sysadmin locked up thousands of Windows workstations, demanded ransom

Enhancing Cybersecurity and Resilience for Transnational Dissidents

Rock Chrome hard enough and get paid half a million

Vietnamese Human Rights Group Targeted in Multi-Year Cyberattack by APT32

Russian Hackers Exploit Safari and Chrome Flaws in High-Profile Cyberattack

Adm. Grace Hoppers 1982 NSA Lecture Has Been Published

Powerful Spyware Exploits Enable a New String of Watering Hole Attacks

Brain Cipher claims attack on Olympic venue, promises 300 GB data leak

Rockwell Automation ThinManager ThinServer

Delta Electronics DTN Soft

U.S. Agencies Warn of Iranian Hacking Group's Ongoing Ransomware Attacks

How AitM Phishing Attacks Bypass MFA and EDRand How to Fight Back

Unpatched AVTECH IP Camera Flaw Exploited by Hackers for Botnet Attacks

Google, Apple, and Discord Let Harmful AI 'Undress' Websites Use Their Sign-On Systems

French Authorities Charge Telegram CEO with Facilitating Criminal Activities on Platform

CrowdStrike's meltdown didn't dent its market dominance yet

~ 28 Aug 2024 ~

When Get-Out-The-Vote Efforts Look Like Phishing

Microsoft hosts a security summit but no press, public allowed

Proof-of-concept code released for zero-click critical Windows vuln

The art and science behind Microsoft threat hunting: Part 3

Iran's Pioneer Kitten hits US networks via buggy Check Point, Palo Alto gear

Dick's Sporting Goods discloses cyberattack

Fortra Issues Patch for High-Risk FileCatalyst Workflow Security Vulnerability

Notorious Iranian Hackers Have Been Targeting the Space Industry With a New Backdoor

Peach Sandstorm deploys new custom Tickler malware in long-running intelligence gathering operations

Stealing cash using NFC relay Week in Security with Tony Anscombe

APT-C-60 Group Exploit WPS Office Flaw to Deploy SpyGlace Backdoor

From Copilot to Copirate: How data thieves could hijack Microsoft's chatbot

Matthew Green on Telegrams Encryption

BlackByte Ransomware Exploits VMware ESXi Flaw in Latest Attack Wave

The ultimate dual-use tool for cybersecurity

Analysis of two arbitrary code execution vulnerabilities affecting WPS Office

Woman uses AirTags to nab alleged parcel-pinching scum

New QR Code Phishing Campaign Exploits Microsoft Sway to Steal Credentials

CISA Flags Critical Apache OFBiz Flaw Amid Active Exploitation Reports

Critical WPML Plugin Flaw Exposes WordPress Sites to Remote Code Execution

Chinese broadband satellites may be Beijing's flying spying censors, think tank warns

~ 27 Aug 2024 ~

Intel's Software Guard Extensions broken? Don't panic

Volt Typhoon suspected of exploiting Versa SD-WAN bug since June

macOS Version of HZ RAT Backdoor Targets Chinese Messaging App Users

New 0-Day Attacks Linked to Chinas Volt Typhoon

Microsoft security tools questioned for treating employees as threats

Chinese Volt Typhoon Exploits Versa Director Flaw, Targets U.S. and Global IT Sectors

CTEM in the Spotlight: How Gartner's New Categories Help to Manage Exposures

The Present and Future of TV Surveillance

HZ Rat backdoor for macOS attacks users of Chinas DingTalk and WeChat

Old devices, new dangers: The risks of unsupported IoT tech

Microsoft Fixes ASCII Smuggling Flaw That Enabled Data Theft from Microsoft 365 Copilot

Google Warns of CVE-2024-7965 Chrome Security Flaw Under Active Exploitation

~ 26 Aug 2024 ~

Telegram CEO Pavel Durov's Arrest Linked to Sweeping Criminal Investigation

Microsoft mistake blows up admins' inboxes with fake malware alerts

Watchdog warns FBI is sloppy on secure data storage and destruction

Seattle airport 'possible cyberattack' snarls travel yet again

AMD internal data reportedly offered for sale

How Microsoft Entra ID supports US government agencies in meeting identity security requirements

SonicWall Issues Critical Patch for Firewall Vulnerability Allowing Unauthorized Access

Dutch Regulator Fines Uber 290 Million for GDPR Violations in Data Transfers to U.S.

31.5M invoices, contracts, patient consent forms, and more exposed to the internet

US Federal Court Rules Against Geofence Warrants

Cognizant alleges Infosys swiped its trade secrets

Unpacking Slack Hacks: 6 Ways to Protect Sensitive Data with Secure Collaboration

Researchers Identify Over 20 Supply Chain Vulnerabilities in MLOps Platforms

Exploring Android threats and ways to mitigate them | Unlocked 403 cybersecurity podcast (ep.5)

Critical Flaws in Traccar GPS System Expose Users to Remote Attacks

New Android Malware NGate Steals NFC Data to Clone Contactless Payment Cards

Alleged Karakut ransomware scumbag charged in US

~ 25 Aug 2024 ~

Pavel Durov's Arrest Leaves Telegram Hanging in the Balance

Telegram Founder Pavel Durov Arrested in France for Content Moderation Failures

New Linux Malware 'sedexp' Hides Credit Card Skimmers Using Udev Rules