Port 22

~ 26 Jul 2024 ~

Friday Squid Blogging: Sunscreen from Squid Pigments

CrowdStrike meets Murphy's Law: Anything that can go wrong will

Compromising the Secure Boot Process

Progress discloses second critical flaw in Telerik Report Server in as many months

This AI-Powered Cybercrime Service Bundles Phishing Kits with Malicious Android Apps

A North Korean Hacker Tricked a US Security Vendor Into Hiring Himand Immediately Tried to Hack Them

Telegram for Android hit by a zero-day exploit Week in security with Tony Anscombe

Offensive AI: The Sine Qua Non of Cybersecurity

Europe Is Pumping Billions Into New Military Tech

U.S. DoJ Indicts North Korean Hacker for Ransomware Attacks on Hospitals

Ongoing Cyberattack Targets Exposed Selenium Grid Services for Crypto Mining

CrowdStrike Warns of New Phishing Scam Targeting German Customers

Critical Flaw in Telerik Report Server Poses Remote Code Execution Risk

North Korean chap charged for attacks on US hospitals, NASA and even China

Malware crew Stargazers Goblin used 3,000 GitHub accounts to make bank

Join the SANS Cloud Security Exchange 2024!

CrowdStrike update blunder may cost world billions and insurance ain't covering it all

~ 25 Jul 2024 ~

Beware of fake CrowdStrike domains pumping out Lumma infostealing malware

FYI: Data from deleted GitHub repos may not actually be deleted

The CrowdStrike Outage and Market-Driven Brittleness

Uncle Sam accuses telco IT pro of decade-long spying campaign for China

Onyx Sleet uses array of malware to gather intelligence for North Korea

North Korean Hackers Shift from Cyber Espionage to Ransomware Attacks

You should probably fix this 5-year-old critical Docker vuln fairly sharpish

Kaspersky says Uncle Sam snubbed proposal to open up its code for third-party review

Siemens SICAM Products

Positron Broadcast Signal Processor

At The 2024 Summer Olympics, AI Is Watching You

6 Types of Applications Security Testing You Must Know About

Data Wallets Using the Solid Protocol

Meta Removes 63,000 Instagram Accounts Linked to Nigerian Sextortion Scams

Webinar: Securing the Modern Workspace: What Enterprises MUST Know about Enterprise Browser Security

Researchers Reveal ConfusedFunction Vulnerability in Google Cloud Platform

Patch management still seemingly abysmal because no one wants the job

Critical Docker Engine Flaw Allows Attackers to Bypass Authorization Plugins

CISA Warns of Exploitable Vulnerabilities in Popular BIND 9 DNS Software

New Chrome Feature Scans Password-Protected Files for Malicious Content

How a cheap barcode scanner helped fix CrowdStrike'd Windows PCs in a flash

Fatal timeline of CrowdStrike's week from hell Feb to now

~ 24 Jul 2024 ~

Oops. Apple relied on bad code while flaming Google Chrome's Topics ad tech

Uncle Sam opens probe into CrowdStrike turbulence at Delta Air Lines

Zero Trust in the Age of AI: Join our online event to learn how to strengthen your security posture

Robot Dog Internet Jammer

Windows Patch Tuesday update might send a user to the BitLocker recovery screen

Data pilfered from Pentagon IT supplier Leidos

Telegram App Flaw Exploited to Spread Malware Hidden in Videos

How a Trust Center Solves Your Security Questionnaire Problem

A Hacker Ghost Network Is Quietly Spreading Malware on GitHub

This Machine Exposes Privacy Violations

How to Reduce SaaS Spend and Risk Without Impacting Productivity

Patchwork Hackers Target Bhutan with Advanced Brute Ratel C4 Tool

School gets an F for using facial recognition on kids in canteen

CrowdStrike Explains Friday Incident Crashing Millions of Windows Devices

Forget security Google's reCAPTCHA v2 is exploiting users for profit

Microsoft Defender Flaw Exploited to Deliver ACR, Lumma, and Meduza Stealers

CISA Adds Twilio Authy and IE Flaws to Exploited Vulnerabilities List

CrowdStrike blames a test software bug for that giant global mess it made

CrowdStrike blames a test software bug for that giant global mess it made

Security biz KnowBe4 hired fake North Korean techie, who got straight to work ... on evil

Philippines wipes out its legit online gambling industry to take down scammers

~ 23 Jul 2024 ~

How did a CrowdStrike config file crash millions of Windows computers? We take a closer look

Phish-Friendly Domain Registry .top Put on Notice

Administrators have update lessons to learn from the CrowdStrike outage

Protecting AI systems from cyber threats

Cybercrooks spell trouble with typosquatting domains amid CrowdStrike crisis

Alphabet's reported $23B bet on Wiz fizzles out

Chinese Hackers Target Taiwan and US NGO with MgBot Malware

Building cyber-resilience: Lessons learned from the CrowdStrike incident

National Instruments LabVIEW

National Instruments IO Trace

Hitachi Energy AFS/AFR Series Products

2017 ODNI Memo on Kaspersky Labs

New ICS Malware 'FrostyGoop' Targeting Critical Infrastructure

How to Securely Onboard New Employees Without Sharing Temporary Passwords

Magento Sites Targeted with Sneaky Credit Card Skimmer via Swap Files

Meta Given Deadline to Address E.U. Concerns Over 'Pay or Consent' Model

Ukrainian Institutions Targeted Using HATVIBE and CHERRYSPY Malware

The tap-estry of threats targeting Hamster Kombat players

How Russia-Linked Malware Cut Heat to 600 Ukrainian Buildings in Deep Winter

Securing AI around the world

Google Abandons Plan to Phase Out Third-Party Cookies in Chrome

How to Become an OSINT Investigator

Google's plan to drop third-party cookies in Chrome crumbles

~ 22 Jul 2024 ~

Global cops power down world's 'most prolific' DDoS dealership

LA County Superior Court closes doors to reboot justice after ransomware attack

Cybercrooks crafting solo careers in wake of ransomware takedowns

Oracle coughs up $115M to make privacy case go away

Experts Uncover Chinese Cybercrime Network Behind Gambling and Human Trafficking

EU gave CrowdStrike the keys to the Windows kernel, claims Microsoft

PINEAPPLE and FLUXROOT Hacker Groups Abuse Google Cloud for Credential Phishing

Two Russians sanctioned over cyberattacks on US critical infrastructure

How to Set up an Automated SMS Analysis Service with AI in Tines

Snake Mimics a Spider

MSPs & MSSPs: How to Increase Engagement with Your Cybersecurity Clients Through vCISO Reporting

The Pentagon Wants to Spend $141 Billion on a Doomsday Machine

Cursed tapes: Exploiting the EvilVideo vulnerability on Telegram for Android

SocGholish Malware Exploits BOINC Project for Covert Cyberattacks

New Linux Variant of Play Ransomware Targeting VMWare ESXi Systems

Cellebrite got into Trump shooter's Samsung device in just 40 minutes

Building a Zero Trust Framework: Key Strategies for 2024 and Beyond