Port 22

~ 19 Sep 2024 ~

1 in 10 orgs dumping their security vendors after CrowdStrike outage

Join us at Microsoft Ignite 2024 and learn to build a security-first culture with AI

Hackers Exploit Default Credentials in FOUNDATION Software to Breach Construction Firms

FBI Shuts Down Chinese Botnet

First Israels Exploding Pagers Maimed and Killed. Now Comes the Paranoia

New Brazilian-Linked SambaSpy Malware Targets Italian Users via Phishing Emails

Thousands of orgs at risk of knowledge base data leaks via ServiceNow misconfigurations

Your Phone Wont Be the Next Exploding Pager

New TeamTNT Cryptojacking Campaign Targets CentOS Servers with Rootkit

UK activists targeted with Pegasus spyware ask police to charge NSO Group

Rockwell Automation RSLogix 5 and RSLogix 500

MegaSys Computer Technologies Telenium Online Web Application

Kastle Systems Access Control System

IDEC PLCs

IDEC CORPORATION WindLDR and WindO/I-NV4

Healthcare's Diagnosis is Critical: The Cure is Cybersecurity Hygiene

Microsoft Warns of New INC Ransomware Targeting U.S. Healthcare Sector

Influencing the influencers | Unlocked 403 cybersecurity podcast (ep. 6)

Tor insists its network is safe after German cops convict CSAM dark-web admin

GitLab Patches Critical SAML Authentication Bypass Flaw in CE and EE Editions

~ 18 Sep 2024 ~

New "Raptor Train" IoT Botnet Compromises Over 200,000 Devices Worldwide

FBI boss says China 'burned down' 260,000-device botnet when confronted by Feds

LockBit boasts of ransoming IRS-authorized eFile.com

Deja blues... LockBit boasts once again of ransoming IRS-authorized eFile.com

Putin really wants Trump back in the White House

Lebanon now hit with deadly walkie-talkie blasts as Israel declares new phase of war

Chinese spies spent months inside aerospace engineering firm's network via legacy IT

Walkie-Talkies Explode in New Attack on Hezbollah

How comprehensive security simplifies the defense of your digital estate

Chinese Engineer Charged in U.S. for Years-Long Cyber Espionage Targeting NASA and Military

Scam Funeral Streaming Groups Thrive on Facebook

Cops across the world arrest 51 in orchestrated takedown of Ghost crime platform

Why Pay A Pentester?

Exotic SambaSpy is now dancing with Italian users

North Korean Hackers Target Energy and Aerospace Industries with New MISTPEN Malware

Despite Russia warnings, Western critical infrastructure remains unprepared

Chrome Introduces One-Time Permissions and Enhanced Safety Check for Safer Browsing

Understanding cyber-incident disclosure

Did a Chinese University Hacking Competition Target a Real Victim?

GSMA Plans End-to-End Encryption for Cross-Platform RCS Messaging

Patch Issued for Critical VMware vCenter Flaw Allowing Remote Code Execution

Australian Police conducted supply chain attack on criminal collaborationware

Announcing the Biggest Update Ever to SEC510: Cloud Security Controls and Mitigations

WhatsApp fix to make View Once chats actually disappear is beaten in less than a week

~ 17 Sep 2024 ~

VMware patches over remote make-me-root holes in vCenter Server, Cloud Foundation

Google Cloud Document AI flaw (still) allows data theft despite bounty payout

The Mystery of Hezbollahs Deadly Exploding Pagers

At least nine dead, thousands hurt in Lebanon after Hezbollah pagers explode

Rhysida ransomware gang ships off Port of Seattle data for $6M

Remotely Exploding Pagers

Secure your organization

Predator spyware kingpins added to US sanctions list

Google Chrome Switches to ML-KEM for Post-Quantum Cryptography Defense

U.S. Treasury Sanctions Executives Linked to Intellexa Predator Spyware Operation

Yokogawa Dual-redundant Platform for Computer (PC2CKM)

Siemens SIMATIC S7-200 SMART Devices

Millbeck Communications Proroute H685t-w

Meta to Train AI Models Using Public U.K. Facebook and Instagram Posts

Python Developers Targeted with Malware During Fake Job Interviews

How to Investigate ChatGPT activity in Google Workspace

ESET Research Podcast: EvilVideo

Binance Warns of Rising Clipper Malware Attacks Targeting Cryptocurrency Users

SolarWinds Issues Patch for Critical ARM Vulnerability Enabling RCE Attacks

China claims Starlink signals can reveal stealth aircraft and what that really means

Chinese national accused by Feds of spear-phishing for NASA, military source code

Microsoft confirms IE bug squashed in Patch Tuesday was exploited zero-day

~ 16 Sep 2024 ~

Elon Musk Is a National Security Risk

The empire of C++ strikes back with Safe C++ blueprint

Snowflake slams 'more MFA' button again months after Ticketmaster, Santander breaches

Apples New Passwords App May Solve Your Login Nightmares

Legacy Ivanti Cloud Service Appliance Being Exploited

Germanys CDU still struggling to restore data months after June cyberattack

Google Fixes GCP Composer Flaw That Could've Led to Remote Code Execution

Prison just got rougher as band of heinously violent cybercrims sentenced to lengthy stints

North Korean Hackers Target Cryptocurrency Users on LinkedIn with RustDoor Malware

From Breach to Recovery: Designing an Identity-Focused Incident Response Playbook

Master Your PCI DSS v4 Compliance with Innovative Smart Approvals

AI security bubble already springing leaks

Chinas quantum* crypto tech may be unhackable, but it's hardly a secret

Apple Drops Spyware Case Against NSO Group, Citing Risk of Threat Intelligence Exposure

Cybercriminals Exploit HTTP Headers for Credential Theft via Large-Scale Phishing Attacks

23andMe settles class-action breach lawsuit for $30 million

~ 14 Sep 2024 ~

Upcoming Speaking Engagements

Security News This Week: A Creative Trick Makes ChatGPT Spit Out Bomb-Making Instructions

Ivanti Warns of Active Exploitation of Newly Patched Cloud Appliance Vulnerability

~ 13 Sep 2024 ~

Friday Squid Blogging: Squid as a Legislative Negotiating Tactic

Feeld dating app's security too open-minded as private data swings into public view

My TedXBillings Talk

Terrorgram Charges Show US Has Had Tools to Crack Down on Far-Right Terrorism All Along

Apple Vision Pro Vulnerability Exposed Virtual Keyboard Inputs to Attackers

17-Year-Old Arrested in Connection with Cyber Attack Affecting Transport for London

The Dark Nexus Between Harm Groups and The Com

TrickMo Android Trojan Exploits Accessibility Services for On-Device Banking Fraud

Say Goodbye to Phishing: Must-Haves to Eliminate Credential Theft

Progress WhatsUp Gold Exploited Just Hours After PoC Release for Critical Flaw

CosmicBeetle joins the ranks of RansomHub affiliates Week in security with Tony Anscombe

New Linux Malware Campaign Exploits Oracle Weblogic to Mine Cryptocurrency

Cambodian senator sanctioned by US over alleged forced labor cyber-scam camps

Australias government spent the week boxing Big Tech

Feds pull plug on domains linked to import of Chinese gun conversion devices