Port 22

~ 7 May 2024 ~

China-Linked Hackers Used ROOTROT Webshell in MITRE Network Intrusion

SUBNET Substation Server

PTC Codebeamer

The truth about KEV: CISAs vuln deadlines good influence on private-sector patching

New Case Study: The Malicious Comment

Physical security biz exposes 1.2M files via unprotected database

Google Simplifies 2-Factor Authentication Setup (It's More Important Than Ever)

Exploits and vulnerabilities in Q1 2024

Russian Operator of BTC-e Crypto Exchange Pleads Guilty to Money Laundering

Ransomware evolves from mere extortion to 'psychological attacks'

Google, Meta, Spotify break Apple's device fingerprinting rules new claim

~ 6 May 2024 ~

Fed-run LockBit site back from the dead and vows to really spill the beans on gang

Mastodon delays fix for link previews DDoSing websites

Consultant charged over $1.5M extortion scheme against IT giant

New capabilities to help you secure your AI transformation

Why Your VPN May Not Be As Secure As It Claims

Critical Tinyproxy Flaw Opens Over 50,000 Hosts to Remote Code Execution

China-Linked Hackers Suspected in ArcaneDoor Cyberattacks Targeting Network Devices

CISA says 'no more' to decades-old directory traversal bugs

Apples iPhone Spyware Problem Is Getting Worse. Heres What You Should Know

New Lawsuit Attempting to Make Adversarial Interoperability Legal

It Costs How Much?!? The Financial Pitfalls of Cyberattacks on SMBs

Xiaomi Android Devices Hit by Multiple Flaws Across Apps and System Components

Financial cyberthreats in 2023

The hackers toolkit: 4 gadgets that could spell security trouble

New 'Cuckoo' Persistent macOS Spyware Targeting Intel and Arm Macs

Germany points finger at Fancy Bear for widespread 2023 hacks, DDoS attacks

The Distinctive Worlds of OT Cybersecurity and IT Cybersecurity

~ 5 May 2024 ~

End-to-end encryption may be the bane of cops, but they can't close that Pandora's Box

Building a Cloud Security Flywheel: Lessons from the Field

~ 4 May 2024 ~

Dating apps kiss'n'tell all sorts of sensitive personal info

A New Surveillance Tool Invades Border Towns

Microsoft Outlook Flaw Exploited by Russia's APT28 to Hack Czech, German Entities

~ 3 May 2024 ~

Kaspersky hits back at claims it helped Russia develop military drone systems

Kaspersky accused of helping Russia develop military drone systems

Friday Squid Blogging: Squid Purses

My TED Talks

It may take decade to shore up software supply chain security, says infosec CEO

Pay up, or else? Week in security with Tony Anscombe

Security above all elseexpanding Microsofts Secure Future Initiative

Expert-Led Webinar - Uncovering Latest DDoS Tactics and Learn How to Fight Back

Hackers Increasingly Abusing Microsoft Graph API for Stealthy Malware Communications

Rare Interviews with Enigma Cryptanalyst Marian Rejewski

New Guide Explains How to Eliminate the Risk of Shadow SaaS and Protect Corporate Data

NSA, FBI Alert on N. Korean Hackers Spoofing Emails from Trusted Sources

These Dangerous Scammers Dont Even Bother to Hide Their Crimes

Google Announces Passkeys Adopted by Over 400 Million Accounts

Europol op shutters 12 scam call centers and cuffs 21 suspected fraudsters

Four Critical Vulnerabilities Expose HPE Aruba Devices to RCE Attacks

Indonesia sneakily buys spyware, claims Amnesty International

Chinese government website security is often worryingly bad, say Chinese researchers

How AI and ML are Changing Mobile Device Forensics Investigations

~ 2 May 2024 ~

Microsoft, Google do a victory lap around passkeys

Florida man gets 6 years behind bars for flogging fake Cisco kit to US military

Patch up 4 critical bugs in ArubaOS lead to remote code execution

New "Goldoon" Botnet Targets D-Link Routers With Decade-Old Flaw

Microsoft named an overall leader in KuppingerCole Leadership Compass for ITDR

The Breach of a Face Recognition Firm Reveals a Hidden Danger of Biometrics

Popular Android Apps Like Xiaomi, WPS Office Vulnerable to File Overwrite Flaw

Federal frenzy to patch gaping GitLab account takeover hole

Microsoft introduces passkeys for consumer accounts

Ukrainian REvil Hacker Sentenced to 13 Years and Ordered to Pay $16 Million

Delta Electronics DIAEnergie

CyberPower PowerPanel

The UK Bans Default Passwords

When is One Vulnerability Scanner Not Enough?

Dropbox Discloses Breach of Digital Signature Service Affecting All Users

Adding insult to injury: crypto recovery scams

Think tank: China's tech giants refine and define Beijing's propaganda push

REvil ransomware scum sentenced to almost 14 years inside, ordered to pay $16 million

CISA Warns of Active Exploitation of Severe GitLab Password Reset Vulnerability

Inside Ukraines Killer-Drone Startup Industry

New Cuttlefish Malware Hijacks Router Connections, Sniffs for Cloud Credentials

A million Australian pubgoers wake up to find personal info listed on leak site

Unveiling the 2024 SANS | GIAC Cyber Workforce Research Report: Building and Sustaining Mid-Level Cybersecurity Roles

Dropbox dropped the ball on security, haemorrhaging customer and third-party info

Block accused of mass compliance failures that saw digi-dollars reach terrorists

~ 1 May 2024 ~

Microsoft named overall leader in KuppingerCole Leadership Compass for ITDR

Infosec biz boss accused of BS'ing the world about his career, anti-crime product, customers

Dirty stream attack: Discovering and mitigating a common vulnerability pattern in Android apps

US charges 16 over 'depraved' grandparent scams

The US Government Is Asking Big Tech to Promise Better Cybersecurity

Qantas app glitch sees boarding passes fly to other accounts

Bitcoin Forensic Analysis Uncovers Money Laundering Clusters and Criminal Proceeds

Android Malware Wpeeper Uses Compromised WordPress Sites to Hide C2 Servers

A Vast New Data Set Could Supercharge the AI Hunt for Crypto Money Laundering

AI Voice Scam

Everyone's an Expert: How to Empower Your Employees for Cybersecurity Success

ZLoader Malware Evolves with Anti-Analysis Trick from Zeus Banking Trojan

Ex-NSA Employee Sentenced to 22 Years for Trying to Sell U.S. Secrets to Russia

Open source programming language R patches critical arbitrary code exec flaw

~ 30 Apr 2024 ~

Cyber-bastard jailed for stealing psychotherapy files, blackmailing patients

UnitedHealth CEO: 'Decision to pay ransom was mine'

China Has a Controversial Plan for Brain-Computer Interfaces

The Dangerous Rise of GPS Attacks

NSA employee who tried and failed to spy for Russia gets 262 months in the slammer

The White House Has a New Master Plan to Stop Worst-Case Scenarios

Millions of Malicious 'Imageless' Containers Planted on Docker Hub Over 5 Years

Man Who Mass-Extorted Psychotherapy Patients Gets Six Years

European Commission starts formal probe of Meta over election misinformation