Port 22

~ 14 Jan 2024 ~

Upcoming Speaking Engagements

New Findings Challenge Attribution in Denmark's Energy Sector Cyberattacks

~ 13 Jan 2024 ~

A Bloody Pig Mask Is Just Part of a Wild New Criminal Charge Against eBay

Critical RCE Vulnerability Uncovered in Juniper SRX Firewalls and EX Switches

29-Year-Old Ukrainian Cryptojacking Kingpin Arrested for Exploiting Cloud Services

Number of orgs compromised via Ivanti VPN zero-days grows as Mandiant weighs in

~ 12 Jan 2024 ~

Why we update... Data-thief malware exploits SmartScreen on unpatched Windows PCs

Friday Squid Blogging: Giant Squid from Newfoundland in the 1800s

Mobile security vulnerabilities threaten millions in Latin America: ICFP and Citizen Lab fellow Beau Kujath finds security vulnerabilities in mobile applications in Latin America region.

Exploit for under-siege SharePoint vuln reportedly in hands of ransomware crew

How to Stop Your X Account From Getting Hacked Like the SEC's

Secret multimillion-dollar cryptojacker snared by Ukrainian police

Microsoft is named a Leader in the 2023 Gartner Magic Quadrant for Endpoint Protection Platforms

Secure network operations for hybrid working

Lessons from SEC's X account hack Week in security with Tony Anscombe

Nation-State Actors Weaponize Ivanti VPN Zero-Days, Deploying 5 Malware Families

Medusa Ransomware on the Rise: From Data Leaks to Multi-Extortion

So, are we going to talk about how GitHub is an absolute boon for malware, or nah?

Urgent: GitLab Releases Patch for Critical Vulnerabilities - Update ASAP

Applying the Tyson Principle to Cybersecurity: Why Attack Simulation is Key to Avoiding a KO

On IoT Devices and Software Liability

Data regulator fines HelloFresh 140k for sending 80M+ spams

While we fire the boss, can you lock him out of the network?

Cryptominers Targeting Misconfigured Apache Hadoop and Flink with Rootkit in New Attacks

Drivers: We'll take that plain dumb car over a flashy data-spilling internet one, thanks

Act Now: CISA Flags Active Exploitation of Microsoft SharePoint Vulnerability

~ 11 Jan 2024 ~

eBay to cough up $3M after cyber-stalking couple who dared criticize the souk

Mandiant's brute-forced X account exposes perils of skimping on 2FA

Threat Actors Increasingly Abusing GitHub for Malicious Purposes

Infoseccers think attackers backed by China are behind Ivanti zero-day exploits

New PoC Exploit for Apache OfBiz Vulnerability Poses Risk to ERP Systems

New Python-based FBot Hacking Toolkit Aims at Cloud and SaaS Platforms

Child Abusers Are Getting Better at Using Crypto to Cover Their Tracks

Pharmacies Giving Patient Records to Police without Warrants

US School Shooter Emergency Plans Exposed in a Highly Sensitive Database Leak

There is a Ransomware Armageddon Coming for Us All

Atomic Stealer Gets an Upgrade - Targeting Mac Users with Encrypted Payload

A peek behind the curtain: How are sock puppet accounts used in OSINT?

Mandiant's X Account Was Hacked Using Brute-Force Attack

Chinese Hackers Exploit Zero-Day Flaws in Ivanti Connect Secure and Policy Secure

Cisco Fixes High-Risk Vulnerability Impacting Unity Connection Software

~ 10 Jan 2024 ~

Fidelity National now says 1.3M customers had data stolen by cyber-crooks

US government tells hospitals: Meet security standards or no federal dollars for you

Be honest. Would you pay off a ransomware crew?

Cybercrooks play dress-up as 'helpful' researchers in latest ransomware ruse

5 ways to secure identity and access for 2024

Lawmakers Are Out for Blood After a Hack of the SECs X Account Causes Bitcoin Chaos

ShinyHunters chief phisherman gets 3 years, must cough up $5M

NoaBot: Latest Mirai-Based Botnet Targeting SSH Servers for Crypto Mining

Heres Some Bitcoin: Oh, and Youve Been Served!

Facial Scanning by Burger King in Brazil

Getting off the Attack Surface Hamster Wheel: Identity Can Help

Free Decryptor Released for Black Basta and Babuk's Tortilla Ransomware Victims

Attack of the copycats: How fake messaging apps and app mods could bite you

FTC Bans Outlogic (X-Mode) From Selling Sensitive Location Data

Microsoft's January 2024 Windows Update Patches 48 New Vulnerabilities

CISA Flags 6 Vulnerabilities - Apple, Apache, Adobe , D-Link, Joomla Under Attack

~ 9 Jan 2024 ~

New year, new bugs in Windows, Adobe, Android, more to be fixed

The SEC's Official X Account Was Compromised and Used to Post Fake Bitcoin News

SEC Twitter hijacked to push fake news of hotly anticipated Bitcoin ETF approval

US Navy sailor swaps sea for cell after accepting bribes from Chinese snoops

Alert: Water Curupira Hackers Actively Distributing PikaBot Loader Malware

Turkish Hackers Exploiting Poorly Secured MS SQL Servers Across the Globe

And that's a wrap for Babuk Tortilla ransomware as free decryptor released

PIN-Stealing Android Malware