Port 22

~ 8 Oct 2024 ~

New Case Study: The Evil Twin Checkout Page

The Value of AI-Powered Identity

GoldenJackal Target Embassies and Air-Gapped Systems Using Malware Toolsets

Cyber insurance, human risk, and the potential for cyber-ratings

Happy birthday, Putin you've been pwned

Pro-Ukrainian Hackers Strike Russian State TV on Putin's Birthday

Qualcomm Urges OEMs to Patch Critical DSP and WLAN Flaws Amid Active Exploits

Google brings better bricking to Androids, to curtail crims

Feds reach for sliver of crypto-cash nicked by North Korea's notorious Lazarus Group

~ 7 Oct 2024 ~

American Water stops billing for H2O due to 'cybersecurity incident'

American Water rinsed in cyberattack, turns off app

Cops love facial recognition, and withholding info on its use from the courts

Chinese cyberspies reportedly breached Verizon, AT&T, Lumen

Microsoft Defender for Cloud remediated threats 30% faster than other solutions, according to Forrester TEI study

Vulnerable APIs and Bot Attacks Costing Businesses Up to $186 Billion Annually

Largest Recorded DDoS Attack is 3.8 Tbps

Modernization of Authentication: Webinar on MFA, Passwords, and the Shift to Passwordless

Awaken Likho is awake: new techniques of an APT group

New Gorilla Botnet Launches Over 300,000 DDoS Attacks Across 100 Countries

Critical Apache Avro SDK Flaw Allows Remote Code Execution in Java Applications

THN Cybersecurity Recap: Top Threats and Trends (Sep 30 - Oct 6)

Google Blocks Unsafe Android App Sideloading in India for Improved Fraud Protection

Mind the (air) gap: GoldenJackal gooses government guardrails

Embattled users worn down by privacy options? Let them eat code

E.U. Court Limits Meta's Use of Personal Facebook Data for Targeted Ads

~ 5 Oct 2024 ~

Stealthy Malware Has Infected Thousands of Linux Systems for Years

The FBI Still Hasnt Cracked NYC Mayor Eric Adams Phone

Ryanair faces GDPR turbulence over customer ID checks

UK's Sellafield nuke waste processing plant fined 333K for infosec blunders

Apple Releases Critical iOS and iPadOS Updates to Fix VoiceOver Password Vulnerability

~ 4 Oct 2024 ~

Friday Squid Blogging: Map of All Colossal Squid Sightings

About a quarter million Comcast subscribers had their data stolen from debt collector

About a quarter million Comcast subscribers had data stolen from debt collector

U.S. and Microsoft Seize 107 Russian Domains in Major Cyber Fraud Crackdown

The complexities of attack attribution Week in security with Tony Anscombe

Apple fixes bug that let VoiceOver shout your passwords

This Video Game Controller Has Become the US Militarys Weapon of Choice

How to Get Going with CTEM When You Don't Know Where to Start

Cloudflare Thwarts Largest-Ever 3.8 Tbps DDoS Attack Targeting Global Sectors

WordPress LiteSpeed Cache Plugin Security Flaw Exposes Sites to XSS Attacks

Visit CyberThreat 2024 to hone your cybersecurity skills

Scam Information and Event Management

Harvard duo hacks Meta Ray-Bans to dox strangers on sight in seconds

Big names among thousands infected by payment-card-stealing CosmicSting crooks

HUMINT and its Role within Cybersecurity

~ 3 Oct 2024 ~

Android 14 Adds New Security Features to Block 2G Exploits and Baseband Attacks

Disrupting COLDRIVER: U.S. court orders seizure of domains used in Russian cyberattacks

DOJ, Microsoft seize 107 domains used in Russia's Star Blizzard phishing attacks

The Secret Weakness Execs Are Overlooking: Non-Human Identities

New Perfctl Malware Targets Linux Servers for Cryptocurrency Mining and Proxyjacking

Average North American CISO salary now $565K, mainly thanks to one weird trick

A Single Cloud Compromise Can Feed an Army of AI Sex Bots

North Korean Hackers Using New VeilShell Backdoor in Stealthy Cyber Attacks

Two British-Nigerian men sentenced over multimillion-dollar business email scam

TEM Opera Plus FM Family Transmitter

Subnet Solutions Inc. PowerSYSTEM Center

Delta Electronics DIAEnergie

Weird Zimbra Vulnerability

License Plate Readers Are Creating a US-Wide Database of Political Lawn Signs and Bumper Stickers

Ransomware crew infects 100+ orgs monthly with new MedusaLocker variant

Brits hate how big tech handles their data, but can't be bothered to do much about it

INTERPOL Arrests 8 in Major Phishing and Romance Fraud Crackdown in West Africa

LockBit Ransomware and Evil Corp Leaders Arrested and Sanctioned in Joint Global Effort

Ivanti Endpoint Manager Flaw Actively Targeted, CISA Warns Agencies to Patch

~ 2 Oct 2024 ~

700K+ DrayTek routers are sitting ducks on the internet, open to remote hijacking

Two simple give-me-control security bugs found in Optigo network switches used in critical manufacturing

Gender-based digital transnational repression as a global authoritarian practice: Article by The Citizen Lab published in Globalizations

Fake Trading Apps Target Victims Globally via Apple App Store and Google Play

China-Linked CeranaKeeper Targeting Southeast Asia with Data Exfiltration

Fake Job Applications Deliver Dangerous More_eggs Malware to HR Professionals

Separating the bee from the panda: CeranaKeeper making a beeline for Thailand

Alert: Over 700,000 DrayTek Routers Exposed to Hacking via 14 New Vulnerabilities

NIST's security flaw database still backlogged with 17K+ unprocessed bugs. Not great

Alert: Adobe Commerce and Magento Stores Under Attack from CosmicSting Exploit

California AI Safety Bill Vetoed

5 Must-Have Tools for Effective Dynamic Malware Analysis

'Patch yesterday': Zimbra mail servers under siege through RCE vuln

Finding a needle in a haystack: Machine learning at the forefront of threat hunting research

Andariel Hacking Group Shifts Focus to Financial Attacks on U.S. Organizations

Protecting private data in AI deployments

The fix for BGP's weaknesses has big, scary, issues of its own, boffins find

Researchers Sound Alarm on Active Attacks Exploiting Critical Zimbra Postjournal Flaw

PyPI Repository Found Hosting Fake Crypto Wallet Recovery Tools That Steal User Data

~ 1 Oct 2024 ~

ICE Signs $2 Million Contract With Spyware Maker Paragon Solutions

Euro cops arrest 4 including suspected LockBit dev chilling on holiday

Notorious Evil Corp Hackers Targeted NATO Allies for Russian Intelligence

AI-Powered Rhadamanthys Stealer Targets Crypto Wallets with Image Recognition

Cybersecurity Awareness Month: Securing our worldtogether

Evil Corp's deep ties with Russia and NATO member attacks exposed

NCA unmasks man it suspects is both 'Evil Corp kingpin' and LockBit affiliate

Why system resilience should mainly be the job of the OS, not just third-party applications

Optigo Networks ONS-S8 Spectra Aggregation Switch

Mitsubishi Electric MELSEC iQ-F FX5-OPC

Hacking ChatGPT by Planting False Memories into Its Data

5 Actionable Steps to Prevent GenAI Data Leaks Without Fully Blocking AI Usage

Key Group: another ransomware group using leaked builders

Cybersecurity Awareness Month needs a radical overhaul it needs legislation

Free Sniper Dz Phishing Tools Fuel 140,000+ Cyber Attacks Targeting User Credentials

New Cryptojacking Attack Targets Docker API to Create Malicious Swarm Botnet

U.K. Hacker Charged in $3.75 Million Insider Trading Scheme Using Hacked Executive Emails