Port 22

~ 29 May 2024 ~

Microsoft Uncovers 'Moonstone Sleet' New North Korean Hacker Group

ESET World 2024: Big on prevention, even bigger on AI

BreachForums Returns Just Weeks After FBI Seizure - Honeypot or Blunder?

What is Your Definition of Insider Threat?

How to Strengthen Your Cybersecurity Posture with the Updated SEC401 Labs

A Visual Summary of SANS Ransomware Summit 2024

Unraveling the Mysteries of Digital Forensics: A Blog on the "Secret Life of Devices" Workshop Series

~ 28 May 2024 ~

2.8M US folks learn their personal info was swiped months ago in Sav-Rx IT heist

Treasury Sanctions Creators of 911 S5 Proxy Botnet

BreachForums returns, just weeks after FBI-led takedown

SpiderOak One customers threaten to jump ship following datacenter upgrade

Moonstone Sleet emerges as new North Korean threat actor with new bag of tricks

Auction house Christies confirms criminals stole some client data

Indian National Pleads Guilty to $37 Million Cryptocurrency Theft Scheme

Campbell Scientific CSI Web Server

How Researchers Cracked an 11-Year-Old Password to a $3 Million Crypto Wallet

4-Step Approach to Mapping and Securing Your Organization's Most Critical Assets

Lattice-Based Cryptosystems and Quantum Cryptanalysis

Researchers Warn of CatDDoS Botnet and DNSBomb DDoS Attack Technique

Trusted relationship attacks: trust, but verify

Cops Are Just Trolling Cybercriminals Now

Beyond the buzz: Understanding AI and its role in cybersecurity

Take two APIs and call me in the morning: How healthcare research can cure cyber crime

WordPress Plugin Exploited to Steal Credit Card Data from E-commerce Sites

TP-Link Gaming Router Vulnerability Exposes Users to Remote Code Attacks

ICS/OT Cybersecurity & AI: Considerations for Now and the Future (Part I)

Boosting Cyber Resilience with Effective Staffing Strategies

~ 27 May 2024 ~

How's Uncle Sam getting on with Biden's AI exec order? Pretty good, we're told

Message board scams

Moroccan Cybercrime Group Steals Up to $100K Daily Through Gift Card Fraud

Report: The Dark Side of Phishing Protection

Threat landscape for industrial automation systems, Q1 2024

New Tricks in the Phishing Playbook: Cloudflare Workers, HTML Smuggling, GenAI

Pakistan-linked Hackers Deploy Python, Golang, and Rust Malware on Indian Targets

Bayer and 12 other major drug companies caught up in Cencora data loss

NIS2 Unveiled: Three Critical Changes Impacting Your Cybersecurity Strategy

~ 25 May 2024 ~

Microsofts New Recall AI Tool May Be a Privacy Nightmare

Experts Find Flaw in Replicate AI Service Exposing Customers' Models and Data

~ 24 May 2024 ~

Man behind deepfake Biden robocall indicted on felony charges, faces $6M fine

Best Buy and Geek Squad were most impersonated orgs by scammers in 2023

Friday Squid Blogging: Dana Squid Attacking Camera

Suspected supply chain attack backdoors courtroom recording software

Hackers Created Rogue VMs to Evade Detection in Recent MITRE Cyber Attack

Mandatory reporting for ransomware attacks? Week in security with Tony Anscombe

Fake Antivirus Websites Deliver Malware to Android and Windows Devices

How Do Hackers Blend In So Well? Learn Their Tricks in This Expert Webinar

On the Zero-Day Market

DevOps Dilemma: How Can CISOs Regain Control in the Age of Speed?

Google Detects 4th Chrome Zero-Day in May Actively Under Attack - Update ASAP

Courtroom Software Backdoored to Deliver RustDoor Malware in Supply Chain Attack

Japanese Experts Warn of BLOODALCHEMY Malware Targeting Government Agencies

The Evolution of Enterprise Threat Hunting: Detailed Insights from the SANS 2024 Survey

2024 Recap of Windows Patch Tuesdays: Enhancements in Security and New Challenges

Three-year-old Apache Flink flaw under active attack

~ 23 May 2024 ~

Stark Industries Solutions: An Iron Hammer in the Cloud

Here's yet more ransomware using BitLocker against Microsoft's own users

Casino cyberattacks put a bullseye on Scattered Spider and the FBI is closing in

Google guru roasts useless phishing tests, calls for fire drill-style overhaul

He Trained Crypto Cops to Fight Crypto Crimeand Allegedly Ran a $100M Dark Web Drug Market

Ransomware Attacks Exploit VMware ESXi Vulnerabilities in Alarming Pattern

CISA Warns of Actively Exploited Apache Flink Security Vulnerability

A Leak of Biometric Police Data Is a Sign of Things to Come

Veeam says critical flaw can't be abused to trash backups

New Frontiers, Old Tactics: Chinese Espionage Group Targets Africa & Caribbean Govts

70% of CISOs worry their org is at risk of a material cyber attack

Cyber Signals: Inside the growing risk of gift card fraud

ShrinkLocker: Turning BitLocker into ransomware

AutomationDirect Productivity PLCs

Inside Operation Diplomatic Specter: Chinese APT Group's Stealthy Tactics Exposed

Are Your SaaS Backups as Secure as Your Production Data?

Personal AI Assistants and Privacy

Introducing Nimfilt: A reverse-engineering tool for Nim-compiled binaries

Ivanti Patches Critical Remote Code Execution Flaws in Endpoint Manager

A journey into forgotten Null Session and MS-RPC interfaces

UK data watchdog wants six figures from N Ireland cops after 2023 data leak

How Apple Wi-Fi Positioning System can be abused to track people around the globe

Would you buy Pegasus spyware from this scammer?

The End of an Era: Microsoft Phases Out VBScript for JavaScript and PowerShell

'China-aligned' spyware slingers operating since 2018 unmasked at last

Lawmakers advance bill to tighten White House grip on AI model exports

~ 22 May 2024 ~

Go after UnitedHealth, not us, 100+ medical groups urge Uncle Sam

Canada's London Drugs confirms ransomware attack after LockBit demands $25M

NYSE parent gets $10M wrist tap for failing to report 2021 systems break-in

Laundering cash from healthcare, romance scams lands US man in prison for a decade

Confused by the SEC's breach reporting rules? Read this

Stopping ransomware in multicloud environments

Researchers Warn of Chinese-Aligned Hackers Targeting South China Sea Countries

Teslas Can Still Be Stolen With a Cheap Radio HackDespite New Keyless Tech

Rockwell Advises Disconnecting Internet-Facing ICS Devices Amid Cyber Threats

Unredacting Pixelated Text

LockBit dethroned as leading ransomware gang for first time post-takedown

The Ultimate SaaS Security Posture Management Checklist, 2025 Edition

Stealers, stealers and more stealers

What happens when AI goes rogue (and how to stop it)

GHOSTENGINE Exploits Vulnerable Drivers to Disable EDRs in Cryptojacking Attack

MS Exchange Server Flaws Exploited to Deploy Keylogger in Targeted Attacks

GitHub Enterprise Server patches 10-outta-10 critical hole

QNAP Patches New Flaws in QTS and QuTS hero Impacting NAS Appliances

Zoom Adopts NIST-Approved Post-Quantum End-to-End Encryption for Meetings

Critical Veeam Backup Enterprise Manager Flaw Allows Authentication Bypass