Port 22

~ 3 Aug 2024 ~

Hackers Exploit Misconfigured Jupyter Notebooks with Repurposed Minecraft DDoS Tool

~ 2 Aug 2024 ~

Friday Squid Blogging: Treating Squid Parasites

Israeli hacktivist group brags it took down Iran's internet

Sensitive Illinois Voter Data Exposed by Contractors Unsecured Databases

APT41 Hackers Use ShadowPad, Cobalt Strike in Taiwanese Institute Cyber Attack

APT28 Targets Diplomats with HeadLace Malware via Car Sale Phishing Lure

Respect your data, and protect it

Fortune 50 biz coughed up record-breaking $75M ransom to halt leak of stolen data

Webinar: Discover the All-in-One Cybersecurity Solution for SMBs

AI and automation reducing breach costs Week in security with Tony Anscombe

Leaked GitHub Python Token

Mirai Botnet targeting OFBiz Servers Vulnerable to Directory Traversal

UK plans to revamp national cyber defense tools are already in motion

New Windows Backdoor BITSLOTH Exploits BITS for Stealthy Communication

U.S. Releases High-Profile Russian Hackers in Diplomatic Prisoner Exchange

Cybercriminals Abusing Cloudflare Tunnels to Evade Detection and Spread Malware

UK crimebusters shut down global call-spoofing outfit that claimed 170K-plus victims

Japan mandates app to ensure national ID cards aren't forged

India contemplates compulsory dynamic 2FA for digital payments

10 Steps To Implement A Zero Trust Architecture

US sends cybercriminals back to Russia in prisoner swap that freed WSJ journo, others

U.S. Trades Cybercriminals to Russia in Prisoner Swap

U.S. Trades 5 Cybercriminals to Russia in Prisoner Swap

~ 1 Aug 2024 ~

Too late now for canary updates, says pension fund suing CrowdStrike

FBI, CISA remind US voters that DDoS attacks can't touch election systems

How to counter adversarial AI

He Was an FBI Informantand Inspired a Generation of Violent Extremists

Over 1 Million Domains at Risk of 'Sitting Ducks' Domain Hijacking Technique

Hackers Distributing Malicious Python Packages via Popular Developer Q&A Platform

New Android Banking Trojan BingoMod Steals Money, Wipes Devices

Mozilla follows Google in losing trust in Entrust's TLS certificates

Vonets WiFi Bridges

Rockwell Automation Logix Controllers

Johnson Controls exacqVision Web Service

Johnson Controls exacqVision Web Service

Johnson Controls exacqVision Web Service

Johnson Controls exacqVision Web Service

Johnson Controls exacqVision Server Web Service

Johnson Controls exacqVision Client and exacqVision Server

AVTECH IP Camera

Obfuscation: There Are Two Sides To Everything

Education in Secure Software Development

A $500 Open-Source Tool Lets Anyone Hack Computer Chips With Lasers

How professional ransomware variants boost cybercrime groups

Google Chrome Adds App-Bound Encryption to Protect Cookies from Malware

Facebook Ads Lead to Fake Websites Stealing Credit Card Information

Germany names China as source of attack on government geospatial agency

~ 31 Jul 2024 ~

Ransomware infection cuts off blood supply to 250+ hospitals

More than 83K certs from nearly 7K DigiCert customers must be swapped out now

Russia takes aim at Sitting Ducks domains, bags 30,000+

Citizen Lab submission to the United Nations Special Rapporteur on counter-terrorism and human rights: Impacts of biometric data collection measures on civil society in the Tibet Autonomous region (TAR) and Qinghai

Chrome adopts app-bound encryption to stymie cookie-stealing malware

Nearly 7% of Internet Traffic Is Malicious

Embedding AI security from the get go

Five months after takedown, LockBit is a shadow of its former self

DigiCert to Revoke 83,000+ SSL Certificates Due to Domain Validation Oversight

North Korea-Linked Malware Targets Developers on Windows, Linux, and macOS

'Error' in Microsoft's DDoS defenses amplified 8-hour Azure outage

Dont Let Your Domain Name Become a Sitting Duck

Chinese Hackers Target Japanese Firms with LODEINFO and NOOPDOOR Malware

How To Get the Most From Your Security Teams Email Alert Budget

Cybercriminals Deploy 100K+ Malware Android Apps to Steal OTP Codes

Can ChatGPT-4o Be Trusted With Your Private Data?

Cyber Espionage Group XDSpy Targets Companies in Russia and Moldova

The cyberthreat that drives businesses towards cyber risk insurance

UK Electoral Commission slapped for basic cybersecurity fails

Meta Settles for $1.4 Billion with Texas Over Illegal Biometric Data Collection

DigiCert gives unlucky folks 24 hours to replace doomed certificates after code blunder

Take Me to the Cyber Arcade! Level Up Your Cyber Skills with Core NetWars Version 10: A Cutting-Edge Retro Arcade and AI Adventure

A Visual Summary of SANS Security Awareness: Managing Human Risk Summit 2024

A Visual Summary of SANS Security Awareness: Managing Human Risk Summit 2024

A Visual Summary of SANS Security Awareness: Managing Human Risk Summit 2024

~ 30 Jul 2024 ~

Delta Air Lines dials up Microsoft's legal nemesis over CrowdStrike losses

New Microsoft whitepaper shares how to prepare your data for secure AI adoption

'LockBit of phishing' EvilProxy used in more than a million attacks every month

A Senate Bill Would Radically Improve Voting Machine Security

New Mandrake Spyware Found in Google Play Store Apps After Two Years

The Power and Peril of RMM Tools

Ransomware gangs are loving this dumb but deadly make-me-admin ESXi vulnerability

Providing Security Updates to Automobile Software

Cybercriminals Target Polish Businesses with Agent Tesla and Formbook Malware

Cyber Threat Intelligence: Illuminating the Deep, Dark Cybercriminal Underground

Phishing targeting Polish SMBs continues via ModiLoader

New SideWinder Cyber Attacks Target Maritime Facilities in Multiple Countries

OneDrive Phishing Scam Tricks Users into Running Malicious PowerShell Script

Proofpoint phishing palaver plagues millions with 'perfectly spoofed' emails from IBM, Nike, Disney, others

VMware ESXi Flaw Exploited by Ransomware Groups for Admin Access

Malaysia is working on an internet 'kill switch', says minister

~ 29 Jul 2024 ~

Meta's AI safety system defeated by the space bar

US border cops really must get a warrant in NY before searching phones, devices

Critical Flaw in Acronis Cyber Infrastructure Exploited in the Wild

Ransomware operators exploit ESXi hypervisor vulnerability for mass encryption

Intruders at HealthEquity rifled through storage, stole 4.3M people's data

Proofpoint Email Routing Flaw Exploited to Send Millions of Spoofed Phishing Emails

Saboteurs Cut Internet Cables in Latest Disruption During Paris Olympics

Google apologizes for breaking password manager for millions of Windows users with iffy Chrome update

How Infostealers Pillaged the Worlds Passwords

New Research in Detecting AI-Generated Videos

How Searchable Encryption Changes the Data Security Game

Mandrake spyware sneaks onto Google Play again, flying under the radar for two years