Port 22

~ 25 Jan 2024 ~

China-backed Hackers Hijack Software Updates to Implant "NSPX30" Spyware

SystemBC Malware's C2 Server Analysis Exposes Payload Delivery Tricks

EquiLend drags systems offline after admitting attacker broke in

Quantum Computing Skeptics

SystemK NVR 504/508/516

Opteev MachineSense FeverWarn

How a Group of Israel-Linked Hackers Has Pushed the Limits of Cyberwar

Critical Jenkins Vulnerability Exposes Servers to RCE Attacks - Patch ASAP!

LODEINFO Fileless Malware Evolves with Anti-Analysis and Remote Code Tricks

Cyber Threat Landscape: 7 Key Findings and Upcoming Trends for 2024

Assessing and mitigating supply chain cybersecurity risks

Privacy predictions for 2024

New CherryLoader Malware Mimics CherryTree to Deploy PrivEsc Exploits

Tech Giant HP Enterprise Hacked by Russian Hackers Linked to DNC Breach

HPE joins the 'our executive email was hacked by Russia' club

Three Common Threats to Your Organizations Data to be Aware of on Data Protection Day

~ 24 Jan 2024 ~

Ring Will Stop Giving Cops a Free Pass on Warrantless Video Requests

US judge rejects spyware developer NSO's attempt to bin Apple's spyware lawsuit

Major IT outage at Europe's largest caravan and RV club makes for not-so-happy campers

How Datawiza uses Microsoft Entra ID to help universities simplify access

Using GoAnywhere MFT for file transfers? Patch now an exploit's out for a critical bug

NSPX30: A sophisticated AitM-enabled implant evolving since 2005

NSPX30: A sophisticated AitM-enabled implant evolving since 2005

Google Kubernetes Misconfig Lets Any Gmail Account Control Your Clusters

Poisoning AI Models

Notorious Spyware Maker NSO Group Is Quietly Plotting a Comeback

What is Nudge Security and How Does it Work?

Kasseika Ransomware Using BYOVD Trick to Disarms Security Pre-Encryption

What Microsoft's latest email breach says about this IT security heavyweight

The Unknown Risks of The Software Supply Chain: A Deep-Dive

U.S., U.K., Australia Sanction Russian REvil Hacker Behind Medibank Breach

COVID-19 test lab accused of exposing 1.3 million patient records to open internet

GCHQ's NCSC warns of 'realistic possibility' AI will help state-backed malware evade detection

Patch Your GoAnywhere MFT Immediately - Critical Flaw Lets Anyone Be Admin

~ 23 Jan 2024 ~

HP CEO Says They Brick Printers That Use Third-Party Ink Because of Hackers

CISA boss swatted: 'While my own experience was certainly harrowing, it was unfortunately not unique'

"Activator" Alert: MacOS Malware Hides in Cracked Apps, Targeting Crypto Wallets

Accused PII seller faces jail for running underground fraud op

VexTrio: The Uber of Cybercrime - Brokering Malware for 60+ Affiliates

Malicious NPM Packages Exfiltrate Hundreds of Developer SSH Keys via GitHub

Side Channels Are Common

Westermo Lynx 206-F2G

Voltronic Power ViewPower Pro

Lantronix XPort

Crestron AM-300

APsystems Energy Communication Unit (ECU-C) Power Control Software

UK water giant admits attackers broke into system as gang holds it to ransom

From Megabits to Terabits: Gcore Radar Warns of a New Era of DDoS Attacks

Break the fake: The race is on to stop AI voice cloning scams

BreachForums Founder Sentenced to 20 Years of Supervised Release, No Jail Time

~40,000 Attacks in 3 Days: Critical Confluence RCE Under Active Exploitation

Australia imposes cyber sanctions on Russian it says ransomwared health insurer

Apple Issues Patch for Critical Zero-Day in iPhones, Macs - Update Now

~ 22 Jan 2024 ~

Atlassian Confluence Server RCE attacks underway from 600+ IPs

Slug slimes aerospace biz AerCap with ransomware, brags about 1TB theft

Apple iOS 17.3: How to Turn on iPhone's New Stolen Device Protection

North Korean Hackers Weaponize Fake Research to Deliver RokRAT Backdoor

MavenGate Attack Could Let Hackers Hijack Java and Android via Abandoned Libraries

EFF adds Street Surveillance Hub so Americans can check who's checking on them

Ivanti and Juniper Networks accused of bending the rules with CVE assignments

Subway's data torpedoed by LockBit, ransomware gang claims

AI Bots on X (Twitter)

Cops Used DNA to Predict a Suspects Faceand Tried to Run Facial Recognition on It

NS-STEALER Uses Discord Bots to Exfiltrate Your Secrets from Popular Browsers

52% of Serious Vulnerabilities We Find are Related to Windows 10

ICO fines spam slinging financial services biz

Safeguarding against the global ransomware threat

Cracked software beats gold: new macOS backdoor stealing cryptowallets

FTC Bans InMarket for Selling Precise User Location Without Consent

Apache ActiveMQ Flaw Exploited in New Godzilla Web Shell Attacks

BreachForums admin 'Pompourin' sentenced to 20 years of supervised release

SANS 2023 Multicloud Survey: Navigating the Complexities of Multiple Clouds

~ 20 Jan 2024 ~

Fujitsu Bugs That Sent Innocent People to Prison Were Known From the Start

Fujitsu Bugs That Sent Innocent People to Prison Were Known From the Start

US Agencies Urged to Patch Ivanti VPNs That Are Actively Being Hacked

Chinese Hackers Silently Weaponized VMware Zero-Day Flaw for 2 Years

CISA Issues Emergency Directive to Federal Agencies on Ivanti Zero-Day Exploits

Microsoft's Top Execs' Emails Breached in Sophisticated Russia-Linked APT Attack

Invoice Phishing Alert: TA866 Deploys WasabiSeed & Screenshotter Malware

Russians invade Microsoft exec mail while China jabs at VMware vCenter Server

~ 19 Jan 2024 ~

Friday Squid Blogging: New Foods from Squid Fins

Five ripped off IT giant with $7M+ in bogus work expenses, prosecutors claim

Zelle Is Using My Name and Voice without My Consent

Canadian Man Stuck in Triangle of E-Commerce Fraud

Why many CISOs consider quitting Week in security with Tony Anscombe

Thieves steal 35.5M customers data from Vans sneakers maker

Npm Trojan Bypasses UAC, Installs AnyDesk with "Oscompatible" Package

How to Opt Out of Comcasts Xfinity Storing Your Sensitive Data

Experts Warn of macOS Backdoor Hidden in Pirated Versions of Popular Software

Speaking to the CIAs Creative Writing Group

Preventing Data Loss: Backup and Recovery Strategies for Exchange Server Administrators

IT consultant fined for daring to expose shoddy security

U.S. Cybersecurity Agency Warns of Actively Exploited Ivanti EPMM Vulnerability

US agencies warn made-in-China drones might help Beijing snoop on the world

~ 18 Jan 2024 ~

JPMorgan exec claims bank repels 45 billion cyberattack attempts per day

Future of America's Cyber Safety Review Board hangs in balance amid calls for rethink

Job Opportunity: Communication Strategist

Ransomware attacks hospitalizing security pros, as one admits suicidal feelings

Microsoft at Legalweek: Secure data and gain efficiencies with Microsoft Purview eDiscovery enhanced by generative AI

New Docker Malware Steals CPU for Crypto & Drives Fake Website Traffic