Port 22

~ 26 Jun 2023 ~

Cl0p in Your Network? Here's How to Find Out

Remediation Ballet Is a Pas de Deux of Patch and Performance

Researchers Find Way to Recover Cryptographic Keys by Analyzing LED Flickers

How Infrastructure as Code Can Help Minimize Human Error

Trojanized Super Mario Installer Goes After Gamer Data

Why endpoint management is key to securing an AI-powered future

Excel Data Forensics

American and Southwest Airlines pilot candidate data exposed

3 Steps to Successfully & Ethically Navigate a Data Breach

Japanese Cryptocurrency Exchange Falls Victim to JokerSpy macOS Backdoor Attack

Ex-FBI employee jailed for taking classified material home

How Generative AI Can Dupe SaaS Authentication Protocols And Effective Ways To Prevent Other Key AI Risks in SaaS

The US Senate Wants to Reign In AI. Good Luck With That

Microsoft Warns of Widescale Credential Stealing Attacks by Russian Hackers

JP Morgan accidentally deletes evidence in multi-million record retention screwup

How Active Directory Bridging Extends Security Automation to Hybrid IT Environments

Chinese Hackers Using Never-Before-Seen Tactics for Critical Infrastructure Attacks

The unlimited value of a strong defence

~ 25 Jun 2023 ~

5 Ways to Make Your Instant Messaging More Secure

~ 24 Jun 2023 ~

U.S. Cybersecurity Agency Adds 6 Flaws to Known Exploited Vulnerabilities Catalog

Twitter Hacker Sentenced to 5 Years in Prison for $120,000 Crypto Scam

Google bug bounties inch closer to Microsoft's payouts

Update Your iPhone Right Now to Fix 2 Apple Zero Days

~ 23 Jun 2023 ~

Friday Squid Blogging: Giggling Squid

ITDR Combines and Refines Familiar Cybersecurity Approaches

Silobreaker Unveils Geopolitical Threat Intelligence Capabilities With RANE at Infosecurity Europe 2023

NSA: BlackLotus BootKit Patching Won't Prevent Compromise

Suspicious Smartwatches Mailed to US Army Personnel

Microsoft Teams Attack Skips the Phish to Deliver Malware Directly

Why Legacy System Users Prioritize Uptime Over Security

Black Hat Asia 2023: Cybersecurity Maturity and Concern in Asia

UPS Data Harvested for SMS Phishing Attacks

Cybercrime Group 'Muddled Libra' Targets BPO Sector with Advanced Social Engineering

How Government Contractors & Agencies Should Navigate New Cyber Rules

What to know about the MoveIT hack Week in security with Tony Anscombe

Millions of Repos on GitHub Are Potentially Vulnerable to Hijacking

Deception Technologies Have a Maturity Problem

UK cyberspies warn ransomware crews targeting law firms

The Power of Browser Fingerprinting: Personalized UX, Fraud Detection, and Secure Logins

Powerful JavaScript Dropper PindOS Distributes Bumblebee and IcedID Malware

Inside the Illicit Market for Abortion Pills on Telegram

NSA Releases Guide to Combat Powerful BlackLotus Bootkit Targeting Windows Systems

Keep it schtum!

New Cryptocurrency Mining Campaign Targets Linux Systems and IoT Devices

Chinese malware intended to infect USB drives accidentally infects networked storage too

US cyber ambassador says China knows how to steal its way to dominance of cloud and AI

Cybersecurity Jobs: Vulnerability Researcher & Exploit Developer (Japanese)

A Visual Summary of SANS Ransomware Summit 2023

~ 22 Jun 2023 ~

To kill BlackLotus malware, patching is a good start, but...

Job Seekers, Look Out for Job Scams

LockBit Developing Ransomware for Apple M1 Chips, Embedded Systems

Growing SaaS Usage Means Larger Attack Surface

Airgap Networks Acquires NetSpyGlass

Former Duo Security Co-Founder Jon Oberheide Joins DNSFilter Board of Directors

Sumsub Launches Advanced Deepfakes Detector

Tanium Platform Advances Threat Identification Capabilities and Enhances Endpoint Reach

Even With No Recession, Smaller Firms Aim to Consolidate Security Tools

SMS Phishers Harvested Phone Numbers, Shipment Data from UPS Tracking Tool

CISA, FBI Offer $10M for Cl0p Ransomware Gang Information

Now BlackCat extortionists threaten to leak stolen plastic surgery pics

Azure AD 'Log in With Microsoft' Authentication Bypass Affects Thousands

5 Steps for Minimizing Dark Data Risk

MULTI#STORM Campaign Targets India and U.S. with Remote Access Trojans

IoT devices and Linux-based systems targeted by OpenSSH trojan campaign

Patch Now: Cisco AnyConnect Bug Exploit Released in the Wild