Port 22

~ 23 Jun 2023 ~

NSA: BlackLotus BootKit Patching Won't Prevent Compromise

Suspicious Smartwatches Mailed to US Army Personnel

Microsoft Teams Attack Skips the Phish to Deliver Malware Directly

Why Legacy System Users Prioritize Uptime Over Security

Black Hat Asia 2023: Cybersecurity Maturity and Concern in Asia

UPS Data Harvested for SMS Phishing Attacks

Cybercrime Group 'Muddled Libra' Targets BPO Sector with Advanced Social Engineering

How Government Contractors & Agencies Should Navigate New Cyber Rules

What to know about the MoveIT hack Week in security with Tony Anscombe

Millions of Repos on GitHub Are Potentially Vulnerable to Hijacking

Deception Technologies Have a Maturity Problem

UK cyberspies warn ransomware crews targeting law firms

The Power of Browser Fingerprinting: Personalized UX, Fraud Detection, and Secure Logins

Powerful JavaScript Dropper PindOS Distributes Bumblebee and IcedID Malware

Inside the Illicit Market for Abortion Pills on Telegram

NSA Releases Guide to Combat Powerful BlackLotus Bootkit Targeting Windows Systems

Keep it schtum!

New Cryptocurrency Mining Campaign Targets Linux Systems and IoT Devices

Chinese malware intended to infect USB drives accidentally infects networked storage too

US cyber ambassador says China knows how to steal its way to dominance of cloud and AI

Cybersecurity Jobs: Vulnerability Researcher & Exploit Developer (Japanese)

A Visual Summary of SANS Ransomware Summit 2023

~ 22 Jun 2023 ~

To kill BlackLotus malware, patching is a good start, but...

Job Seekers, Look Out for Job Scams

LockBit Developing Ransomware for Apple M1 Chips, Embedded Systems

Growing SaaS Usage Means Larger Attack Surface

Airgap Networks Acquires NetSpyGlass

Former Duo Security Co-Founder Jon Oberheide Joins DNSFilter Board of Directors

Sumsub Launches Advanced Deepfakes Detector

Tanium Platform Advances Threat Identification Capabilities and Enhances Endpoint Reach

Even With No Recession, Smaller Firms Aim to Consolidate Security Tools

SMS Phishers Harvested Phone Numbers, Shipment Data from UPS Tracking Tool

CISA, FBI Offer $10M for Cl0p Ransomware Gang Information

Now BlackCat extortionists threaten to leak stolen plastic surgery pics

Azure AD 'Log in With Microsoft' Authentication Bypass Affects Thousands

5 Steps for Minimizing Dark Data Risk

MULTI#STORM Campaign Targets India and U.S. with Remote Access Trojans

IoT devices and Linux-based systems targeted by OpenSSH trojan campaign

Patch Now: Cisco AnyConnect Bug Exploit Released in the Wild

AI as Sensemaking for Public Comments

6 Attack Surfaces You Must Protect

USB Drives Spread Spyware as China's Mustang Panda APT Goes Global

IT Staff Increasingly Saddled With Data Protection Compliance

Lessons From a Pen Tester: 3 Steps to Stay Safer

Generative-AI apps & ChatGPT: Potential risks and mitigation strategies

Alert: Million of GitHub Repositories Likely Vulnerable to RepoJacking Attack

Camaro Dragon Hackers Strike with USB-Driven Self-Propagating Malware

2 More Apple Zero-Days Exploited in Ongoing iOS Spy Campaign

Unveiling the Unseen: Identifying Data Exfiltration with Machine Learning

Critical Flaw Found in WordPress Plugin for WooCommerce Used by 30,000 Websites

LockBit Green and phishing that targets organizations

Docs Show FBI Pressures Cops to Keep Phone Surveillance Secrets

Maltego: Check how exposed you are online

The Log4j vulnerability how can we all do better next time?

Zero-Day Alert: Apple Releases Patches for Actively Exploited Flaws in iOS, macOS, and Safari

Japan's digital ID card gets emergency review amid data leaks

A clash of titans

Ironscales Adds AI Assistant to Suss Out Phishing Attempts

~ 21 Jun 2023 ~

A (cautionary) tale of two patched bugs, both being exploited in the wild

20-Year-Old Chinese APT15 Finds New Life in Foreign Ministry Attacks

New DOJ Cyber Prosecution Team Will Go After Nation-State Threat Actors

Avast, Norton Parent Latest Victim of MOVEit Ransomware Attacks

Apple squashes kernel bug used by TriangleDB spyware

Ransomware Misconceptions Abound, To the Benefit of Attackers

FTC accuses DNA testing company of lying about dumping samples