Port 22

~ 26 Oct 2023 ~

ESET APT Activity Report Q2Q3 2023

ServiceNow quietly addresses unauthenticated data exposure flaw from 2015

Iranian Group Tortoiseshell Launches New Wave of IMAPLoader Malware Attacks

Critical Flaw in NextGen's Mirth Connect Could Expose Healthcare Data

YoroTrooper: Researchers Warn of Kazakhstan's Stealthy Cyber Espionage Group

StripedFly: Perennially flying under the radar

Leveraging Artificial Intelligence (AI) to Manage Human Risk: Part 3 Issues and Limitations

~ 25 Oct 2023 ~

BHI Energy Releases Details of Akira Ransomware Attack

As Citrix Urges Its Clients to Patch, Researchers Release an Exploit

Canada goosed as attackers shutter hospitals and China deepfakes its politicians

Virtual Alarm: VMware Issues Major Security Advisory

Okta's Latest Security Breach Is Haunted by the Ghost of Incidents Past

Kazakh Attackers, Disguised as Azerbaijanis, Hit Former Soviet States

Cybersecurity Awareness Doesn't Cut It; It's Time to Focus on Behavior

Pro-Russia group exploits Roundcube zero-day in attacks on European government emails

Octo Tempest crosses boundaries to facilitate extortion, encryption, and destruction

Top insights and best practices from the new Microsoft Data Security Index report

Winter Vivern APT Blasts Webmail Zero-Day Bug With One-Click Exploit

A Cybersecurity Framework for Mitigating Risks to Satellite Systems

Nation State Hackers Exploiting Zero-Day in Roundcube Webmail Software

Critical OAuth Flaws Uncovered in Grammarly, Vidio, and Bukalapak Platforms

A fortified data vault to give you peace of mind

The Rise of S3 Ransomware: How to Identify and Combat It

Microsoft is Soft-Launching Security Copilot

Elon Musk Mocked Ukraine, and Russian Trolls Went Wild

Act Now: VMware Releases Patch for Critical vCenter Server RCE Vulnerability

Winter Vivern exploits zero-day vulnerability in Roundcube Webmail servers

Malvertising Campaign Targets Brazil's PIX Payment System with GoPIX Malware

Hunters International leaks pre-op plastic surgery pics in negotiation no-no

Alert: PoC Exploits Released for Citrix and VMware Vulnerabilities

VMware reveals critical vCenter vuln that you may have patched already without knowing it

Cybersecurity Regulations and Risk Assessment Requirements

~ 24 Oct 2023 ~

The AI-Generated Child Abuse Nightmare Is Here

Hot fuzz: Cascade finds dozens of RISC-V chip bugs using random data storm

Citrix urges 'immediate; patch for critical NetScaler bug as exploit POC made public

Tines Report Finds More than Half of Security Professionals Likely To Switch Jobs Next Year

This Cybersecurity Awareness Month, Don't Lose Sight of Human Risk

2023 Ransomware Attacks Up More Than 95% Over 2022, According to Corvus Insurance Q3 Report

Accenture Expands Cybersecurity Services Capabilities in Latin America With Acquisition of MNEMO Mexico

1Password Becomes Latest Victim of Okta Customer Service Breach

Meet Rhysida, a New Ransomware Strain That Deletes Itself

Former NSA Employee Faces Life in Prison After Espionage Attempt

Do Small Companies Need Fractional AppSec Teams Akin to vCISOs?

Strengthening Oman's Economic Backbone

Ex-NSA techie pleads guilty to selling state secrets to Russia

Cyberattacks on Kenya Drop in Third Quarter

Israeli-Hamas Conflict Spells Opportunity for Online Scammers

1Password confirms attacker tried to pull list of admin users after Okta intrusion

Element users are asking for protection against government encryption busting

It's Time to Establish the NATO of Cybersecurity

'Log in with...' Feature Allows Full Online Account Takeover for Millions

Ex-NSA Employee Pleads Guilty to Leaking Classified Data to Russia

Rockwell Automation Stratix 5800 and Stratix 5200

EPA Wont Force Water Utilities to Audit Their Cybersecurity

A Powerful Tool US Spies Misused to Stalk Women Faces Its Potential Demise

A Controversial Plan to Scan Private Messages for Child Abuse Meets Fresh Scandal

34 Cybercriminals Arrested in Spain for Multi-Million Dollar Online Scams

Make API Management Less Scary for Your Organization

Irish cops data debacle exposes half a million motorist records

Stealer for PIX payment system, new Lumar stealer and Rhysida ransomware

They Cracked the Code to a Locked USB Drive Worth $235 Million in Bitcoin. Then It Got Weird

Operation Triangulation: Experts Uncover Deeper Insights into iOS Zero-Day Attacks

Helping you bridge the cloud security gap

Backdoor Implant on Hacked Cisco Devices Modified to Evade Detection

1Password Detects Suspicious Activity Following Okta Support Breach

Scammers use Indias real-time payment system to siphon off money, send it to China

~ 23 Oct 2023 ~

Cisco fixes critical IOS XE bug but malware crew way ahead of them

The Hamas Threat of Hostage Execution Videos Looms Large Over Social Media

Cyberattackers Alter Implant on 30K Compromised Cisco IOS XE Devices

Valve's 2FA Mandate for Game Developers Shows SMS Stickiness

Hola Espana: 'Grandoreiro' Trojan Targets Global Banking Customers

City of Philadelphia Releases Cyber-Breach Notice

DC elections agency warns entire voting roll may have been stolen

How State and Local Governments Can Serve Citizens More Securely

Ragnar Locker Ransomware Boss Arrested in Paris

Malicious Apps Spoof Israeli Attack Detectors: Conflict Goes Mobile

Freelance Market Flooded With North Korean IT Actors

Forrester names Microsoft a Leader in the 2023 Endpoint Security Wave report

Telling Small Businesses to Buy Cyber Insurance Isn't Enough

NJ Man Hired Online to Firebomb, Shoot at Homes Gets 13 Years in Prison

Microsoft opens early access to AI assistant for infosec, Security Copilot

Redefining united data protection

Who's Experimenting with AI Tools in Your Organization?

DoNot Team's New Firebird Backdoor Hits Pakistan and Afghanistan

Child Exploitation and the Crypto Wars

The outstanding stealth of Operation Triangulation

One login to rule them all: Should you sign in with Google or Facebook on other websites?

Quasar RAT Leverages DLL Side-Loading to Fly Under the Radar

FedRAMP Rev. 5: How Cloud Service Providers Can Prepare

~ 21 Oct 2023 ~

Europol Dismantles Ragnar Locker Ransomware Infrastructure, Nabs Key Developer

The 23andMe User Data Leak May Be Far Worse Than Believed

The Dangerous Mystery of Hamas Missing Suicide Drones

Okta's Support System Breach Exposes Customer Data to Unidentified Threat Actors

Cisco Zero-Day Exploited to Implant Malicious Lua Backdoor on Thousands of Devices

9 Innovative Ways to Boost Security Hygiene for Cyber Awareness Month

~ 20 Oct 2023 ~

More Okta Customers Hacked

From Snooze to Enthuse: Security Awareness Training That Sticks

Friday Squid Blogging: Why There Are No Giant Squid in Aquariums

Critical SolarWinds RCE Bugs Enable Unauthorized Network Takeover

Cisco Finds New Zero Day Bug, Pledges Patches in Days