Port 22

~ 29 Dec 2023 ~

The Worst Hacks of 2023

CERT-UA Uncovers New Malware Wave Distributing OCEANMAP, MASEPIE, STEELHOOK

Friday Squid Blogging: Sqids

Kimsuky Hackers Deploying AppleSeed, Meterpreter, and TinyNuke in Latest Attacks

CEO arranged his own cybersecurity, with predictable results

Microsoft Disables MSIX App Installer Protocol Widely Used in Malware Attacks

sans-cloud-flight-simulator-sec540

~ 28 Dec 2023 ~

Financially motivated threat actors misusing App Installer

A tale of 2 casino ransomware attacks: One paid out, one did not

Kaspersky reveals previously unknown hardware 'feature' used in iPhone attacks

Google Cloud Resolves Privilege Escalation Flaw Impacting Kubernetes Service

AI and Lossy Bottlenecks

The Most Dangerous People on the Internet in 2023

Most Sophisticated iPhone Hack Ever Exploited Apple's Hidden Hardware Feature

A year in review: 10 of the biggest security incidents of 2023

New Rugmi Malware Loader Surges with Hundreds of Daily Detections

~ 27 Dec 2023 ~

Critical Zero-Day in Apache OfBiz ERP System Exposes Businesses to Attack

Operation Triangulation: The last (hardware) mystery

Chinese Hackers Exploited New Zero-Day in Barracuda's ESG Appliances

New iPhone Security Features to Protect Stolen Devices

This Clever New Idea Could Fix AirTag Stalking While Maximizing Privacy

Got a new device? 7 things to do before disposing of your old tech

New Sneaky Xamalicious Android Malware Hits Over 327,000 Devices

Warning: Poorly Secured Linux SSH Servers Under Attack for Cryptocurrency Mining

~ 26 Dec 2023 ~

Google Stops Collecting Location Data from Maps

Carbanak Banking Malware Resurfaces with New Ransomware Tactics

~ 25 Dec 2023 ~

Cloud Atlas' Spear-Phishing Attacks Target Russian Agro and Research Companies

~ 24 Dec 2023 ~

British LAPSUS$ Teen Members Sentenced for High-Profile Attacks

~ 23 Dec 2023 ~

Iranian cyberspies target US defense orgs with a brand new backdoor

~ 22 Dec 2023 ~

Friday Squid Blogging: Squid Parts into Fertilizer

Ben Rothkes Review of A Hackers Mind

Rogue WordPress Plugin Exposes E-Commerce Sites to Credit Card Theft

Cyber sleuths reveal how they infiltrate the biggest ransomware gangs

Operation RusticWeb: Rust-Based Malware Targets Indian Government Entities

Decoy Microsoft Word Documents Used to Deliver Nim-Based Malware

Data Exfiltration Using Indirect Prompt Injection

Facebook Marketplace Is Being Ruined by Zelle Scammers

Congress Sure Made a Lot of Noise About Kids Privacy in 2023and Not Much Else

Key findings from ESET Threat Report H2 2023 Week in security with Tony Anscombe

UAC-0099 Using WinRAR Exploit to Target Ukrainian Firms with LONEPAGE Malware

Microsoft Warns of New 'FalseFont' Backdoor Targeting the Defense Sector

~ 21 Dec 2023 ~

Lapsus$ teen sentenced to indefinite detention in hospital after Nvidia, GTA cyberattacks

Experts Detail Multi-Million Dollar Licensing Model of Predator Spyware

Chameleon Android Banking Trojan Variant Bypasses Biometric Authentication

Four in five Apache Struts 2 downloads are for versions featuring critical flaw

New JavaScript Malware Targeted 50,000+ Users at Dozens of Banks Worldwide

Cyberattack on Ukraines Kyivstar Seems to Be Russian Hacktivists

QNAP VioStor NVR

FXC AE1021/AE1021PE

Mozilla decides Trusted Types is a worthy security feature

Cost of a Data Breach Report 2023: Insights, Mitigators and Best Practices

Safeguard the joy: 10 tips for securing your shiny new device

German Authorities Dismantle Dark Web Hub 'Kingdom Market' in Global Operation

Windows CLFS and five exploits used by ransomware operators (Exploit #4 CVE-2023-23376)

Windows CLFS and five exploits used by ransomware operators (Exploit #3 October 2022)

Windows CLFS and five exploits used by ransomware operators (Exploit #2 September 2022)

Windows CLFS and five exploits used by ransomware operators

Windows CLFS and five exploits used by ransomware operators (Exploit #1 CVE-2022-24521)

Windows CLFS and five exploits used by ransomware operators (Exploit #5 CVE-2023-28252)

Hackers Exploiting Old MS Excel Vulnerability to Spread Agent Tesla Malware

Data loss prevention isn't rocket science, but NASA hasn't made it work in Microsoft 365

Urgent: New Chrome Zero-Day Vulnerability Exploited in the Wild - Update ASAP

~ 20 Dec 2023 ~

Something nasty injected login-stealing JavaScript into 50K online banking sessions

Cybercrooks book a stay in hotel email inboxes to trick staff into spilling credentials

Remote Encryption Attacks Surge: How One Vulnerable Device Can Spell Disaster

GCHQ Christmas Codebreaking Challenge

Product Explained: Memcyco's Real-Time Defense Against Website Spoofing

These arent the Androids you should be looking for

Manchester's finest drowning in paperwork as Freedom of Information requests pile up

Alert: Chinese-Speaking Hackers Pose as UAE Authority in Latest Smishing Wave

3,500 Arrested in Global Operation HAECHI-IV Targeting Financial Criminals

SSH shaken, not stirred by Terrapin vulnerability

New Go-Based JaskaGO Malware Targeting Windows and macOS Systems

Philippines, South Korea, Interpol cuff 3,500 suspected cyber scammers, seize $300M

~ 19 Dec 2023 ~

BlackCat Ransomware Raises Ante After FBI Disruption

Millions of Xfinity customers' info, hashed passwords feared stolen in cyberattack

Before you go away for Xmas: You've patched that critical Perforce Server hole, right?

A Major Ransomware Takedown Suffers a Strange Setback

How Strata Identity and Microsoft Entra ID solve identity challenges in mergers and acquisitions

FBI Takes Down BlackCat Ransomware, Releases Free Decryption Tool

Behind the Scenes of Matveev's Ransomware Empire: Tactics and Team

AlphV/BlackCat hacked back as feds offer decryptor to ransomware victims

Hackers Abusing GitHub to Evade Detection and Control Compromised Hosts

OpenAI Is Not Training on Your Dropbox DocumentsToday

Subnet Solutions Inc. PowerSYSTEM Center

Open Design Alliance Drawing SDK

EuroTel ETL3100 Radio Transmitter

EFACEC UC 500E

EFACEC BCU 500

Are We Ready to Give Up on Security Awareness Training?

Iranian Hackers Using MuddyC2Go in Telecom Espionage Attacks Across Africa

New Malvertising Campaign Distributing PikaBot Disguised as Popular Software

ESET Threat Report H2 2023

Qakbot's backbot: FBI-led takedown keeps crims at bay for just 3 months

8220 Gang Exploiting Oracle WebLogic Server Vulnerability to Spread Malware

Double-Extortion Play Ransomware Strikes 300 Organizations Worldwide

~ 18 Dec 2023 ~

Hacktivists boast: We shut down Iran's gas pumps today

Mr Cooper cyberattack laid bare: 14.7M people's info stolen, costs hit $25M

Cyber-crooks slip into Vans, trample over operations

Beware: Experts Reveal New Details on Zero-Click Outlook RCE Exploits