Port 22

~ 9 May 2024 ~

Ex-White House election threat hunter weighs in on what to expect in November

US faith-based healthcare org Ascension says 'cybersecurity event' disrupted clinical ops

RSA Conference 2024: AI hype overload

Dell customer order database of '49M records' stolen, now up for sale on dark web

New TunnelVision Attack Allows Hijacking of VPN Traffic via DHCP Manipulation

Global attackers targeting US critical infrastructure should be 'wake-up call'

How Criminals Are Using Generative AI

Kremlin-Backed APT28 Targets Polish Institutions in Large-Scale Malware Campaign

Rockwell Automation FactoryTalk Historian SE

Delta Electronics InfraSuite Device Master

alpitronic Hypercharger EV Charger

New Guide: How to Scale Your vCISO Services Profitably

Mirai Botnet Exploits Ivanti Connect Secure Flaws for Malicious Payload Delivery

APT trends report Q1 2024

Critical F5 Central Manager Vulnerabilities Allow Enable Full Device Takeover

~ 8 May 2024 ~

What do Europeans, Americans and Australians have in common? Scammed $50M by fake e-stores

Undersea cables must have high-priority protection before they become top targets

Undersea cables are high-priority targets it's high time to make these global pathways more resilient

Top FBI Official Urges Agents to Use Warrantless Wiretaps on US Soil

CISA boss: Secure code is the 'only way to make ransomware a shocking anomaly'

How implementing a trust fabric strengthens identity and network

A SaaS Security Challenge: Getting Permissions All in One Place

New Spectre-Style 'Pathfinder' Attack Targets Intel CPU, Leak Encryption Keys and Data

One year on, universities org admits MOVEit attack hit data of 800k people

UK opens investigation of MoD payroll contractor after confirming attack

The Fundamentals of Cloud Security Stress Testing

Hijack Loader Malware Employs Process Hollowing, UAC Bypass in Latest Version

State of ransomware in 2024

A (Strange) Interview the Russian-Military-Linked Hackers Targeting US Water Utilities

Ten years since the first corp ransomware, Mikko Hyppnen sees no end in sight

Ten years since the first corp ransomware, Mikko Hyppnen sees no end in sight

Hackers Exploiting LiteSpeed Cache Bug to Gain Full Control of WordPress Sites

From infosec to skunks, RSA Conference SVP spills the tea

UnitedHealth's 'egregious negligence' led to Change Healthcare infection

~ 7 May 2024 ~

America's War on Drugs and Crime will be AI powered, says Homeland Security boss

Watch out for rogue DHCP servers decloaking your VPN connections

CISA's early-warning system helped critical orgs close 852 ransomware holes

TikTok sues America to undo divest-or-die law

U.S. Charges Russian Man as Boss of LockBit Ransomware Group

Microsoft announces the 2024 Microsoft Security Excellence Awards winners

Russian Hacker Dmitry Khoroshev Unmasked as LockBit Ransomware Administrator

New Attack on VPNs

How to inspire the next generation of scientists | Unlocked 403: Cybersecurity podcast

Investigators finally unmask LockBit kingpin after two-month tease

Cops finally unmask 'LockBit kingpin' after two-month tease

The Alleged LockBit Ransomware Mastermind Has Been Identified

APT42 Hackers Pose as Journalists to Harvest Credentials and Access Cloud Data

China-Linked Hackers Used ROOTROT Webshell in MITRE Network Intrusion

SUBNET Substation Server

PTC Codebeamer

The truth about KEV: CISAs vuln deadlines good influence on private-sector patching

New Case Study: The Malicious Comment

Physical security biz exposes 1.2M files via unprotected database

Google Simplifies 2-Factor Authentication Setup (It's More Important Than Ever)

Exploits and vulnerabilities in Q1 2024

Russian Operator of BTC-e Crypto Exchange Pleads Guilty to Money Laundering

Ransomware evolves from mere extortion to 'psychological attacks'

Google, Meta, Spotify break Apple's device fingerprinting rules new claim

~ 6 May 2024 ~

Fed-run LockBit site back from the dead and vows to really spill the beans on gang

Mastodon delays fix for link previews DDoSing websites

Consultant charged over $1.5M extortion scheme against IT giant

New capabilities to help you secure your AI transformation

Why Your VPN May Not Be As Secure As It Claims

Critical Tinyproxy Flaw Opens Over 50,000 Hosts to Remote Code Execution

China-Linked Hackers Suspected in ArcaneDoor Cyberattacks Targeting Network Devices

CISA says 'no more' to decades-old directory traversal bugs

Apples iPhone Spyware Problem Is Getting Worse. Heres What You Should Know

New Lawsuit Attempting to Make Adversarial Interoperability Legal

It Costs How Much?!? The Financial Pitfalls of Cyberattacks on SMBs

Xiaomi Android Devices Hit by Multiple Flaws Across Apps and System Components

Financial cyberthreats in 2023

The hackers toolkit: 4 gadgets that could spell security trouble

New 'Cuckoo' Persistent macOS Spyware Targeting Intel and Arm Macs

Germany points finger at Fancy Bear for widespread 2023 hacks, DDoS attacks

The Distinctive Worlds of OT Cybersecurity and IT Cybersecurity

~ 5 May 2024 ~

End-to-end encryption may be the bane of cops, but they can't close that Pandora's Box

Building a Cloud Security Flywheel: Lessons from the Field

~ 4 May 2024 ~

Dating apps kiss'n'tell all sorts of sensitive personal info

A New Surveillance Tool Invades Border Towns

Microsoft Outlook Flaw Exploited by Russia's APT28 to Hack Czech, German Entities

~ 3 May 2024 ~

Kaspersky hits back at claims it helped Russia develop military drone systems

Kaspersky accused of helping Russia develop military drone systems

Friday Squid Blogging: Squid Purses

My TED Talks

It may take decade to shore up software supply chain security, says infosec CEO

Pay up, or else? Week in security with Tony Anscombe

Security above all elseexpanding Microsofts Secure Future Initiative

Expert-Led Webinar - Uncovering Latest DDoS Tactics and Learn How to Fight Back

Hackers Increasingly Abusing Microsoft Graph API for Stealthy Malware Communications

Rare Interviews with Enigma Cryptanalyst Marian Rejewski

New Guide Explains How to Eliminate the Risk of Shadow SaaS and Protect Corporate Data

NSA, FBI Alert on N. Korean Hackers Spoofing Emails from Trusted Sources

These Dangerous Scammers Dont Even Bother to Hide Their Crimes

Google Announces Passkeys Adopted by Over 400 Million Accounts

Europol op shutters 12 scam call centers and cuffs 21 suspected fraudsters

Four Critical Vulnerabilities Expose HPE Aruba Devices to RCE Attacks

Indonesia sneakily buys spyware, claims Amnesty International

Chinese government website security is often worryingly bad, say Chinese researchers

How AI and ML are Changing Mobile Device Forensics Investigations

~ 2 May 2024 ~

Microsoft, Google do a victory lap around passkeys