Port 22

~ 17 Oct 2023 ~

They Supported Air Strike Victims. Then They Were Doxed and Arrested

Operation King TUT: The universe of threats in LATAM

British boffins say aircraft could fly on trash, cutting pollution debt by 80%

CERT-UA Reports: 11 Ukrainian Telecom Providers Hit by Cyberattacks

Warning: Unpatched Cisco Zero-Day Vulnerability Actively Targeted in the Wild

Will you meet the directive?

5 Ways Hospitals Can Help Improve Their IoT Security

~ 16 Oct 2023 ~

Security Must Empower AI Developers Now

Malicious 'Airstrike Alert' App Targets Israelis

Kaspersky Launches Specialized Security Solution for Containerized Environments

Critical, Unpatched Cisco Zero-Day Bug Is Under Active Exploit

'RomCom' Cyber Campaign Targets Women Political Leaders

We're not in e-Kansas anymore: State courts reel from 'unauthorized incursion'

Name That Toon: Modern Monarchy

Pro-Israeli Hacktivist Group Predatory Sparrow Reappears

A hack in hand is worth two in the bush

BLOODALCHEMY provides backdoor to southeast Asian nations' secrets

How Data Changes the Cyber-Insurance Market Outlook

Pro-Russian Hackers Exploiting Recent WinRAR Vulnerability in New Campaign

SpyNote: Beware of This Android Trojan that Records Audio and Phone Calls

The Fast Evolution of SaaS Security from 2020 to 2024 (Told Through Video)

Coin Flips Are Biased

Deepfake Porn Is Out of Control

Signal Debunks Zero-Day Vulnerability Reports, Finds No Evidence

Why Zero Trust Is the Cloud Security Imperative

3 Essential Steps to Strengthen SaaS Security

Binance's Smart Chain Exploited in New 'EtherHiding' Malware Campaign

Regulator, insurers and customers all coming for Progress after MOVEit breach

A Visual Summary of SANS CloudSecNext Summit 2023

~ 14 Oct 2023 ~

The US Congress Was Targeted With Predator Spyware

Microsoft to Phase Out NTLM in Favor of Kerberos for Stronger Authentication

~ 13 Oct 2023 ~

Friday Squid Blogging: On Squid Intelligence

How MOVEit Is Likely to Shift Cyber Insurance Calculus

Feds: Beware AvosLocker Ransomware Attacks on Critical Infrastructure

Security Pros Warn that EU's Vulnerability Disclosure Rule is Risky

530K people's info feared stolen from cloud PC gaming biz Shadow

Bungled ransomware raid targeting WS_FTP servers demanded just 0.018 BTC

ShellBot Cracks Linux SSH Servers, Debuts New Evasion Tactic

Microsoft Debuts AI Bug-Bounty Program, Offers $15K

Rumors of a Global Day of Jihad Have Unleashed a Dangerous Wave of Disinformation

Gaza Conflict Paves Way for Pro-Hamas Information Operations

Passkeys Are Cool, But They Aren't Enterprise-Ready

Calls for Visual Studio security tweak fall on deaf ears despite one-click RCE exploit

Staying on top of security updates Week in security with Tony Anscombe

Can open source be saved from the EU's Cyber Resilience Act?

New PEAPOD Cyberattack Campaign Targeting Women Political Leaders

What the Hollywood Writers Strike Resolution Means for Cybersecurity

US House Republicans Had Their Phones Confiscated to Stop Leaks

Equifax scores 11.1M slap on wrist over 2017 mega breach

ChatGPT at work: how chatbots help employees, but threaten business

Researchers Unveil ToddyCat's New Set of Tools for Data Exfiltration

Hacking the High School Grading System

Ransomware attacks doubled year on year. Are organizations equipped to handle the evolution of Ransomware in 2023?

HTTP/2 Rapid Reset: A New Protocol Vulnerability Will Haunt the Web for Years

DarkGate Malware Spreading via Messaging Services Posing as PDF Files

FBI, CISA Warn of Rising AvosLocker Ransomware Attacks Against Critical Infrastructure

Squid games: 35 security holes still unpatched in proxy after 2 years, now public

~ 12 Oct 2023 ~

Making the Case for Cryptographic Agility and Orchestration

How to Scan Your Environment for Vulnerable Versions of Curl

DigiCert Announces Comprehensive Discovery of Cryptographic Assets

Appdome Announces Attack Evaluation Tools in Digital Economy's Mobile XDR

DarkGate Operator Uses Skype, Teams Messages to Distribute Malware

Brands Beware: X's New Badge System Is a Ripe Cyber-Target

Microsoft Set to Retire Grunge-Era VBScript, to Cybercrime's Chagrin

BlackBerry Unveils Next-Generation UEM Redefining the Endpoint Management Market

Simpson Manufacturing Launches Investigation After Cyberattack

The Cyberwar Between the East and the West Goes Through Africa

Backdoor Lurks Behind WordPress Caching Plugin to Hijack Websites

Protect Critical Infrastructure With Same Rigor as Classified Networks

Malicious NuGet Package Targeting .NET Developers with SeroXen RAT

Uber's Ex-CISO Appeals Conviction Over 2016 Data Breach

New California Delete Act Tightens Rules for Data Brokers

Everest cybercriminals offer corporate insiders cold, hard cash for remote access

Building cyber resilience with data vaults

Weintek cMT3000 HMI Web CGI

Siemens Xpedition Layout Browser

Siemens SINEC NMS

Siemens Simcenter Amesim

Siemens SIMATIC CP products

Siemens SICAM PAS/PQS

Siemens SICAM A8000 Devices

Siemens SCALANCE W1750D

Siemens RUGGEDCOM APE1808

Siemens Mendix Forgot Password Module

Siemens CPCI85 Firmware of SICAM A8000 Devices

Schneider Electric IGSS

How the FTX Thieves Have Tried to Launder Their $400 Million Haul

Hikvision Access Control and Intercom Products

ShellBot Uses Hex IPs to Evade Detection in Attacks on Linux SSH Servers

Bounty to Recover NISTs Elliptic Curve Seeds

US construction giant unearths concrete evidence of cyberattack

How to Guard Your Data from Exposure in ChatGPT

Microsoft Defender Thwarts Large-Scale Akira Ransomware Attack

ToddyCat: Keep calm and check logs

Pan-African Financial Apps Leak Encryption, Authentication Keys

Researchers Uncover Malware Posing as WordPress Caching Plugin

HM Government has partnered with SANS to train cyber security experts

Researchers Uncover Ongoing Attacks Targeting Asian Governments and Telecom Giants

Two High-Risk Security Flaws Discovered in Curl Library - New Patches Released

Leveraging AI to Manage Human Risk (Part 1)