Port 22

~ 11 Oct 2023 ~

Chinese 'Stayin' Alive' Attacks Dance Onto Targets With Dumb Malware

Curl Bug Hype Fizzles After Patching Reveal

US Navy sailor admits selling secret military blueprints to China for $15K

A Graphic Hamas Video Donald Trump Jr. Shared on X Is Actually Real, Research Confirms

Microsoft: Chinese APT Behind Atlassian Confluence Attacks; PoCs Appear

Cloud Security Demand Drives Better Cyber-Firm Valuations and Deals

Adobe Acrobat Reader Vuln Now Under Attack

Gaza Conflict: How Israeli Cybersecurity Will Respond

Addressing a Breach Starts With Getting Everyone on the Same Page

Magecart Campaign Hijacks 404 Pages to Steal Data

Microsoft Defender for Endpoint now stops human-operated attacks on its own

Automatic disruption of human-operated attacks through containment of compromised user accounts

Data Thieves Test-Drive Unique Certificate Abuse Tactic

CISOs' salary growth slows with pay gap widening

Reassessing the Impacts of Risk Management With NIST Framework 2.0

From chaos to cadence: Celebrating two decades of Microsoft's Patch Tuesday

Over 17,000 WordPress Sites Compromised by Balada Injector in September 2023

U.S. Cybersecurity Agency Warns of Actively Exploited Adobe Acrobat Reader Vulnerability

Take an Offensive Approach to Password Security by Continuously Monitoring for Breached Passwords

A Frontline Report of Chinese Threat Actor Tactics and Techniques

Virus Bulletin building digital armies

Cisco Cant Stop Using Hard-Coded Passwords

The UN Risks Normalizing Internet Censorship

Protect AI Releases 3 AI/ML Security Tools as Open Source

curl vulnerabilities ironed out with patches after week-long tease

6 steps to getting the board on board with your cybersecurity program

What to expect when the UK-US Data Bridge comes into force this week

Microsoft Releases October 2023 Patches for 103 Flaws, Including 2 Active Exploits

Microsoft Warns of Nation-State Hackers Exploiting Critical Atlassian Confluence Vulnerability

Reasonable Valuations Drove Mergers and Acquisition Activity in Q3, 2023

~ 10 Oct 2023 ~

It's 2023 and Microsoft WordPad can be exploited to hijack vulnerable systems

Patch Tuesday, October 2023 Edition

Securely Moving Financial Services to the Cloud

Microsoft Patch Tuesday Haunted by Zero-Days, Wormable Bug

SBF on trial: The FTX Python code that allegedly let his Alameda hedge fund spend people's deposits

HTTP/2 'Rapid Reset' zero-day exploited in biggest DDoS deluge seen yet

Badbox Operation Targets Android Devices in Fraud Schemes

New One-Click Exploit Is a Supply Chain Risk for Linux OSes

Internet-Wide Zero-Day Bug Fuels Largest-Ever DDoS Event

Hackers For Hire Hit Both Sides in Israel-Hamas Conflict

Mirai reloads exploit arsenal as botnet embarks on another expansion drive

How Keyloggers Have Evolved From the Cold War to Today

Researcher bags two-for-one deal on Linux bugs while probing GNOME component

North Korea's State-Sponsored APTs Organize & Align

HTTP/2 Rapid Reset Zero-Day Vulnerability Exploited to Launch Record DDoS Attacks

Elon Musk Is Personally Undermining Xs Efforts to Curb Israel-Hamas War Disinformation

Fresh curl tomorrow will patch 'worst' security flaw in ages

Old-School Attacks Are Still a Danger, Despite Newer Techniques

Google Makes Passkeys Default, Stepping Up Its Push to Kill Passwords

Google Adopts Passkeys as Default Sign-in Method for All Users

Model Extraction Attack on Neural Networks

New Report: Child Sexual Abuse Content and Online Risks to Children on the Rise

Researchers Uncover Grayling APT's Ongoing Attack Campaign Across Industries

Virus Bulletin PUA a love letter

New Magecart Campaign Alters 404 Error Pages to Steal Shoppers' Credit Cards

Ransomware attacks register record speeds thanks to success of infosec industry

libcue Library Flaw Opens GNOME Linux Systems Vulnerable to RCE Attacks

Citrix Devices Under Attack: NetScaler Flaw Exploited to Capture User Credentials

Exercise Cyber Star tests Singapore response

Rethinking Compliance: The Underutilized Power of CSP Native Security Services

Living Off the Land Attacks and Countermeasures in Industrial Control Systems

~ 9 Oct 2023 ~

The Israel-Hamas War Erupts in Digital Chaos

Hacktivists Enter Fray Following Hamas Strikes Against Israel

Phishers Spoof USPS, 12 Other Natl Postal Services

'Looney Tunables' Linux Flaw Sees Snowballing Proof-of-Concept Exploits

Operation Behind Predator Mobile Spyware Is 'Industrial Scale'

Patch Now: Massive RCE Campaign Wrangles Routers Into Botnet

"I Had a Dream" and Generative AI Jailbreaks

PEACHPIT: Massive Ad Fraud Botnet Powered by Millions of Hacked Android and iOS

Expanded Microsoft Security Experts offerings provide comprehensive protection

The Israel-Hamas War Is Drowning X in Disinformation

DoJ: Ex-soldier tried to pass secrets to China after seeking a 'subreddit about spy stuff'

Cybersecurity Talent in America: Bridging the Gap

Independently Confirming Amnesty Security Labs finding of Predator targeting of U.S. & other elected officials on Twitter/X

Hacktivist attacks erupt in Middle East following Hamas assault on Israel

Cybercriminals Using EvilProxy Phishing Kit to Target Senior Executives in U.S. Firms

Webinar: How vCISOs Can Navigating the Complex World of AI and LLM Security

Datacenter cabling biz Volex confirms digital break-in

AI Risks

High-Severity Flaws in ConnectedIO's 3G/4G Routers Raise Concerns for IoT Security

Security Patch for Two New Flaws in Curl Library Arriving on October 11

Inside FTXs All-Night Race to Stop a $1 Billion Crypto Heist

Your family, home and small business need a cyber-resilience strategy, too!

The Need for Speed: When Cloud Attacks Take Only 10 Minutes

Gaza-Linked Cyber Threat Actor Targets Israeli Energy and Defense Sectors

Chinese smart TV boxes infected with malware in PEACHPIT ad fraud campaign

~ 8 Oct 2023 ~

Israel's Failure to Stop the Hamas Attack Shows the Danger of Too Much Surveillance

~ 7 Oct 2023 ~

Apple's Encryption Is Under Attack by a Mysterious Group

White Supremacist Active Clubs Are Breeding on Telegram

~ 6 Oct 2023 ~

23andMe User Data Stolen in Targeted Attack on Ashkenazi Jews

Too Rich To Ransomware? MGM Brushes Off $100M in Losses

WatchGuard Threat Lab Report Finds Endpoint Malware Volumes Decreasing Despite Campaigns Growing More Expansive

RIT Is the First University to Receive Support From the Google Cybersecurity Clinics Fund

Predictive Analysis Can Reduce Risks Associated With Data Breaches

SecTor 2023: Full Schedule Programming for Toronto Event

Cybersecurity Funding Rises by 21% in Q3 2023, Pinpoint Search Group's Report Indicates

CISA reveals 'Admin123' as top security threat in cyber sloppiness chart

23andMe Cyberbreach Exposes DNA Data, Potential Family Ties

Suspected Crime Gang Hacks Israeli President's Telegram Account

MGM Resorts attackers hit personal data jackpot, but house lost $100M