Port 22

~ 22 Jun 2024 ~

ExCobalt Cyber Gang Targets Russian Sectors with New GoRed Backdoor

Warning: New Adware Campaign Targets Meta Quest App Seekers

A Catastrophic Hospital Hack Ends in a Leak of 300M Patient Records

From network security to nyet work in perpetuity: What's up with the Kaspersky US ban?

U.S. Treasury Sanctions 12 Kaspersky Executives Amid Software Ban

~ 21 Jun 2024 ~

Change Healthcare finally spills the tea on what medical data was stolen by cyber-crew

Friday Squid Blogging: Squid Nebula

Uncle Sam sanctions Kaspersky's top bosses but not Mr K himself

Perplexity Plagiarized Our Story About How Perplexity Is a Bullshit Machine

Phoenix UEFI flaw puts long list of Intel chips in hot seat

Why attack surfaces are expanding

Chinese Hackers Deploy SpiceRAT and SugarGh0st in Global Espionage Campaign

Military-themed Email Scam Spreads Malware to Infect Pakistani Users

The long-tail costs of a data breach Week in security with Tony Anscombe

Qilin cyber scum leak data they claim belongs to London hospitals pathology provider

Ross Andersons Memorial Service

Oyster Backdoor Spreading via Trojanized Popular Software Downloads

SolarWinds Serv-U Vulnerability Under Active Attack - Patch Immediately

Since joining NATO, Sweden claims Russia has been borking Nordic satellites

Coding error in forgotten API blamed for massive data breach

U.S. Bans Kaspersky Software, Citing National Security Risks

~ 20 Jun 2024 ~

Crooks get their hands on 500K+ radiology patients' records in cyber-attack

Biden puts a bullet in Kaspersky: Sales, updates to be banned in America

Car dealer software bigshot CDK pulls systems offline twice amid 'cyber incident'

US Bans Kaspersky Software

KrebsOnSecurity Threatened with Defamation Lawsuit Over Fake Radaris CEO

Crypto exchange Kraken accuses blockchain security outfit CertiK of extortion

Researchers Uncover UEFI Vulnerability Affecting Multiple Intel CPUs

French Diplomatic Entities Targeted in Russian-Linked Cyber Attacks

Russia's cyber spies still threatening French national security, democracy

Yokogawa CENTUM

Westermo L210-F2G

CAREL Boss-Mini

Recovering Public Keys from Signatures

Tool Overload: Why MSPs Are Still Drowning with Countless Cybersecurity Tools in 2024

Qilin: We knew our Synnovis attack would cause a healthcare crisis at London hospitals

Chinese Cyber Espionage Targets Telecom Operators in Asia Since 2021

My health information has been stolen. Now what?

New Rust-based Fickle Malware Uses PowerShell for UAC Bypass and Data Exfiltration

Experts Uncover New Evasive SquidLoader Malware Targeting Chinese Organizations

~ 19 Jun 2024 ~

New Blog Moderation Policy

Kraken Crypto Exchange Hit by $3 Million Theft Exploiting Zero-Day Flaw

Chinese Cyber Espionage Group Exploits Fortinet, Ivanti and VMware Zero-Days

Amtrak confirms crooks are breaking into user accounts, derailing email addresses

Perplexity Is a Bullshit Machine

The Hacking of Culture and the Creation of Socio-Technical Debt

New Case Study: Unmanaged GTM Tags Become a Security Nightmare

Void Arachne Uses Deepfakes and AI to Deliver Malicious VPNs to Chinese Users

Warning: Markopolo's Scam Targeting Crypto Users via Fake Meeting Software

This Is What Would Happen if China Invaded Taiwan

Hacktivism is evolving and that could be bad news for organizations everywhere

Mailcow Mail Server Flaws Expose Servers to Remote Code Execution

That PowerShell 'fix' for your root cert 'problem' is a malware loader in disguise

~ 18 Jun 2024 ~

Rogue uni IT director pleads guilty after fraudulently buying $2.1M of tech

Dark-web kingpin puts 'stolen' internal AMD databases, source code up for sale

EU attempt to sneak through new encryption-busting law slammed by Signal, politicians

Signal Foundation Warns Against EU's Plan to Scan Private Messages for CSAM

CHERI Alliance formed to promote memory security tech ... but where's Arm?

Cybercriminals Exploit Free Software Lures to Deploy Hijack Loader and Vidar Stealer

Uncle Sam ends financial support to orgs hurt by Change Healthcare attack

Microsoft Defender Experts for XDR recognized in the latest MITRE Engenuity ATT&CK Evaluation for Managed Services

RAD Data Communications SecFlow-2

Analysis of user password strength

Analysis of user password strength

NHS boss says Scottish trust didn't meet attackers' demands

The Annual SaaS Security Report: 2025 CISO Plans and Priorities

Rethinking Democracy for the Age of AI

New Malware Targets Exposed Docker APIs for Cryptocurrency Mining

VMware Issues Patches for Cloud Foundation, vCenter Server, and vSphere ESXi

Singapore Police Extradites Malaysians Linked to Android Malware Fraud

VMware by Broadcom warns of two critical vCenter flaws, plus a nasty sudo bug

Arm security defense shattered by speculative execution 95% of the time

NIS2 Compliance for OT: Strategic Implementation of ICS Controls

Instructor Spotlight: Sean Thomas

~ 17 Jun 2024 ~

Shoddy infosec costs PwC spinoff and NMA $11.3M in settlement with Uncle Sam

Feds cuff suspected bosses of underworld Empire Market

Blackbaud has to cough up a few million dollars more over 2020 ransomware attack

ASUS Patches Critical Authentication Bypass Flaw in Multiple Router Models

Cops cuff 22-year-old Brit suspected of being Scattered Spider leader

China-Linked Hackers Infiltrate East Asian Firm for 3 Years Using F5 Devices

What is DevSecOps and Why is it Essential for Secure Software Delivery?

AWS is pushing ahead with MFA for privileged accounts. What that means for you ...

Using LLMs to Exploit Vulnerabilities

UK's Total Fitness exposed nearly 500k images of members and staff through unprotected database

Preventative defense tactics in the real world

Hackers Detail How They Allegedly Stole Ticketmaster Data From Snowflake

Amazon-Powered AI Cameras Used to Detect Emotions of Unwitting UK Train Passengers

Notorious cyber gang UNC3944 attacks vSphere and Azure to run VMs inside victims' infrastructure

Hackers Exploit Legitimate Websites to Deliver BadSpace Windows Backdoor

NiceRAT Malware Targets South Korean Users via Cracked Software

That didn't take long: replacement for SORBS spam blacklist arises ... sort of

Eight Essential Lessons for Resilient Supply Chain Security

A Visual Summary of SANS ICS Summit 2024

Japan's space junk cleaner hunts down major target

~ 16 Jun 2024 ~

How to Spot a Business Email Compromise Scam

Let Slip the Robot Dogs of War

U.K. Hacker Linked to Notorious Scattered Spider Group Arrested in Spain

~ 15 Jun 2024 ~

Alleged Boss of Scattered Spider Hacking Group Arrested

A Guide to RCS, Why Apples Adopting It, and How It Makes Texting Better

Ukrainian Sailors Are Using Telegram to Avoid Being Tricked Into Smuggling Oil for Russia