Port 22

~ 15 Jun 2024 ~

Ransomware Attacks Are Getting Worse

Grandoreiro Banking Trojan Hits Brazil as Smishing Scams Surge in Pakistan

Pakistani Hackers Use DISGOMOJI Malware in Indian Government Cyber Attacks

Meta Halts AI Training on EU User Data Amid Privacy Concerns

Microsoft answered Congress' questions on security. Now the White House needs to act

~ 14 Jun 2024 ~

Stanford Internet Observatory wilts under legal pressure during election year

Friday Squid Blogging: Squid Cartoon

Meta won't train AI on Euro posts after all, as watchdogs put their paws down

Nigerian faces up to 102 years in the slammer for $1.5M phishing scam

Upcoming Speaking Engagements

Ukraine busts SIM farms targeting soldiers with spyware

Google's Privacy Sandbox Accused of User Tracking by Austrian Non-Profit

Learn to Secure Petabyte-Scale Data in a Webinar with Industry Titans

How Arid Viper spies on Android users in the Middle East Week in security with Tony Anscombe

French state bidding for piece of Atos, offers 700M

Demo of AES GCM Misuse Problems

Why Regulated Industries are Turning to Military-Grade Cyber Defenses

ESET Research Podcast: APT Activity Report Q4 2023Q1 2024

ZKTeco Biometric System Found Vulnerable to 24 Critical Security Flaws

North Korean Hackers Target Brazilian Fintech with Sophisticated Phishing Tactics

Microsoft Delays AI-Powered Recall Feature for Copilot+ PCs Amid Security Concerns

Microsoft bigwig says the Feds catching Chinese spies in Exchange Online is the cloud working as intended

~ 13 Jun 2024 ~

US Space Force wanted $77M to reinforce GPS and Congress shot it down

Oracle Ads have had it: $2B operation shuts down after dwindling to $300M

Ukrainian cops collar Kyiv programmer believed to be Conti, LockBit linchpin

New Attack Technique 'Sleepy Pickle' Targets Machine Learning Models

Arid Viper Launches Mobile Espionage Campaign with AridSpy Malware

Google's Privacy Sandbox more like a privacy mirage, campaigners claim

Siemens TIA Administrator

Siemens Teamcenter Visualization and JT2Go

Siemens ST7 ScadaConnect

Siemens SITOP UPS1600

Siemens SINEC Traffic Analyzer

Siemens SIMATIC S7-200 SMART Devices

Siemens SIMATIC and SIPLUS

Siemens SCALANCE XM-400, XR-500

Siemens PowerSys

Siemens Mendix Applications

Rockwell Automation FactoryTalk View SE

Fuji Electric Tellus Lite V-Simulator

Student's flimsy bin bags blamed for latest NHS data breach

Why SaaS Security is Suddenly Hot: Racing to Defend and Comply

AI and the Indian Election

Pakistan-linked Malware Campaign Evolves to Target Windows, Android, and macOS

Cybercriminals Employ PhantomLoader to Distribute SSLoad Malware

Cinterion EHS5 3G UMTS/HSPA Module Research

Arid Viper poisons Android apps with AridSpy

Ukraine Police Arrest Suspect Linked to LockBit and Conti Ransomware Groups

Google Warns of Pixel Firmware Security Flaw Exploited as Zero-Day

New Cross-Platform Malware 'Noodle RAT' Targets Windows and Linux Systems

Time to zero in on Zero Trust?

Crooks crack customer info at tracking device vendor Tile, issue 'extortion' demands

~ 12 Jun 2024 ~

Ransomware crew may have exploited Windows make-me-admin bug as a zero-day

White House report dishes deets on all 11 major government breaches from 2023

Microsoft Incident Response tips for managing a mass password reset

How to achieve cloud-native endpoint management with Microsoft Intune

China's FortiGate attacks more extensive than first thought

Cryptojacking Campaign Targets Misconfigured Kubernetes Clusters

Lessons from the Ticketmaster-Snowflake Breach

Black Basta Ransomware May Have Exploited MS Windows Zero-Day Flaw

Using AI for Political Polling

Medical-Targeted Ransomware Is Breaking Records After Change Healthcares $22M Payout

New Phishing Campaign Deploys WARMCOOKIE Backdoor Targeting Job Seekers

China-Backed Hackers Exploit Fortinet Flaw, Infecting 20,000 Systems Globally

Microsoft Issues Patches for 51 Flaws, Including Critical MSMQ Vulnerability

Allianz Cyber Talent Academy - The First Foundation to Bridge the Cybersecurity Skills Shortage

Let's kick off our summer with a pwn-me-by-Wi-Fi bug in Microsoft Windows

~ 11 Jun 2024 ~

Patch Tuesday, June 2024 Recall Edition

Pure Storage pwned, claims data plundered by crims who broke into Snowflake workspace

Cylance clarifies data breach details, except where the data came from

US Leaders Dodge Questions About Israels Influence Campaign

How Cynet Makes MSPs Rich & Their Clients Secure

Chinese Actor SecShow Conducts Massive DNS Probing on Global Scale

UK and Canada's data chiefs join forces to investigate 23andMe mega-breach

Rockwell Automation ControlLogix, GuardLogix, and CompactLogix

Intrado 911 Emergency Gateway

AVEVA PI Web API

AVEVA PI Asset Framework Client

LLMs Acting Deceptively

Top 10 Critical Pentest Findings 2024: What You Need to Know

Apple Integrates OpenAI's ChatGPT into Siri for iOS, iPadOS, and macOS

China-Linked ValleyRAT Malware Resurfaces with Advanced Data Theft Tactics

QR code SQL injection and other vulnerabilities in a popular biometric terminal

Snowflake Breach Exposes 165 Customers' Data in Ongoing Extortion Campaign

Arm Warns of Actively Exploited Zero-Day Vulnerability in Mali GPU Drivers

Snowflake customers not using MFA are not unique over 165 of them have been compromised

Cyber attack flattens Japanese vid-sharing site Niconico and others

~ 10 Jun 2024 ~

Christie's confirms RansomHub crooks stole data on 45K clients

More_eggs Malware Disguised as Resumes Targets Recruiters in Phishing Attack

WeLiveSecurity wins Best Cybersecurity Vendor Blog award!

Ransomware Is More Brutal Than Ever in 2024

Snowflake tells customers to enable MFA as investigations continue

Two cuffed over suspected smishing campaign using 'text message blaster'

Two arrested in UK over fake cell tower-powered smishing campaign

Cybersecurity CPEs: Unraveling the What, Why & How

Azure Service Tags Vulnerability: Microsoft Warns of Potential Abuse by Hackers

Exploiting Mistyped URLs

Google Takes Down Influence Campaigns Tied to China, Indonesia, and Russia

Bypassing 2FA with phishing and OTP bots

Sticky Werewolf Expands Cyber Attack Targets in Russia and Belarus