Port 22

~ 6 Oct 2023 ~

Google, Yahoo Push DMARC, Forcing Companies to Catch Up

North Korea's Lazarus Group Launders $900 Million in Cryptocurrency

Preparing for the Unexpected: A Proactive Approach to Operational Resilience

CDW data to be leaked next week after negotiations with LockBit break down

How to stop ransomware thieves WORMing their way into your data

DinodasRAT used against governmental entity in Guayana Week in security with Tony Anscombe

Google promises Germany to creep on users less after market power probe

Chinese Hackers Target Semiconductor Firms in East Asia with Cobalt Strike

New OS Tool Tells You Who Has Access to What Data

Fake friends and followers on social media and how to spot them

GitHub's Secret Scanning Feature Now Covers AWS, Microsoft, Google, and Slack

Deepfake Election Interference in Slovokia

Deepfake Election Interference in Slovakia

Supermicro's BMC Firmware Found Vulnerable to Multiple Critical Vulnerabilities

GoldDigger Android trojan targets Vietnamese banking apps, code contains hints of wider targets

~ 5 Oct 2023 ~

'Operation Jacana' Reveals DinodasRAT Custom Backdoor

Quash EDR/XDR Exploits With These Countermeasures

Legions of Critical Infrastructure Devices Subject to Cyber Targeting

10 Routine Security Gaffes the Feds Are Begging You to Fix

Madagascar Drops Predator Spyware on Citizens in Watering Hole Attack

Cisco warns of critical flaw in Emergency Responder code

Stealthy, Thieving Python Packages Slither Onto Windows Systems

Group-IB: 'GoldDigger' Banking Trojan Targets Vietnamese Organizations

Critical 'ShellTorch' Flaws Light Up Open Source AI Users, Like Google

Unkillable? Qakbot Infections Fly On Even After Its High-Profile Raid

Another security update, Apple? You're really keeping up with your tech rivals

Critical Zero-Day Bug in Atlassian Confluence Under Active Exploit

Could Cybersecurity Breaches Become Harmless in the Future?

QakBot Threat Actors Still in Action, Using Ransom Knight and Remcos RAT in Latest Attacks

BYOD should stand for bring your own disaster, according to Microsoft ransomware data

Cisco Releases Urgent Patch to Fix Critical Flaw in Emergency Responder Systems

Qognify NiceVision

Mitsubishi Electric CC-Link IE TSN Industrial Managed Switch

Hitachi Energy AFS65x, AFF66x, AFS67x, and AFR67x Series Products

Political Disinformation and AI

Analysis and Config Extraction of Lu0Bot, a Node.js Malware with Considerable Capabilities

Guyana Governmental Entity Hit by DinodasRAT in Cyber Espionage Attack

Lorenz ransomware crew bungles blackmail blueprint by leaking two years of contacts

GoldDigger Android Trojan Targets Banking Apps in Asia Pacific Countries

Operation Jacana: Foundling hobbits in Guyana

CISA Warns of Active Exploitation of JetBrains and Windows Vulnerabilities

North Korea goes phishing in Souths shipyards

Apple Rolls Out Security Patches for Actively Exploited iOS Zero-Day Flaw

Atlassian Confluence Hit by Newly Actively Exploited Zero-Day Patch Now

Insurance Companies Have a Lot to Lose in Cyberattacks

~ 4 Oct 2023 ~

Nokia Selected by Brazil's K2 Telecom As Partner to Strengthen its Security and Create Revenue Streams

IT networks under attack via critical Confluence zero-day. Patch now

Trend Micro Drives Latest Phase of Channel Prosperity and Engagement

New Malwarebytes Survey: Consumers Lack Trust in New Tech

ForAllSecure Announces First Dynamic Software Bill of Materials for Application Security

Make-me-root 'Looney Tunables' security hole on Linux needs your attention

Okta Launches Cybersecurity Workforce Development Initiative to Help Close the Tech and Cybersecurity Skills Gap

Mitiga Secures Strategic Investment From Cisco

37% Intimidated, 39% Frustrated With Online Security Highlighting Digital Anxiety

BeyondID Introduces Identity-First Model for Zero-Trust Maturity

'Gay furry hackers' brag of second NATO break-in, steal and leak more data

Bing Chat LLM Tricked into Circumventing CAPTCHA Filter

AWS Plans Multifactor Authentication Mandates for 2024

Red Cross lays down hacktivism law as Ukraine war rages on

On the Dark Web, Prices Are Down for Middle Eastern Network Access

CISA barred from coordinating with social media sites to police misinformation

'Looney Tunables' Bug Opens Millions of Linux Systems to Root Takeover

Breaches Are the Cost of Doing Business, but NIST Is Here to Help

Turnkey Rootkit for Amateur Hackers Makes Supply Chain Attacks Easy

Researchers Link DragonEgg Android Spyware to LightSpy iOS Surveillanceware

How to Measure Patching and Remediation Performance

Patch Confusion for Critical Exim Bug Puts Email Servers at Risk--Again

Wing Disrupts the Market by Introducing Affordable SaaS Security

Rogue npm Package Deploys Open-Source Rootkit in New Supply Chain Attack

Malicious Ads in Bing Chat

The Team Helping Women Fight Digital Domestic Abuse

Microsoft Warns of Cyber Attacks Attempting to Breach Cloud via SQL Server Instance

Your Cheap Android TV Streaming Box May Have a Dangerous Backdoor

How Neuralink Keeps Dead Monkey Photos Secret

Looney Tunables: New Linux Flaw Enables Privilege Escalation on Major Distributions

Trio of TorchServe flaws means PyTorch users need an urgent upgrade

SEC670 Prep Quiz Answers

SEC670 Prep Quiz

~ 3 Oct 2023 ~

US v Sam Bankman-Fried trial begins ... as imploded crypto-biz boss sues his insurer

Russian Hacktivism Takes a Toll on Organizations in Ukraine, EU, US

Gartner Forecasts Global Security and Risk Management Spending to Grow 14% in 2024

Attacks on Maximum Severity WS_FTP Bug Have Been Limited So Far

USPS Anchors Snowballing Smishing Campaigns

Name That Edge Toon: Office Artifacts

Mercenary spyware: Defending against whats next iMEdD International Journalism Forum 2023

Qualcomm Releases Patch for 3 new Zero-Days Under Active Exploitation

Defending new vectors: Threat actors attempt SQL Server to cloud lateral movement

Fast-Growing Dropbox Campaign Steals Microsoft SharePoint Credentials

Warning: PyTorch Models Vulnerable to Remote Code Execution via ShellTorch

Over 3 Dozen Data-Stealing Malicious npm Packages Found Targeting Developers

Ransomware Crisis, Recession Fears Leave CISOs in Tough Spot

CISA adds latest Chrome zero-day to Known Exploited Vulnerabilities Catalog

API Security Trends 2023 Have Organizations Improved their Security Posture?

Protecting your IT infrastructure with Security Configuration Assessment (SCA)

Hacking Gas Pumps via Bluetooth

Playing your part in building a safer digital world: Why cybersecurity matters

Researcher Reveals New Techniques to Bypass Cloudflare's Firewall and DDoS Protection

Arm Issues Patch for Mali GPU Kernel Driver Vulnerability Amidst Ongoing Exploitation

Nexusflow Launches to Help Automate the SOC

Co-founder of collapsed crypto biz Three Arrows cuffed at airport