Port 22

~ 3 Oct 2023 ~

Co-founder of collapsed crypto biz Three Arrows cuffed at airport

~ 2 Oct 2023 ~

Secure Yeti Appoints Jayson E. Street as Chief Adversarial Officer to Spearhead Cybersecurity Empowerment

Visa Program Combats Friendly Fraud Losses For Small Businesses Globally

Feds hopelessly behind the times on ransomware trends in alert to industry

In Search of Rust Developers, Companies Turn to In-House Training

North Korea Poses as Meta to Deploy Complex Backdoor at Aerospace Org

KillNet Claims DDoS Attack Against Royal Family Website

FBI: Crippling 'Dual Ransomware Attacks' on the Rise

Norway Urges Europe-Wide Ban on Meta's Targeted Ad Data Collection

Addressing AI and Security Challenges With Red Teams: A Google Perspective

Iran-Linked APT34 Spy Campaign Targets Saudis

Which DFIR Challenges Does the Middle East Face?

NSA AI Security Center

Celebrate 20 years of Cybersecurity Awareness Month with Microsoft and lets secure our world together

Dont Let Zombie Zoom Links Drag You Down

The Biggest Hack of 2023 Keeps Getting Bigger

Predictive Policing Software Terrible at Predicting Crimes

Making Sense of Today's Payment Cybersecurity Landscape

Security researchers believe mass exploitation attempts against WS_FTP have begun

LUCR-3: Scattered Spider Getting SaaS-y in the Cloud

APIs: Unveiling the Silent Killer of Cyber Security Risk Across Industries

Silent Skimmer: A Year-Long Web Skimming Campaign Targeting Online Payment Businesses

AWS stirs the MadPot busting bot baddies and eastern espionage since 2010

OpenRefine's Zip Slip Vulnerability Could Let Attackers Execute Malicious Code

The Silent Threat of APIs: What the New Data Reveals About Unknown Risk

BunnyLoader: New Malware-as-a-Service Threat Emerges in the Cybercrime Underground

Zanubis Android Banking Trojan Poses as Peruvian Government App to Target Users

Yes, Singapore immigration plans to scan your face instead of your passport

SANS ICS Security Awareness - New Series: Managing Human Risk in Industrial Control System Environments

~ 1 Oct 2023 ~

Now MOVEit maker Progress patches holes in WS_FTP

How to Stop Google Bard From Storing Your Data and Location

How to Tell When Your Phone Will Stop Getting Security Updates

~ 30 Sep 2023 ~

A Closer Look at the Snatch Data Ransom Group

Chinese Hackers Are Hiding in Routers in the US and Japan

Apple, Microsoft, and Google Just Fixed Multiple Zero-Day Flaws

FBI Warns of Rising Trend of Dual Ransomware Attacks Targeting U.S. Companies

Iranian APT Group OilRig Using New Menorah Malware for Covert Operations

New Critical Security Flaws Expose Exim Mail Servers to Remote Attacks

~ 29 Sep 2023 ~

Friday Squid Blogging: Protecting Cephalopods in Medical Research

Securing AI: What You Should Know

Microsoft Bing Chat pushes malware via bad ads

How Can Your Security Team Help Developers Shift Left?

PhD student guilty of 3D-printing 'kamikaze' drone for Islamic State terrorists

Spyware Vendor Targets Egyptian Orgs With Rare iOS Exploit Chain

DHS: Physical Security a Concern in Johnson Controls Cyberattack

DHS Calls Into Question Physical Security in Johnson Controls Cyberattack

Cybersecurity Gaps Plague US State Department, GAO Report Warns

Cybercriminals Using New ASMCrypt Malware Loader Flying Under the Radar

Move Over, MOVEit: Critical Progress Bug Infests WS_FTP Software

People Still Matter in Cybersecurity Management

Attacks on Azerbaijan Businesses Drop Malware via Fake Image Files

Norway wants Facebook behavioral advertising banned across Europe

How Lazarus impersonated Meta to attack a target in Spain Week in security with Tony Anscombe

Lazarus Group Impersonates Recruiter from Meta to Target Spanish Aerospace Firm

Post-Quantum Cryptography: Finally Real in Consumer Apps?

Lazarus luring employees with trojanized coding challenges: The case of a Spanish aerospace company

Microsoft's AI-Powered Bing Chat Ads May Lead Users to Malware-Distributing Sites

Progress Software Releases Urgent Hotfixes for Multiple Security Flaws in WS_FTP Server

Cisco Warns of Vulnerability in IOS and IOS XE Software After Exploitation Attempts

QR Code 101: What the Threats Look Like

~ 28 Sep 2023 ~

Chinese snoops stole 60K State Department emails in that Microsoft email heist

Government Shutdown Poised to Stress Nation's Cybersecurity Supply Chain

Chrome Flags Third Zero-Day This Month That's Tied to Spying Exploits

New Cisco IOS Zero-Day Delivers a Double Punch

Feds' privacy panel backs renewing Feds' S. 702 spying powers but with limits

Johnson Controls International Disrupted by Major Cyberattack

Q&A: UK Ambassador on Creating New Cybersecurity Agencies Around the World

DARPA takes its long-duration Manta undersea drone for a test-dip

Novel ZenRAT Scurries Onto Systems via Fake Password Manager Tool

GitHub Repositories Hit by Password-Stealing Commits Disguised as Dependabot Contributions

Looking Beyond the Hype Cycle of AI/ML in Cybersecurity

7 Ways SMBs Can Secure Their WordPress Sites

US Justice Department Urged to Investigate Gunshot Detector Purchases

Join the new Microsoft Security experience at Microsoft Ignite 2023

4 Legal Surprises You May Encounter After a Cybersecurity Incident

Supply Chain Attackers Escalate With GitHub Dependabot Impersonation

China's BlackTech Hacking Group Exploited Routers to Target U.S. and Japanese Companies

CAPTCHAs Easy for Humans, Hard for Bots

Rockwell Automation PanelView 800

DEXMA DexGate

The Dark Side of Browser Isolation and the Next Generation Browser Security Technologies

China-Linked Budworm Targeting Middle Eastern Telco and Asian Government Agencies

A cryptor, a stealer and a banking trojan

After failing at privacy, again, Google is working to keep Bard chats out of Search

China's national security minister rates fake news among most pressing cyber threats

Update Chrome Now: Google Releases Patch for Actively Exploited Zero-Day Vulnerability

Zero Trust Blog Series - Blog 3: Instrumenting for Zero Trust

A Preview of Windows 11s Passkeys Support

~ 27 Sep 2023 ~

Radiant Logic Announces Expanded Identity Analytics and Data Management Platform Capabilities

Fortinet Announces Formation of Veterans Program Advisory Council to Narrow the Cybersecurity Skills Gap With Military Veteran Talent

Netscout Identified Nearly 7.9M DDOS Attacks in the First Half of 2023

Researchers Release Details of New RCE Exploit Chain for SharePoint

China APT Cracks Cisco Firmware in Attacks Against the US and Japan

Will Government Secure Open Source or Muck It Up?

Microsoft Adds Passkeys to Windows 11

SoundThinking, Maker of ShotSpotter, Is Buying Parts of PredPol Creator Geolitica

Threat Data Feeds and Threat Intelligence Are Not the Same Thing

NYC rights groups say no to grocery store spycams and snooping landlords

Red Cross-Themed Phishing Attacks Distributing DangerAds and AtlasAgent Backdoors

Hackers Trick Outlook into Showing Fake AV Scans