Port 22

~ 20 May 2024 ~

Can I phone a friend? How cops circumvent face recognition bans

Iranian MOIS-Linked Hackers Behind Destructive Attacks on Albania and Israel

Researchers call out QNAP for dragging its heels on patch development

DoJ, ByteDance ask court: Hurry up and rule on TikTok ban already

WikiLeaks' Julian Assange Can Appeal His Extradition to the US, British Court Says

Foxit PDF Reader Flaw Exploited by Hackers to Deliver Diverse Malware Arsenal

IBM Sells Cybersecurity Group

Defending Your Commits From Known CVEs With GitGuardian SCA And Git Hooks

British Library's candid ransomware comms driven by 'emotional intelligence'

Cyber Criminals Exploit GitHub and FileZilla to Deliver Cocktail Malware

Chinese telco gear may become <i>verboten</i> on German networks

Latrodectus Malware Loader Emerges as IcedID's Successor in Phishing Campaigns

Nissan infosec in the spotlight again after breach affecting more than 50K US employees

Adapting to Advanced Malware: Insights from the 2024 Cybersecurity Frontlines

~ 19 May 2024 ~

Chinese Nationals Arrested for Laundering $73 Million in Pig Butchering Crypto Scam

Grandoreiro Banking Trojan Resurfaces, Targeting Over 1,500 Banks Worldwide

~ 18 May 2024 ~

An attorney says she saw her library reading habits reflected in mobile ads. That's not supposed to happen

Gawd, after that week, we wonder what's next for China and the Western world

US Official Warns a Cell Network Flaw Is Being Exploited for Spying

How two brothers allegedly swiped $25M in a 12-second Ethereum heist

~ 17 May 2024 ~

Aussie cops probe MediSecure's 'large-scale ransomware data breach'

Friday Squid Blogging: Emotional Support Squid

Three cuffed for 'helping North Koreans' secure remote IT jobs in US

Kinsing Hacker Group Exploits More Flaws to Expand Botnet for Cryptojacking

The who, where, and how of APT attacks Week in security with Tony Anscombe

First LockBit, now BreachForums: Are cops winning the war or just a few battles?

New XM Cyber Research: 80% of Exposures from Misconfigurations, Less Than 1% from CVEs

China-Linked Hackers Adopt Two-Stage Infection Tactic to Deploy Deuterbear RAT

FBI Seizes BreachForums Website

Kimsuky APT Deploying Linux Backdoor Gomir in South Korean Cyber Attacks

CISA Warns of Actively Exploited D-Link Router Vulnerabilities - Patch Now

~ 16 May 2024 ~

Crims abusing Microsoft Quick Assist to deploy Black Basta ransomware

New Wi-Fi Vulnerability Enables Network Eavesdropping via Downgrade Attacks

EU probes Meta over its provisions for protecting children

Stifling Beijing in cyberspace is now British intelligences number-one mission

North Korean Hackers Exploit Facebook Messenger in Targeted Malware Campaign

Siemens Teamcenter Visualization and JT2Go

Siemens Solid Edge

Siemens Simcenter Nastran

Siemens SIMATIC CN 4100 Before V3.0

Siemens SICAM Products

Siemens RUGGEDCOM APE1808

Siemens PS/IGES Parasolid Translator Component

Siemens Parasolid

Siemens Desigo Fire Safety UL and Cerberus PRO UL Fire Protection Systems

Rockwell Automation FactoryTalk View SE

Zero-Trust DNS

Researchers Uncover 11 Security Flaws in GE HealthCare Ultrasound Machines

NCSC CTO: Broken market must be fixed to usher in new tech

Cybercriminals Exploiting Microsofts Quick Assist Feature in Ransomware Attacks

Google Patches Yet Another Actively Exploited Chrome Zero-Day Vulnerability

Tackling Modern Human Risks in Cybersecurity: Insights from the Verizon DBIR 2024

~ 15 May 2024 ~

FBI takes down BreachForums ransomware website and Telegram channel

Crook brags about US Army and $75b defense biz pwnage

FBI Seizes BreachForums Again, Urges Users to Report Criminal Activity

Improving cyber defense with open source SIEM and XDR

Google Launches AI-Powered Theft and Data Protection Features for Android Devices

Android 15 Theft Detection Lock Knows When Your Phone Is Stolen

Android 15 Rolls Out Advanced Features to Protect Users from Scams and Malicious Apps

Threat actors misusing Quick Assist in social engineering attacks leading to ransomware

Turla Group Deploys LunarWeb and LunarMail Backdoors in Diplomatic Missions

(Cyber) Risk = Probability of Occurrence x Damage

Ebury Botnet Malware Compromises 400,000 Linux Servers Over Past 14 Years

It's Time to Master the Lift & Shift: Migrating from VMware vSphere to Microsoft Azure

To the Moon and back(doors): Lunar landing in diplomatic missions

Dutch Court Sentences Tornado Cash Co-Founder to 5 Years in Prison for Money Laundering

Microsoft Patches 61 Flaws, Including Two Actively Exploited Zero-Days

Understanding the Latest Cyber Threats: Insights from RSA Conference 2024 Keynote

~ 14 May 2024 ~

Microsoft fixes a bug abused in QakBot attacks plus a second under exploit

FCC names and shames Royal Tiger AI robocall crew

Patch Tuesday, May 2024 Edition

QakBot attacks with Windows zero-day (CVE-2024-30051)

Secrecy Concerns Mount Over Spy Powers Targeting US Data Centers

Cybersec chiefs team up with insurers to say 'no' to ransomware bullies

Upcoming Speaking Engagements

VMware Patches Severe Security Flaws in Workstation and Fusion Products

Telegram CEO calls out rival Signal, claiming it has ties to US government

New Chrome Zero-Day Vulnerability CVE-2024-4761 Under Active Exploitation

Google, Apple gear to raise tracking tag stalker alarm

SUBNET PowerSYSTEM Center and Substation Server

Rockwell Automation FactoryTalk Remote Access

Mitsubishi Electric Multiple FA Engineering Software Products

Johnson Controls Software House C-CURE 9000

Critical Flaws in Cacti Framework Could Let Attackers Execute Malicious Code

Another Chrome Vulnerability

Incident response analyst report 2023

6 Mistakes Organizations Make When Deploying Advanced Authentication

Ebury is alive but unseen: 400k Linux servers compromised for cryptocurrency theft and financial gain

Ongoing Campaign Bombarded Enterprises with Spam Emails and Phone Calls

ESET APT Activity Report Q4 2023Q1 2024

Visualize your critical cyber risks

NHS Digital hints at exploit sightings of Arcserve UDP vulnerabilities

Apple and Google Launch Cross-Platform Feature to Detect Unwanted Bluetooth Tracking Devices

~ 13 May 2024 ~

'Cyberattack' shutters Christie's website days before $840M art mega-auction

Uncle Sam urges action after Black Basta ransomware infects Ascension

Internal Emails Show How a Controversial Gun-Detection AI System Found Its Way to NYC

Microsoft is again named a Leader in the 2024 Gartner Magic Quadrant for Security Information and Event Management

MITRE Unveils EMB3D: A Threat-Modeling Framework for Embedded Devices

The $2.3 Billion Tornado Cash Case Is a Pivotal Moment for Crypto Privacy

AI red-teaming tools helped X-Force break into a major tech manufacturer 'in 8 hours'