Port 22

~ 25 Jul 2024 ~

Patch management still seemingly abysmal because no one wants the job

Critical Docker Engine Flaw Allows Attackers to Bypass Authorization Plugins

CISA Warns of Exploitable Vulnerabilities in Popular BIND 9 DNS Software

New Chrome Feature Scans Password-Protected Files for Malicious Content

How a cheap barcode scanner helped fix CrowdStrike'd Windows PCs in a flash

Fatal timeline of CrowdStrike's week from hell Feb to now

~ 24 Jul 2024 ~

Oops. Apple relied on bad code while flaming Google Chrome's Topics ad tech

Uncle Sam opens probe into CrowdStrike turbulence at Delta Air Lines

Zero Trust in the Age of AI: Join our online event to learn how to strengthen your security posture

Robot Dog Internet Jammer

Windows Patch Tuesday update might send a user to the BitLocker recovery screen

Data pilfered from Pentagon IT supplier Leidos

Telegram App Flaw Exploited to Spread Malware Hidden in Videos

How a Trust Center Solves Your Security Questionnaire Problem

A Hacker Ghost Network Is Quietly Spreading Malware on GitHub

This Machine Exposes Privacy Violations

How to Reduce SaaS Spend and Risk Without Impacting Productivity

Patchwork Hackers Target Bhutan with Advanced Brute Ratel C4 Tool

School gets an F for using facial recognition on kids in canteen

CrowdStrike Explains Friday Incident Crashing Millions of Windows Devices

Forget security Google's reCAPTCHA v2 is exploiting users for profit

Microsoft Defender Flaw Exploited to Deliver ACR, Lumma, and Meduza Stealers

CISA Adds Twilio Authy and IE Flaws to Exploited Vulnerabilities List

CrowdStrike blames a test software bug for that giant global mess it made

CrowdStrike blames a test software bug for that giant global mess it made

Security biz KnowBe4 hired fake North Korean techie, who got straight to work ... on evil

Philippines wipes out its legit online gambling industry to take down scammers

~ 23 Jul 2024 ~

How did a CrowdStrike config file crash millions of Windows computers? We take a closer look

Phish-Friendly Domain Registry .top Put on Notice

Administrators have update lessons to learn from the CrowdStrike outage

Protecting AI systems from cyber threats

Cybercrooks spell trouble with typosquatting domains amid CrowdStrike crisis

Alphabet's reported $23B bet on Wiz fizzles out

Chinese Hackers Target Taiwan and US NGO with MgBot Malware

Building cyber-resilience: Lessons learned from the CrowdStrike incident

National Instruments LabVIEW

National Instruments IO Trace

Hitachi Energy AFS/AFR Series Products

2017 ODNI Memo on Kaspersky Labs

New ICS Malware 'FrostyGoop' Targeting Critical Infrastructure

How to Securely Onboard New Employees Without Sharing Temporary Passwords

Magento Sites Targeted with Sneaky Credit Card Skimmer via Swap Files

Meta Given Deadline to Address E.U. Concerns Over 'Pay or Consent' Model

Ukrainian Institutions Targeted Using HATVIBE and CHERRYSPY Malware

The tap-estry of threats targeting Hamster Kombat players

How Russia-Linked Malware Cut Heat to 600 Ukrainian Buildings in Deep Winter

Securing AI around the world

Google Abandons Plan to Phase Out Third-Party Cookies in Chrome

How to Become an OSINT Investigator

Google's plan to drop third-party cookies in Chrome crumbles

~ 22 Jul 2024 ~

Global cops power down world's 'most prolific' DDoS dealership

LA County Superior Court closes doors to reboot justice after ransomware attack

Cybercrooks crafting solo careers in wake of ransomware takedowns

Oracle coughs up $115M to make privacy case go away

Experts Uncover Chinese Cybercrime Network Behind Gambling and Human Trafficking

EU gave CrowdStrike the keys to the Windows kernel, claims Microsoft

PINEAPPLE and FLUXROOT Hacker Groups Abuse Google Cloud for Credential Phishing

Two Russians sanctioned over cyberattacks on US critical infrastructure

How to Set up an Automated SMS Analysis Service with AI in Tines

Snake Mimics a Spider

MSPs & MSSPs: How to Increase Engagement with Your Cybersecurity Clients Through vCISO Reporting

The Pentagon Wants to Spend $141 Billion on a Doomsday Machine

Cursed tapes: Exploiting the EvilVideo vulnerability on Telegram for Android

SocGholish Malware Exploits BOINC Project for Covert Cyberattacks

New Linux Variant of Play Ransomware Targeting VMWare ESXi Systems

Cellebrite got into Trump shooter's Samsung device in just 40 minutes

Navigating the Path to a State of Zero Trust in 2024

Building a Zero Trust Framework: Key Strategies for 2024 and Beyond

~ 21 Jul 2024 ~

CrowdStrike's Falcon Sensor also linked to Linux kernel panics and crashes

How adware exposed victims to kernel-level threats Week in Security with Tony Anscombe

~ 20 Jul 2024 ~

Cybercriminals Exploit CrowdStrike Update Mishap to Distribute Remcos RAT Malware

The Feds Say These Are the Russian Hackers Who Attacked US Water Utilities

17-Year-Old Linked to Scattered Spider Cybercrime Syndicate Arrested in U.K.

~ 19 Jul 2024 ~

Don't Fall for CrowdStrike Outage Scams

UK cops arrest teen suspect in MGM Resorts cyberattack probe

Friday Squid Blogging: Peru Trying to Protect its Squid Fisheries

CrowdStrike Windows patchpocalypse could take weeks to fix, IT admins fear

Beyond the blue screen of death: Why software updates matter

Brett Solomon on Digital Rights

How One Bad CrowdStrike Update Crashed the Worlds Computers

Summary of "AI Leaders Spill Their Secrets" Webinar

Global Microsoft Meltdown Tied to Bad Crowstrike Update

Faulty CrowdStrike Update Crashes Windows Systems, Impacting Businesses Worldwide

Two Russian Nationals Plead Guilty in LockBit Ransomware Attacks

The complexities of cybersecurity update processes

Safeguard Personal and Corporate Identities with Identity Intelligence

Pro-Houthi Group Targets Yemen Aid Organizations with Android Spyware

Huge Microsoft Outage, Linked to CrowdStrike, Takes Down Computers Around the World

APT41 Infiltrates Networks in Italy, Spain, Taiwan, Turkey, and the U.K.

SolarWinds Patches 11 Critical Flaws in Access Rights Manager Software

CrowdStrike code update bricking Windows machines around the world

North Korea likely behind takedown of Indian crypto exchange WazirX

Beijing's attack gang Volt Typhoon was a false flag inside job conspiracy: China

WazirX Cryptocurrency Exchange Loses $230 Million in Major Security Breach

Strategies for Training and Hiring in the US Government: A Black Rainbow Case Study

~ 18 Jul 2024 ~

Judge mostly drags SEC's lawsuit against SolarWinds into the recycling bin

Citizen Lab at CBC Ideas Week Brave New Worlds: The rights to privacy and the freedom of thought and expression

J.D. Vance Left His Venmo Public. Heres What It Shows

Kaspersky challenges US government to put up or shut up about Kremlin ties

Criminal Gang Physically Assaulting People for Their Cryptocurrency