Port 22

~ 13 May 2024 ~

AI red-teaming tools helped X-Force break into a major tech manufacturer 'in 8 hours'

The 2024 Browser Security Report Uncovers How Every Web Session Could be a Security Minefield

Europol confirms incident following alleged auction of staff data

How Did Authorities Identify the Alleged Lockbit Boss?

LLMs Data-Control Path Insecurity

SHQ Response Platform and Risk Centre to Enable Management and Analysts Alike

Severe Vulnerabilities in Cinterion Cellular Modems Pose Risks to Various Industries

Black Basta Ransomware Strikes 500+ Entities Across North America, Europe, and Australia

Facing down the triple threat

Welcome to the Laser Wars

You want us to think of the children? Couldn't agree more

Malicious Python Package Hides Sliver C2 Framework in Fake Requests Library Logo

ASEAN organizations dealing with growing cyber menace

Encrypted mail service Proton hands suspect's personal info to cops again

A Visual Summary of SANS Cybersecurity Leadership Summit 2024

~ 12 May 2024 ~

Ransomware negotiator weighs in on the extortion payment debate with El Reg

NIS2: Transforming SOC Challenges Into Opportunities

~ 11 May 2024 ~

Critical infrastructure security will stay poor until everyone pulls together

Microsoft Deploys Generative AI for US Spies

FIN7 Hacker Group Leverages Malicious Google Ads to Deliver NetSupport RAT

~ 10 May 2024 ~

Friday Squid Blogging: Squid Mating Strategies

Iran most likely to launch destructive cyber-attack against US ex-Air Force intel analyst

How to talk about climate change and what motivates people to action: An interview with Katharine Hayhoe

Cybercriminals hit jackpot as 500k+ Ohio Lottery lovers lose out on their personal data

In it to win it! WeLiveSecurity shortlisted for European Security Blogger Awards

TunnelVision Attack Leaves Nearly All VPNs Vulnerable to Spying

New Attack Against Self-Driving Car AI

Microsoft's Brad Smith summoned by Homeland Security committee over 'cascade' of infosec failures

North Korean Hackers Deploy New Golang Malware 'Durian' Against Crypto Firms

GhostStripe attack haunts self-driving cars by making them ignore road signs

'Four horsemen of cyber' look back on 2008 DoD IT breach that led to US Cyber Command

CensysGPT: AI-Powered Threat Hunting for Cybersecurity Pros (Webinar)

It's a wrap! RSA Conference 2024 highlights Week in security with Tony Anscombe

Chrome Zero-Day Alert Update Your Browser to Patch New Vulnerability

What's the Right EDR for You?

Malicious Android Apps Pose as Google, Instagram, WhatsApp, Spread via Smishing

Researchers Uncover 'LLMjacking' Scheme Targeting Cloud-Hosted AI Models

Building a Generative AI-Powered Cybersecurity Workforce

~ 9 May 2024 ~

Ex-White House election threat hunter weighs in on what to expect in November

US faith-based healthcare org Ascension says 'cybersecurity event' disrupted clinical ops

RSA Conference 2024: AI hype overload

Dell customer order database of '49M records' stolen, now up for sale on dark web

New TunnelVision Attack Allows Hijacking of VPN Traffic via DHCP Manipulation

Global attackers targeting US critical infrastructure should be 'wake-up call'

How Criminals Are Using Generative AI

Kremlin-Backed APT28 Targets Polish Institutions in Large-Scale Malware Campaign

Rockwell Automation FactoryTalk Historian SE

Delta Electronics InfraSuite Device Master

alpitronic Hypercharger EV Charger

New Guide: How to Scale Your vCISO Services Profitably

Mirai Botnet Exploits Ivanti Connect Secure Flaws for Malicious Payload Delivery

APT trends report Q1 2024

Critical F5 Central Manager Vulnerabilities Allow Enable Full Device Takeover

~ 8 May 2024 ~

What do Europeans, Americans and Australians have in common? Scammed $50M by fake e-stores

Undersea cables must have high-priority protection before they become top targets

Undersea cables are high-priority targets it's high time to make these global pathways more resilient

Top FBI Official Urges Agents to Use Warrantless Wiretaps on US Soil

CISA boss: Secure code is the 'only way to make ransomware a shocking anomaly'

How implementing a trust fabric strengthens identity and network

A SaaS Security Challenge: Getting Permissions All in One Place

New Spectre-Style 'Pathfinder' Attack Targets Intel CPU, Leak Encryption Keys and Data

One year on, universities org admits MOVEit attack hit data of 800k people

UK opens investigation of MoD payroll contractor after confirming attack

The Fundamentals of Cloud Security Stress Testing

Hijack Loader Malware Employs Process Hollowing, UAC Bypass in Latest Version

State of ransomware in 2024

A (Strange) Interview the Russian-Military-Linked Hackers Targeting US Water Utilities

Ten years since the first corp ransomware, Mikko Hyppnen sees no end in sight

Ten years since the first corp ransomware, Mikko Hyppnen sees no end in sight

Hackers Exploiting LiteSpeed Cache Bug to Gain Full Control of WordPress Sites

From infosec to skunks, RSA Conference SVP spills the tea

UnitedHealth's 'egregious negligence' led to Change Healthcare infection

~ 7 May 2024 ~

America's War on Drugs and Crime will be AI powered, says Homeland Security boss

Watch out for rogue DHCP servers decloaking your VPN connections

CISA's early-warning system helped critical orgs close 852 ransomware holes

TikTok sues America to undo divest-or-die law

U.S. Charges Russian Man as Boss of LockBit Ransomware Group

Microsoft announces the 2024 Microsoft Security Excellence Awards winners

Russian Hacker Dmitry Khoroshev Unmasked as LockBit Ransomware Administrator

New Attack on VPNs

How to inspire the next generation of scientists | Unlocked 403: Cybersecurity podcast

Investigators finally unmask LockBit kingpin after two-month tease

Cops finally unmask 'LockBit kingpin' after two-month tease

The Alleged LockBit Ransomware Mastermind Has Been Identified

APT42 Hackers Pose as Journalists to Harvest Credentials and Access Cloud Data

China-Linked Hackers Used ROOTROT Webshell in MITRE Network Intrusion

SUBNET Substation Server

PTC Codebeamer

The truth about KEV: CISAs vuln deadlines good influence on private-sector patching

New Case Study: The Malicious Comment

Physical security biz exposes 1.2M files via unprotected database

Google Simplifies 2-Factor Authentication Setup (It's More Important Than Ever)

Exploits and vulnerabilities in Q1 2024

Russian Operator of BTC-e Crypto Exchange Pleads Guilty to Money Laundering

Ransomware evolves from mere extortion to 'psychological attacks'

Google, Meta, Spotify break Apple's device fingerprinting rules new claim

~ 6 May 2024 ~

Fed-run LockBit site back from the dead and vows to really spill the beans on gang

Mastodon delays fix for link previews DDoSing websites

Consultant charged over $1.5M extortion scheme against IT giant

New capabilities to help you secure your AI transformation