Port 22

~ 8 Feb 2024 ~

Rust can help make software secure but it's no cure-all

Kimsuky's New Golang Stealer 'Troll' and 'GoBear' Backdoor Target South Korea

Critical Patches Released for New Flaws in Cisco, Fortinet, VMware Products

IT suppliers hacked off with Uncle Sam's demands in aftermath of cyberattacks

~ 7 Feb 2024 ~

Volt Typhoon not the only Chinese crew lurking in US energy, critical networks

Half of polled infosec pros say their degree was less than useful for real-world work

US says China's Volt Typhoon is readying destructive cyberattacks

From Cybercrime Saul Goodman to the Russian GRU

Iran's cyber operations in Israel a potential prelude to US election interference

Raspberry Pi Pico cracks BitLocker in under a minute

After FBI Takedown, KV-Botnet Operators Shift Tactics in Attempt to Bounce Back

Ransomware Payments Hit a Record $1.1 Billion in 2023

Critical Bootloader Vulnerability in Shim Impacts Nearly All Linux Distros

PAPERWALL: Chinese Websites Posing as Local News Outlets Target Global Audiences with Pro-Beijing Content

JetBrains urges swift patching of latest critical TeamCity flaw

Teaching LLMs to Be Deceptive

2054, Part III: The Singularity

New Webinar: 5 Steps to vCISO Success for MSPs and MSSPs

Global Coalition and Tech Giants Unite Against Commercial Spyware Abuse

The spyware business is booming despite government crackdowns

Chinese Hackers Exploited FortiGate Flaw to Breach Dutch Military Network

Critical JetBrains TeamCity On-Premises Flaw Exposes Servers to Takeover - Patch Now

DEF CON is canceled! No, really this time but the show will go on

Critical Infrastructure Cyber Threats & The UK Region

~ 6 Feb 2024 ~

Mozilla adds paid-for data-deletion tier to Monitor, its privacy-breach radar

Verizon says 63K employees' info fell into wrong hands an insider in this case

Verizon says 63K employees' info fell into the wrong hands an insider this time

Chinese Coathanger malware hung out to dry by Dutch defense department

Documents about the NSAs Banning of Furby Toys in the 1990s

Microsoft Entra Verified ID introduces Face Check in preview

WhatsApp Chats Will Soon Work With Other Encrypted Messaging Apps

EquiLend back in the saddle as ransom payment rumors swirl

Beware: Fake Facebook Job Ads Spreading 'Ov3r_Stealer' to Steal Crypto and Credentials

Experts Detail New Flaws in Azure HDInsight Spark, Kafka, and Hadoop Services

Double trouble for Fortinet customers as pair of critical vulns found in FortiSIEM

HID Global Reader Configuration Cards

HID Global Encoders

2054, Part II: Next Big Thing

How a $10B Enterprise Customer Drastically Increased their SaaS Security Posture with 201% ROI by Using SSPM

Left to their own devices: Security for employees using personal devices for work

New kids on the ransomware block in 2023: Akira and 8Base lead dozens of newbies

Hackers Exploit Job Boards in APAC, Steal Data of Millions of Job Seekers

Recent SSRF Flaw in Ivanti VPN Products Undergoes Mass Exploitation

U.S. Imposes Visa Restrictions on those Involved in Illegal Spyware Surveillance

~ 5 Feb 2024 ~

Google throws $1m at Rust Foundation to build C++ bridges

Ivanti devices hit by wave of exploits for latest security hole

Ignore Uncle Sam's 'voluntary' cybersecurity goals for hospitals at your peril

AnyDesk revokes signing certs, portal passwords after crooks sneak into systems

Belarusian National Linked to BTC-e Faces 25 Years for $4 Billion Crypto Money Laundering

Deepfake Fraud

Lurie Children's Hospital back to pen and paper after cyberattack

Patchwork Using Romance Scam Lures to Infect Android Devices with VajraSpy Malware

Hands-On Review: SASE-based XDR from Cato Networks

Combined Security Practices Changing the Game for Risk Management

2054, Part I: Death of a President

Could your Valentine be a scammer? How to avoid getting caught in a bad romance

Pegasus Spyware Targeted iPhones of Journalists and Activists in Jordan

New Mispadu Banking Trojan Exploiting Windows SmartScreen Flaw

SBF likely off the hook for misplaced FTX funds after cops bust SIM swap ring

~ 3 Feb 2024 ~

Chinas Hackers Keep Targeting US Water and Electricity Supplies

Researchers remotely exploit devices used to manage safe aircraft landings and takeoffs

U.S. Sanctions 6 Iranian Officials for Critical Infrastructure Cyber Attacks

Mastodon Vulnerability Allows Hackers to Hijack Any Decentralized Account

AnyDesk Hacked: Popular Remote Desktop Software Mandates Password Reset

~ 2 Feb 2024 ~

Friday Squid Blogging: Illex Squid in Argentina Waters

Blackbaud settles with FTC after that IT breach exposed millions of people's info

David Kahn

Critical vulnerability in Mastodon is pounced upon by fast-acting admins

Russian APT28 Hackers Targeting High-Value Orgs with NTLM Relay Attacks

Grandoreiro banking malware disrupted Week in security with Tony Anscombe

DirtyMoe Malware Infects 2,000+ Ukrainian Computers for DDoS and Cryptojacking

Interpol's latest cybercrime intervention dismantles ransomware, banking malware servers

A Self-Enforcing Protocol to Solve Gerrymandering

Former CIA Engineer Sentenced to 40 Years for Leaking Classified Documents

Cloudzy Elevates Cybersecurity: Integrating Insights from Recorded Future to Revolutionize Cloud Security

INTERPOL Arrests 31 in Global Operation, Identifies 1,900+ Ransomware-Linked IPs

Cloudflare Breach: Nation-State Hackers Access Source Code and Internal Docs

Wikileaks source and former CIA worker Joshua Schulte sentenced to 40 years jail

Managing the hidden risks of shadow APIs

Cloudflare sheds more light on Thanksgiving security breach in which tokens, source code accessed by suspected spies

~ 1 Feb 2024 ~

The Mystery of the $400 Million FTX Heist May Have Been Solved

Rise of deepfake threats means biometric security measures won't be enough

Arrests in $400M SIM-Swap Tied to Heist at FTX?

Connect with Microsoft at these cybersecurity events in 2024

A Startup Allegedly Hacked the World. Then Came the Censorshipand Now the Backlash

Biden will veto attempts to rip up SEC breach reporting rule

U.S. Feds Shut Down China-Linked "KV-Botnet" Targeting SOHO Routers

3 new ways the Microsoft Intune Suite offers security, simplification, and savings

FritzFrog Returns with Log4Shell and PwnKit, Spreading Malware Inside Your Network

LockBit shows no remorse for ransomware attack on children's hospital

Exposed Docker APIs Under Attack in 'Commando Cat' Cryptojacking Campaign

Facebooks Extensive Surveillance Network

Gessler GmbH WEB-MASTER

AVEVA Edge products (formerly known as InduSoft Web Studio)

Why the Right Metrics Matter When it Comes to Vulnerability Management

HeadCrab 2.0 Goes Fileless, Targeting Redis Servers for Crypto Mining

VajraSpy: A Patchwork of espionage apps

Confirming Large-Scale Pegasus Surveillance of Jordan-based Civil Society

Warning: New Malware Emerges in Attacks Exploiting Ivanti VPN Vulnerabilities

CISA Warns of Active Exploitation of Critical Vulnerability in iOS, iPadOS, and macOS