Port 22

~ 11 Mar 2024 ~

Magnet Goblin Hacker Group Leveraging 1-Day Exploits to Deploy Nerbian RAT

Microsoft waited 6 months to patch actively exploited admin-to-kernel vulnerability

~ 9 Mar 2024 ~

Russian Hackers Stole Microsoft Source Codeand the Attack Isnt Over

Microsoft Confirms Russian Hackers Stole Source Code, Some Customer Secrets

~ 8 Mar 2024 ~

Cybercrime crew Magnet Goblin bursts onto the scene exploiting Ivanti holes

Friday Squid Blogging: New Plant Looks Like a Squid

Essays from the Second IWORD

International Womens Day: Expanding cybersecurity opportunities in the era of AI

Microsoft confirms Russian spies stole source code, accessed internal systems

Change Healthcare registers pulse after crippling ransomware attack

Meta Details WhatsApp and Messenger Interoperability to Comply with EU's DMA Regulations

A Close Up Look at the Consumer Data Broker Radaris

APT attacks taking aim at Tibetans Week in security with Tony Anscombe

Swiss cheese security? Play ransomware gang milks government of 65,000 files

A Taxonomy of Prompt Injection Attacks

Secrets Sensei: Conquering Secrets Management Challenges

Cisco Issues Patch for High-Severity VPN Hijacking Bug in Secure Client

QEMU Emulator Exploited as Tunneling Tool to Breach Company Network

CISA Warns of Actively Exploited JetBrains TeamCity Vulnerability

Font security 'still a Helvetica of a problem' says Australian graphics outfit Canva

Securing open source software: Whose job is it, anyway?

Top 25 Cybersecurity Resources for International Womens Day

Top 20 Cybersecurity Resources for International Womens Day

~ 7 Mar 2024 ~

We're not Meta support: State AGs tell Zuck to fix rampant account takeover problem

Chrome users get an alert when extensions are in danger of falling into wrong hands

Possible China link to Change Healthcare ransomware attack

Evolving Microsoft Security Development Lifecycle (SDL): How continuous SDL can help you build more secure software

JetBrains TeamCity under attack by ransomware thugs after disclosure mess

Hacked WordPress Sites Abusing Visitors' Browsers for Distributed Brute-Force Attacks

Chinese State Hackers Target Tibetans with Supply Chain, Watering Hole Attacks

Belgian ale legend Duvels brewery borked as ransomware halts production

How Public AI Can Strengthen Democracy

Chirp Systems Chirp Access

Human vs. Non-Human Identity in SaaS

Evasive Panda leverages Monlam Festival to target Tibetans

Ex-Google Engineer Arrested for Stealing AI Technology Secrets for China

Spam and phishing in 2023

New Python-Based Snake Info Stealer Spreading Through Facebook Messages

VMware urges emergency action to blunt hypervisor flaws

Heres something else AI can do: expose bad infosec to give cyber-crims a toehold in your organization

Watch Out for Spoofed Zoom, Skype, Google Meet Sites Delivering Malware

US lawmakers want ByteDance to divest TikTok or face a ban

Lawsuit claims gift card fraud is the gift that keeps on giving, to Google

Chinese chap charged with stealing Googles AI datacenter secrets

Prevent Cloud Incidents from Becoming Cloud Breaches

Industrial Control Systems Cyber Threats and the Gulf Region ICS Blog Series: 3 of 3

Enhancing Operational Resilience in OT

~ 6 Mar 2024 ~

FBI: Critical infrastructure menaced by spike in ransomware attacks

Apple's trademark tight lips extend to new iPhone, iPad zero-days

Enhancing protection: Updates on Microsofts Secure Future Initiative

Hackers Exploit Misconfigured YARN, Docker, Confluence, Redis Servers for Crypto Mining

Meta Abandons Hacking Victims, Draining Law Enforcement Resources, Officials Say

Exit Scam: BlackCat Ransomware Group Vanishes After $22 Million Payout

Capita says 2023 cyberattack costs a factor as it reports staggering 100M+ loss

Surveillance through Push Notifications

A New Way To Manage Your Web Exposure: The Reflectiz Product Explained

Top 10 scams targeting seniors and how to keep your money safe

How to Find and Fix Risky Sharing in Google Drive

Chip lobby group SEMI to EU: Export restrictions should only be used in self-defense

U.S. Cracks Down on Predatory Spyware Firm for Targeting Officials and Journalists

VMware Issues Security Patches for ESXi, Workstation, and Fusion Flaws

Alert: GhostSec and Stormous Launch Joint Ransomware Attacks in Over 15 Countries

New APT Group 'Lotus Bane' Behind Recent Attacks on Vietnam's Financial Entities

Urgent: Apple Issues Critical Updates for Actively Exploited Zero-Day Flaws

Japan orders local giants LINE and NAVER to disentangle their tech stacks

Uncle Sam intervenes as Change Healthcare ransomware fiasco creates mayhem

BlackCat Ransomware Group Implodes After Apparent $22M Payment by Change Healthcare

~ 5 Mar 2024 ~

Fidelity customers' financial info feared stolen in suspected ransomware attack

Fidelity customers' financial info feared stolen in suspected ransomware attack

Inside Registered Agents Inc., the Shadowy Firm Pushing the Limits of Business Privacy

US accuses Army vet cyber-Casanova of sharing Russia-Ukraine war secrets

Secure SaaS applications with Valence Security and Microsoft Security

IP address X-posure now a feature on Musk's social media platform

Hackers Exploit ConnectWise ScreenConnect Flaws to Deploy TODDLERSHARK Malware

Rapid7 throws JetBrains under the bus for 'uncoordinated vulnerability disclosure'

The Insecurity of Video Doorbells

Nice Linear eMerge E3-Series

What is Exposure Management and How Does it Differ from ASM?

Cybercriminals Using Novel DNS Hijacking Technique for Investment Scams

Over 225,000 Compromised ChatGPT Credentials Up for Sale on Dark Web Markets

Irresistible: Hooks, habits and why you cant put down your phone

Warning: Thread Hijacking Attack Targets IT Networks, Stealing NTLM Hashes

Spam crusade lands charity in hot water with data watchdog

Network tunneling with QEMU?

Critical JetBrains TeamCity On-Premises Flaws Could Lead to Server Takeovers

Cloudflare wants to put a firewall in front of your LLM

A Tale of the Three *ishings: Part 3 What is Vishing?

~ 4 Mar 2024 ~

American Express admits card data exposed and blames third party

Change Healthcare attack latest: ALPHV bags $22M in Bitcoin amid affiliate drama

Seoul accuses North Korea of stealing southern chipmakers' designs

Microsoft Secure: Learn expert AI strategy at our online event

German defense chat overheard by Russian eavesdroppers on Cisco's WebEx

Hackers Behind the Change Healthcare Ransomware Attack Just Received a $22 Million Payment

Defend against human-operated ransomware attacks with Microsoft Copilot for Security

Ransomware ban backers insist thugs must be cut off from payday

How Cybercriminals are Exploiting India's UPI for Money Laundering Operations

LLM Prompt Injection Worm

From 500 to 5000 Employees - Securing 3rd Party App-Usage in Mid-Market Companies

The federal bureau of trolling hits LockBit, but the joke's on us

Over 100 Malicious AI/ML Models Found on Hugging Face Platform