Port 22

~ 6 May 2024 ~

Why Your VPN May Not Be As Secure As It Claims

Critical Tinyproxy Flaw Opens Over 50,000 Hosts to Remote Code Execution

China-Linked Hackers Suspected in ArcaneDoor Cyberattacks Targeting Network Devices

CISA says 'no more' to decades-old directory traversal bugs

Apples iPhone Spyware Problem Is Getting Worse. Heres What You Should Know

New Lawsuit Attempting to Make Adversarial Interoperability Legal

It Costs How Much?!? The Financial Pitfalls of Cyberattacks on SMBs

Xiaomi Android Devices Hit by Multiple Flaws Across Apps and System Components

Financial cyberthreats in 2023

The hackers toolkit: 4 gadgets that could spell security trouble

New 'Cuckoo' Persistent macOS Spyware Targeting Intel and Arm Macs

Germany points finger at Fancy Bear for widespread 2023 hacks, DDoS attacks

The Distinctive Worlds of OT Cybersecurity and IT Cybersecurity

~ 5 May 2024 ~

End-to-end encryption may be the bane of cops, but they can't close that Pandora's Box

Building a Cloud Security Flywheel: Lessons from the Field

~ 4 May 2024 ~

Dating apps kiss'n'tell all sorts of sensitive personal info

A New Surveillance Tool Invades Border Towns

Microsoft Outlook Flaw Exploited by Russia's APT28 to Hack Czech, German Entities

~ 3 May 2024 ~

Kaspersky hits back at claims it helped Russia develop military drone systems

Kaspersky accused of helping Russia develop military drone systems

Friday Squid Blogging: Squid Purses

My TED Talks

It may take decade to shore up software supply chain security, says infosec CEO

Pay up, or else? Week in security with Tony Anscombe

Security above all elseexpanding Microsofts Secure Future Initiative

Expert-Led Webinar - Uncovering Latest DDoS Tactics and Learn How to Fight Back

Hackers Increasingly Abusing Microsoft Graph API for Stealthy Malware Communications

Rare Interviews with Enigma Cryptanalyst Marian Rejewski

New Guide Explains How to Eliminate the Risk of Shadow SaaS and Protect Corporate Data

NSA, FBI Alert on N. Korean Hackers Spoofing Emails from Trusted Sources

These Dangerous Scammers Dont Even Bother to Hide Their Crimes

Google Announces Passkeys Adopted by Over 400 Million Accounts

Europol op shutters 12 scam call centers and cuffs 21 suspected fraudsters

Four Critical Vulnerabilities Expose HPE Aruba Devices to RCE Attacks

Indonesia sneakily buys spyware, claims Amnesty International

Chinese government website security is often worryingly bad, say Chinese researchers

How AI and ML are Changing Mobile Device Forensics Investigations

~ 2 May 2024 ~

Microsoft, Google do a victory lap around passkeys

Florida man gets 6 years behind bars for flogging fake Cisco kit to US military

Patch up 4 critical bugs in ArubaOS lead to remote code execution

New "Goldoon" Botnet Targets D-Link Routers With Decade-Old Flaw

Microsoft named an overall leader in KuppingerCole Leadership Compass for ITDR

The Breach of a Face Recognition Firm Reveals a Hidden Danger of Biometrics

Popular Android Apps Like Xiaomi, WPS Office Vulnerable to File Overwrite Flaw

Federal frenzy to patch gaping GitLab account takeover hole

Microsoft introduces passkeys for consumer accounts

Ukrainian REvil Hacker Sentenced to 13 Years and Ordered to Pay $16 Million

Delta Electronics DIAEnergie

CyberPower PowerPanel

The UK Bans Default Passwords

When is One Vulnerability Scanner Not Enough?

Dropbox Discloses Breach of Digital Signature Service Affecting All Users

Adding insult to injury: crypto recovery scams

Think tank: China's tech giants refine and define Beijing's propaganda push

REvil ransomware scum sentenced to almost 14 years inside, ordered to pay $16 million

CISA Warns of Active Exploitation of Severe GitLab Password Reset Vulnerability

Inside Ukraines Killer-Drone Startup Industry

New Cuttlefish Malware Hijacks Router Connections, Sniffs for Cloud Credentials

A million Australian pubgoers wake up to find personal info listed on leak site

Unveiling the 2024 SANS | GIAC Cyber Workforce Research Report: Building and Sustaining Mid-Level Cybersecurity Roles

Dropbox dropped the ball on security, haemorrhaging customer and third-party info

Block accused of mass compliance failures that saw digi-dollars reach terrorists

~ 1 May 2024 ~

Microsoft named overall leader in KuppingerCole Leadership Compass for ITDR

Infosec biz boss accused of BS'ing the world about his career, anti-crime product, customers

Dirty stream attack: Discovering and mitigating a common vulnerability pattern in Android apps

US charges 16 over 'depraved' grandparent scams

The US Government Is Asking Big Tech to Promise Better Cybersecurity

Qantas app glitch sees boarding passes fly to other accounts

Bitcoin Forensic Analysis Uncovers Money Laundering Clusters and Criminal Proceeds

Android Malware Wpeeper Uses Compromised WordPress Sites to Hide C2 Servers

A Vast New Data Set Could Supercharge the AI Hunt for Crypto Money Laundering

AI Voice Scam

Everyone's an Expert: How to Empower Your Employees for Cybersecurity Success

ZLoader Malware Evolves with Anti-Analysis Trick from Zeus Banking Trojan

Ex-NSA Employee Sentenced to 22 Years for Trying to Sell U.S. Secrets to Russia

Open source programming language R patches critical arbitrary code exec flaw

~ 30 Apr 2024 ~

Cyber-bastard jailed for stealing psychotherapy files, blackmailing patients

UnitedHealth CEO: 'Decision to pay ransom was mine'

China Has a Controversial Plan for Brain-Computer Interfaces

The Dangerous Rise of GPS Attacks

NSA employee who tried and failed to spy for Russia gets 262 months in the slammer

The White House Has a New Master Plan to Stop Worst-Case Scenarios

Millions of Malicious 'Imageless' Containers Planted on Docker Hub Over 5 Years

Man Who Mass-Extorted Psychotherapy Patients Gets Six Years

European Commission starts formal probe of Meta over election misinformation

Delta Electronics CNCSoft-G2 DOPSoft

WhatsApp in India

U.S. Government Releases New AI Security Guidelines for Critical Infrastructure

MDR: Unlocking the power of enterprise-grade security for businesses of all sizes

Managed Detection and Response in 2023

Apple's 'incredibly private' Safari is not so private in Europe

New U.K. Law Bans Default Passwords on Smart Devices Starting April 2024

Deploying Multi Factor Authentication The What, How, and Why

~ 29 Apr 2024 ~

AT&T, Verizon, Sprint, T-Mobile US fined $200M for selling off people's location info

Google blocked 2.3M apps from Play Store last year for breaking the G law

FCC Fines Major U.S. Wireless Carriers for Selling Customer Location Data

Why space exploration is important for Earth and its future: Q&A with David Eicher

London Drugs closes all of its pharmacies following 'cybersecurity incident'

Google Prevented 2.28 Million Malicious Apps from Reaching Play Store in 2023

China-Linked 'Muddling Meerkat' Hijacks DNS to Map Internet on Global Scale