Port 22

~ 10 Nov 2023 ~

Alert: 'Effluence' Backdoor Persists Despite Patching Atlassian Confluence Servers

Ducktail fashion week

ICBC hit by ransomware impacting global trades

This New Tool Aims to Keep Terrorism Content Off the Internet

Iran-Linked Imperial Kitten Cyber Group Targeting Middle East's Tech Sectors

Stealthy Kamran Spyware Targeting Urdu-speaking Users in Gilgit-Baltistan

~ 9 Nov 2023 ~

'BlazeStealer' Python Malware Allows Complete Takeover of Developer Machines

MOVEit Hackers Pivot to SysAid Zero-Day in Ransomware Attacks

Heres How Violent Extremists Are Exploiting Generative AI Tools

Treasury Markets Disrupted by ICBC Ransomware Attack

Downfall fallout: Intel knew AVX chips were insecure and did nothing, lawsuit claims

What We Can Learn from Major Cloud Cyberattacks

Omegle Was Forced to Shut Down by a Lawsuit From a Sexual Abuse Survivor

When Good Security Awareness Programs Go Wrong

How to Outsmart Malware Attacks That Can Fool Antivirus Protection

First Wave of Vulnerability-Fixing AIs Available for Developers

SolarWinds: SEC 'lacks the competence' to regulate cybersecurity

Zero-Day Alert: Lace Tempest Exploits SysAid IT Support Software Vulnerability

Imperial Kitten APT Claws at Israeli Industry with Multiyear Spy Effort

How to Get Facebook Without Adsif Its Available for You

Worldwide Hacktivists Take Sides Over Gaza, With Little to Show for It

There's Only One Way to Solve the Cybersecurity Skills Gap

New Malvertising Campaign Uses Fake Windows News Portal to Distribute Malicious Installers

MOVEit cybercriminals unearth fresh zero-day to exploit on-prem SysAid hosts

Online Retail Hack

Microsoft shares threat intelligence at CYBERWARCON 2023

When Email Security Meets SaaS Security: Uncovering Risky Auto-Forwarding Rules

MuddyC2Go: New C2 Framework Iranian Hackers Using Against Israel

Unlucky Kamran: Android malware spying on Urdu-speaking residents of Gilgit-Baltistan

Modern Asian APT groups tactics, techniques and procedures (TTPs)

Russia's Sandworm not just missile strikes to blame for Ukrainian power blackouts

Sandworm Hackers Caused Another Blackout in UkraineDuring a Missile Strike

Sandworm Cyberattackers Down Ukrainian Power Grid During Missile Strikes

Police Use of Face Recognition Is Sweeping the UK

What to do with a cloud intrusion toolkit in 2023? Slap a chat assistant on it, duh

CISA Alerts: High-Severity SLP Vulnerability Now Under Active Exploitation

Leveraging Artificial Intelligence (AI) to Manage Human Risk: Part 5 Generating Images

Introducing the GX-PT: Redefining Penetration Testing Excellence

~ 8 Nov 2023 ~

Evasive Jupyter Infostealer Campaign Showcases Dangerous Variant

Ransomware Mastermind Uncovered After Oversharing on Dark Web

Microsoft, Meta detail plans to fight election disinformation in 2024

The GOP Presidential Debate Is Livestreaming on Rumble, Home to White Nationalist Nick Fuentes

MGM and Caesars Attacks Highlight Social Engineering Risks

Insights from Microsoft Security Copilot early adopters

CISOs Beware: SEC's SolarWinds Action Shows They're Scapegoating Us

Researchers Uncover Undetectable Crypto Mining Technique on Azure Automation

Atlassian cranks up the threat meter to max for Confluence authorization flaw

WhatsApp Introduces New Privacy Feature to Protect IP Address in Calls

Beware, Developers: BlazeStealer Malware Discovered in Python Packages on PyPI

Decoupling for Security

Monero Project admits thieves stole 6-figure sum from a wallet in mystery breach

This Is the Ops Manual for the Most Tech-Savvy Animal Liberation Group in the US

Guide: How vCISOs, MSPs and MSSPs Can Keep their Customers Safe from Gen AI Risks

Webinar: Kickstarting Your SaaS Security Strategy & Program

Preventing data theft with ADX technology

Bad eIDAS: Europe ready to intercept, spy on your encrypted HTTPS connections

Experts Expose Farnetwork's Ransomware-as-a-Service Business Model

Software Complexity Bedevils Mainframe Security

~ 7 Nov 2023 ~

Risk Ledger Secures 6.25M to Prevent Cyberattacks on the Supply Chains of Nation's Largest Enterprises

Myrror Security Emerges From Stealth With $6M Seed Round to Prevent Attacks on the Software Development Process

Securing Remote Workers Through Zero Trust

Malwarebytes Launches ThreatDown to Empower Resource Constrained IT Organizations

Marina Bay Sands Becomes Latest Hospitality Cyber Victim

Government Surveillance Reform Act of 2023 Seeks to End Warrantless Police and FBI Spying

CVSS 4.0 Offers Significantly More Patching Context