Port 22

~ 4 Mar 2024 ~

Phobos Ransomware Aggressively Targeting U.S. Critical Infrastructure

LockBit's contested claim of fresh ransom payment suggests it's been well hobbled

Ahead of Super Tuesday, US elections face existential and homegrown threats

~ 2 Mar 2024 ~

The Privacy Danger Lurking in Push Notifications

U.S. Court Orders NSO Group to Hand Over Pegasus Spyware Code to WhatsApp

U.S. Charges Iranian Hacker, Offers $10 Million Reward for Capture

~ 1 Mar 2024 ~

Friday Squid Blogging: New Extinct Species of Vampire Squid Discovered

Air National Guardsman Teixeira to admit he was Pentagon files leaker

Judge orders NSO to cough up Pegasus super-spyware source code

Iranian charged over attacks against US defense contractors, government agencies

In the vanguard of 21st century cyber threats

New Phishing Kit Leverages SMS, Voice Calls to Target Cryptocurrency Users

Cops visit school of 'wrong persons child,' mix up victims and suspects in epic data fail

NIST Cybersecurity Framework 2.0

Deceptive AI content and 2024 elections Week in security with Tony Anscombe

4 Instructive Postmortems on Data Downtime and Loss

New BIFROSE Linux Malware Variant Using Deceptive VMware Domain for Evasion

Keeping one step ahead of cyber security threats

Here Come the AI Worms

Five Eyes Agencies Warn of Active Exploitation of Ivanti Gateway Vulnerabilities

GitHub Rolls Out Default Secret Scanning Push Protection for Public Repositories

NTT boss takes early retirement to atone for data leak

GitHub struggles to keep up with automated malicious forks

The UKs GPS Tagging of Migrants Has Been Ruled Illegal

A Tale of the Three *ishings: Part 02 What is Smishing?

~ 29 Feb 2024 ~

US courts fielded over 130 requests for access to push notification metadata

Fulton County, Security Experts Call LockBits Bluff

White House goes to court, not Congress, to renew warrantless spy powers

Chinese 'connected' cars are a national security threat, says Biden

The Mysterious Case of the Missing Trump Trial Ransomware Leak

Here Are the Google and Microsoft Security Updates You Need Right Now

Ransomware gangs are paying attention to infostealers, so why aren't you?

New Silver SAML Attack Evades Golden SAML Defenses in Identity Systems

Meta's pay-or-consent model hides 'massive illegal data processing ops': lawsuit

Russia Attacked Ukraine's Power Grid at Least 66 Times to Freeze It Into Submission

How the Frontier Became the Slogan of Uncontrolled AI

Delta Electronics CNCSoft-B

GTPDOOR Linux Malware Targets Telecoms, Exploiting GPRS Roaming Networks

Lazarus Hackers Exploited Windows Kernel Flaw as Zero-Day in Recent Attacks

How to Prioritize Cybersecurity Spending: A Risk-Based Strategy for the Highest ROI

Blue Team toolkit: 6 open-source tools to assess and enhance corporate defenses

The White House Warns Cars Made in China Could Unleash Chaos on US Highways

New Backdoor Targeting European Officials Linked to Indian Diplomatic Events

Lazarus Exploits Typos to Sneak PyPI Malware into Dev Systems

A Pornhub Chatbot Stopped Millions From Searching for Child Abuse Videos

Chinese Hackers Exploiting Ivanti VPN Flaws to Deploy New Malware

President Biden Blocks Mass Transfer of Personal Data to High-Risk Nations

Chinese PC-maker Acemagic customized its own machines to get infected with malware

Australian spy chief fears sabotage of critical infrastructure

ALPHV/BlackCat claims responsibility for Change Healthcare attack

The CISO's Guide to AI: Embracing Innovation While Mitigating Risk

Google Chrome Platform Notification Analysis

Aviata Cloud Solo Flight Challenge

~ 28 Feb 2024 ~

Gone in 60 seconds: BEAST AI model attack needs just a minute of GPU time to breach LLM guardails

BEAST AI needs just a minute of GPU time to make an LLM fly off the rails

Biden Executive Order Bans Sale of US Data to China, Russia. Good Luck

Palo Alto investor sues over 28% share tumble

Calendar Meeting Links Used to Spread Mac Malware

Dictators Used Sandvine Tech to Censor the Internet. The US Finally Did Something About It

Iran-Linked UNC1549 Hackers Target Middle East Aerospace & Defense Sectors

FBI Warns U.S. Healthcare Sector of Targeted BlackCat Ransomware Attacks

A Cyber Insurance Backstop

Building Your Privacy-Compliant Customer Data Platform (CDP) with First-Party Data

Superusers Need Super Protection: How to Bridge Privileged Access Management and Identity Management

Vulnerabilities in business VPNs under the spotlight

Uncle Sam tells nosy nations to keep their hands off Americans' personal data

TimbreStealer Malware Spreading via Tax-themed Phishing Scam Targets IT Users

Cybersecurity Agencies Warn Ubiquiti EdgeRouter Users of APT28's MooBot Threat

That home router botnet the Feds took down? Moscow's probably going to try again

~ 27 Feb 2024 ~

Change Healthcare Ransomware Attack: BlackCat Hackers Quickly Returned After FBI Bust

Sandvine put on America's export no-fly list for flogging snoop-ware to Egypt

NIST updates Cybersecurity Framework after a decade of lessons

The UK Is GPS-Tagging Thousands of Migrants

An educational robot security research

WordPress LiteSpeed Plugin Vulnerability Puts 5 Million Sites at Risk

Open-Source Xeno RAT Trojan Emerges as a Potent Threat on GitHub

China Surveillance Company Hacked

Mitsubishi Electric Multiple Factory Automation Products

How the Pentagon Learned to Use Targeted Ads to Find its Targetsand Vladimir Putin

From Alert to Action: How to Speed Up Your SOC Investigations

Five Eyes Agencies Expose APT29's Evolving Cloud Attack Tactics

New Hugging Face Vulnerability Exposes AI Models to Supply Chain Attacks

Cybercrims: When we hit IT, they sometimes pay, but when we hit OT... jackpot

Broadcom builds a better SASE out of VMware VeloCloud and Symantec

WordPress Plugin Alert - Critical SQLi Vulnerability Threatens 200K+ Websites

China warns of fake digital currency wallets fleecing netizens

A Visual Summary of SANS OSINT Summit 2024

~ 26 Feb 2024 ~

Nevada sues to deny kids access to Meta's Messenger encryption

ALPHV/BlackCat responsible for Change Healthcare cyberattack

LockBit back from the dead - taunts cops and plans to leak Trump docs

Microsoft Copilot for Security: The great equalizer for government security

New IDAT Loader Attacks Using Steganography to Deploy Remcos RAT

Everything you need to know about NIS2

8,000+ Subdomains of Trusted Brands Hijacked for Massive Spam Operation

How a Right-Wing Controversy Could Sabotage US Election Security

Data watchdog tells off outsourcing giant for scanning staff biometrics despite 'power imbalance'

North Korean Hackers Targeting Developers with Malicious npm Packages

Apple Announces Post-Quantum Encryption Algorithms for iMessage

Fox News 'hacker' turns out to be journalist whose lawyers say was doing his job

10 things to avoid posting on social media and why