Port 22

~ 24 Jan 2024 ~

NSPX30: A sophisticated AitM-enabled implant evolving since 2005

NSPX30: A sophisticated AitM-enabled implant evolving since 2005

Google Kubernetes Misconfig Lets Any Gmail Account Control Your Clusters

Poisoning AI Models

Notorious Spyware Maker NSO Group Is Quietly Plotting a Comeback

What is Nudge Security and How Does it Work?

Kasseika Ransomware Using BYOVD Trick to Disarms Security Pre-Encryption

What Microsoft's latest email breach says about this IT security heavyweight

The Unknown Risks of The Software Supply Chain: A Deep-Dive

U.S., U.K., Australia Sanction Russian REvil Hacker Behind Medibank Breach

COVID-19 test lab accused of exposing 1.3 million patient records to open internet

GCHQ's NCSC warns of 'realistic possibility' AI will help state-backed malware evade detection

Patch Your GoAnywhere MFT Immediately - Critical Flaw Lets Anyone Be Admin

~ 23 Jan 2024 ~

HP CEO Says They Brick Printers That Use Third-Party Ink Because of Hackers

CISA boss swatted: 'While my own experience was certainly harrowing, it was unfortunately not unique'

"Activator" Alert: MacOS Malware Hides in Cracked Apps, Targeting Crypto Wallets

Accused PII seller faces jail for running underground fraud op

VexTrio: The Uber of Cybercrime - Brokering Malware for 60+ Affiliates

Malicious NPM Packages Exfiltrate Hundreds of Developer SSH Keys via GitHub

Side Channels Are Common

Westermo Lynx 206-F2G

Voltronic Power ViewPower Pro

Lantronix XPort

Crestron AM-300

APsystems Energy Communication Unit (ECU-C) Power Control Software

UK water giant admits attackers broke into system as gang holds it to ransom

From Megabits to Terabits: Gcore Radar Warns of a New Era of DDoS Attacks

Break the fake: The race is on to stop AI voice cloning scams

BreachForums Founder Sentenced to 20 Years of Supervised Release, No Jail Time

~40,000 Attacks in 3 Days: Critical Confluence RCE Under Active Exploitation

Australia imposes cyber sanctions on Russian it says ransomwared health insurer

Apple Issues Patch for Critical Zero-Day in iPhones, Macs - Update Now

~ 22 Jan 2024 ~

Atlassian Confluence Server RCE attacks underway from 600+ IPs

Slug slimes aerospace biz AerCap with ransomware, brags about 1TB theft

Apple iOS 17.3: How to Turn on iPhone's New Stolen Device Protection

North Korean Hackers Weaponize Fake Research to Deliver RokRAT Backdoor

MavenGate Attack Could Let Hackers Hijack Java and Android via Abandoned Libraries

EFF adds Street Surveillance Hub so Americans can check who's checking on them

Ivanti and Juniper Networks accused of bending the rules with CVE assignments

Subway's data torpedoed by LockBit, ransomware gang claims

AI Bots on X (Twitter)

Cops Used DNA to Predict a Suspects Faceand Tried to Run Facial Recognition on It

NS-STEALER Uses Discord Bots to Exfiltrate Your Secrets from Popular Browsers

52% of Serious Vulnerabilities We Find are Related to Windows 10

ICO fines spam slinging financial services biz

Safeguarding against the global ransomware threat

Cracked software beats gold: new macOS backdoor stealing cryptowallets

FTC Bans InMarket for Selling Precise User Location Without Consent

Apache ActiveMQ Flaw Exploited in New Godzilla Web Shell Attacks

BreachForums admin 'Pompourin' sentenced to 20 years of supervised release

SANS 2023 Multicloud Survey: Navigating the Complexities of Multiple Clouds

~ 20 Jan 2024 ~

Fujitsu Bugs That Sent Innocent People to Prison Were Known From the Start

Fujitsu Bugs That Sent Innocent People to Prison Were Known From the Start

US Agencies Urged to Patch Ivanti VPNs That Are Actively Being Hacked

Chinese Hackers Silently Weaponized VMware Zero-Day Flaw for 2 Years

CISA Issues Emergency Directive to Federal Agencies on Ivanti Zero-Day Exploits

Microsoft's Top Execs' Emails Breached in Sophisticated Russia-Linked APT Attack

Invoice Phishing Alert: TA866 Deploys WasabiSeed & Screenshotter Malware

Russians invade Microsoft exec mail while China jabs at VMware vCenter Server

~ 19 Jan 2024 ~

Friday Squid Blogging: New Foods from Squid Fins

Five ripped off IT giant with $7M+ in bogus work expenses, prosecutors claim

Zelle Is Using My Name and Voice without My Consent

Canadian Man Stuck in Triangle of E-Commerce Fraud

Why many CISOs consider quitting Week in security with Tony Anscombe

Thieves steal 35.5M customers data from Vans sneakers maker

Npm Trojan Bypasses UAC, Installs AnyDesk with "Oscompatible" Package

How to Opt Out of Comcasts Xfinity Storing Your Sensitive Data

Experts Warn of macOS Backdoor Hidden in Pirated Versions of Popular Software

Speaking to the CIAs Creative Writing Group

Preventing Data Loss: Backup and Recovery Strategies for Exchange Server Administrators

IT consultant fined for daring to expose shoddy security

U.S. Cybersecurity Agency Warns of Actively Exploited Ivanti EPMM Vulnerability

US agencies warn made-in-China drones might help Beijing snoop on the world

~ 18 Jan 2024 ~

JPMorgan exec claims bank repels 45 billion cyberattack attempts per day

Future of America's Cyber Safety Review Board hangs in balance amid calls for rethink

Job Opportunity: Communication Strategist

Ransomware attacks hospitalizing security pros, as one admits suicidal feelings

Microsoft at Legalweek: Secure data and gain efficiencies with Microsoft Purview eDiscovery enhanced by generative AI

New Docker Malware Steals CPU for Crypto & Drives Fake Website Traffic

Two more Citrix NetScaler bugs exploited in the wild

Russian COLDRIVER Hackers Expand Beyond Phishing with Custom Malware

Google TAG: Kremlin cyber spies move into malware with a custom backdoor

Stablecoins Enabled $40 Billion in Crypto Crime Since 2022

TensorFlow CI/CD Flaw Exposed Supply Chain to Poisoning Attacks

Canadian Citizen Gets Phone Back from Police

MFA Spamming and Fatigue: When Security Measures Go Wrong

AVEVA PI Server

Virtual kidnapping: How to see through this terrifying scam

Vast botnet hijacks smart TVs for prime-time cybercrime

Enter the era of platform-based cloud security

PixieFail UEFI Flaws Expose Millions of Computers to RCE, DoS, and Data Theft

Iranian Hackers Masquerade as Journalists to Spy on Israel-Hamas War Experts

Insurance website's buggy API leaked Office 365 password and a giant email trove

~ 17 Jan 2024 ~

Apple, AMD, Qualcomm GPU security hole lets miscreants snoop on AI training and chats

Call for applications: Information Controls Fellowship Program 2024

New Microsoft Incident Response guides help security teams analyze suspicious activity

E-Crime Rapper Punchmade Dev Debuts Card Shop

New TTPs observed in Mint Sandstorm campaign targeting high-profile individuals at universities and research orgs

What's worse than paying an extortion bot that auto-pwned your database?

PAX PoS Terminal Flaw Could Allow Attackers to Tamper with Transactions