Port 22

~ 13 Sep 2023 ~

Alert: New Kubernetes Vulnerabilities Enable Remote Attacks on Windows Endpoints

Cybersecurity Skills Gap: Roadies & Gamers Are Untapped Talent

Researchers Detail 8 Vulnerabilities in Azure HDInsight Analytics Service

Recent Rhysida Attacks Show Focus on Healthcare By Ransomware Actors

Pegasus Infection of Galina Timchenko, exiled Russian Journalist and Publisher

Used cars? Try used car accounts: 15,000 up for grabs online at just $2 a pop

Webinar: Identity Threat Detection & Response (ITDR) Rips in Your Identity Fabric

Zero-Click Exploit in iPhones

The US Congress Has Trust Issues. Generative AI Is Making It Worse

How to snoop on passwords with this one weird trick (involving public Wi-Fi signals)

Capita class action: 2,000 folks affected by data theft sign up

The Twisted Eye in the Sky Over Buenos Aires

Rust-Written 3AM Ransomware: A Sneak Peek into a New Malware Family

How Cyberattacks Are Transforming Warfare

Read it right! How to spot scams on Reddit

Microsoft Warns of New Phishing Campaign Targeting Corporations via Teams Messages

Threat landscape for industrial automation systems. Statistics for H1 2023

Microsoft Releases Patch for Two New Actively Exploited Zero-Days Flaws

Ransomware attack hits Sri Lanka government, causing data loss

Update Adobe Acrobat and Reader to Patch Actively Exploited Vulnerability

Mozilla Rushes to Patch WebP Critical Zero-Day Exploit in Firefox and Thunderbird

~ 12 Sep 2023 ~

China caught again with its malware in another nation's power grid

Microsoft Patches a Pair of Actively Exploited Zero-Days

Adobe, Apple, Google & Microsoft Patch 0-Day Bugs

Grab those updates: Microsoft flings out fixes for already-exploited bugs

China's Winnti APT Compromises National Grid in Asia for 6 Months

Critical Google Chrome Zero-Day Bug Exploited in the Wild

Israeli Hospital Hit By Ransomware Attack, 1TB Data Stolen

IBM Adds Data Security Broker to Encrypt Data in Multiclouds

MGM Resorts Cyberattack Hobbles Las Vegas Strip Operations

OpenSSL 1.1.1 reaches end of life for all but the well-heeled

ChatGPT Jailbreaking Forums Proliferate in Dark Web Communities

Malware distributor Storm-0324 facilitates ransomware access

Millions of Facebook Business Accounts Bitten by Python Malware

Google's Chrome gets caught with its WebP down, offers hasty patch-up

The Double-Edged Sword of Cyber Espionage

'Anonymous Sudan' Sets Its Sights on Telegram in DDoS Attack

Hitachi Energy Lumada APM Edge

Fujitsu Software Infrastructure Manager

Critical GitHub Vulnerability Exposes 4,000+ Repositories to Repojacking Attack

Cars Have Terrible Data Privacy

7 Steps to Kickstart Your SaaS Security Program

Chinese Redfly Group Compromised a Nation's Critical Grid in 6-Month ShadowPad Campaign

Sophisticated Phishing Campaign Deploying Agent Tesla, OriginBotnet, and RedLine Clipper

China-Linked Hackers Breached a Power GridAgain

ESET Research Podcast: Sextortion, digital usury and SQL brute-force

Free Download Manager backdoored a possible supply chain attack on Linux machines

Beware: MetaStealer Malware Targets Apple macOS in Recent Attacks

Google Rushes to Patch Critical Chrome Vulnerability Exploited in the Wild - Update Now

NISTs SP800-50r1 Building a Cybersecurity and Privacy Learning Program

~ 11 Sep 2023 ~

Save the Children feared hit by ransomware, 7TB stolen

World Security Report Finds Physical Security Incidents Cost Companies USD $1T in 2022

Google and Acalvio Partner to Deliver Active Defense to Protect Customers From Advanced Threats

Cloudflare Announces Unified Data Protection Suite to Address Risks of Modern Coding and Increased AI Use

Iran's Charming Kitten Pounces on Israeli Exchange Servers

MGM Resorts shuts down computer systems after 'cybersecurity incident'

Being Flexible Can Improve Your Security Posture

'Steal-It' Campaign Uses OnlyFans Models as Lures

Huge DDoS attack against US financial institution thwarted

Iranian APT Hits US Aviation Org via ManageEngine, Fortinet Bugs

Navigating Rwanda's New Data Protection Law

Attackers Abuse Google Looker Studio to Evade DMARC, Email Security

Vietnamese Hackers Deploy Python-Based Stealer via Facebook Messenger

Overcoming the Rising Threat of Session Hijacking

Charming Kiten's New Backdoor 'Sponsor' Targets Brazil, Israel, and U.A.E.

Malice in the mail

How to Prevent API Breaches: A Guide to Robust Security

On Robots Killing People

Google Chrome Rolls Out Support for 'Privacy Sandbox' to Bid Farewell to Tracking Cookies

AI Chatbots Are Invading Your Local Governmentand Making Everyone Nervous

From Caribbean shores to your devices: analyzing Cuba ransomware

Sponsor with batch-filed whiskers: Ballistic Bobcats scan and strike backdoor

Cybercriminals Using PowerShell to Steal NTLMv2 Hashes from Compromised Windows

New HijackLoader Modular Malware Loader Making Waves in the Cybercrime World

Google warns infoseccers: Beware of North Korean spies sliding into your DMs

~ 9 Sep 2023 ~

Mozilla: Your New Car Is a Data Privacy Nightmare

Millions Infected by Spyware Hidden in Fake Telegram Apps on Google Play

Cybercriminals Weaponizing Legitimate Advanced Installer Tool in Crypto-Mining Attacks

~ 8 Sep 2023 ~

Friday Squid Blogging: Glass Squid Video

Critical Security Bug Opens Cisco BroadWorks to Complete Takeover

'Evil Telegram' Spyware Campaign Infects 60K+ Mobile Users

Top US Spies Meet With Privacy Experts Over Surveillance 'Crown Jewel'

Axon's Ethics Board Resigned Over Taser-Armed Drones. Then the Company Bought a Military Drone Maker

U.K. and U.S. Sanction 11 Russia-based Trickbot Cybercrime Gang Members

Microsoft, Google Take on Obsolete TLS Protocols

Kenya Initiates Public Sector Digital Skills Training, No Mention of Cybersecurity

Trickbot, Conti Sanctions Affect Top Cybercrime Brass

3 Strategies to Defend Against Resurging Infostealers

Safe delivery

Apple races to patch the latest zero-day iPhone exploit

Protecting Your Microsoft IIS Servers Against Malware Attacks

Cisco Issues Urgent Fix for Authentication Bypass Bug Affecting BroadWorks Platform

LLMs and Tool Use

Evil Telegram doppelganger attacks Chinese users

Will you give X your biometric data? Week in security with Tony Anscombe

North Korean Hackers Exploit Zero-Day Bug to Target Cybersecurity Researchers

Microsoft, recently busted by Beijing, thinks it's across China's ever-changing cyber-offensive

CISA Warning: Nation-State Hackers Exploit Fortinet and Zoho Vulnerabilities

Apple Rushes to Patch Zero-Day Flaws Exploited for Pegasus Spyware on iPhones

Software Supply Chain Strategies to Parry Dependency Confusion Attacks