Port 22

~ 10 Jun 2024 ~

Bypassing 2FA with phishing and OTP bots

Sticky Werewolf Expands Cyber Attack Targets in Russia and Belarus

~ 9 Jun 2024 ~

Akira: Perhaps the next big thing in ransomware, says Tidal threat intelligence chief

~ 8 Jun 2024 ~

Uber ex-CSO Joe Sullivan: We need security leaders running to work, not giving up

Apple Is Coming for Your Password Manager

New PHP Vulnerability Exposes Windows Servers to Remote Code Execution

Microsoft Revamps Controversial AI-Powered Recall Feature Amid Privacy Concerns

~ 7 Jun 2024 ~

'New York Times source code' leaks online via 4chan

FCC takes some action against notorious BGP

Friday Squid Blogging: Squid Catch Quotas in Peru

Security and Human Behavior (SHB) 2024

Defiant Microsoft pushes ahead with controversial Recall tho as an opt-in

Op-ed by Kate Robertson and Ron Deibert in The Globe and Mail

Frontier Communications: 750k people's data stolen in April attack on systems

Microsoft Will Switch Off Recall by Default After Security Backlash

Ultimate Cyber Hygiene Guide: Learn How to Simplify Your Security Efforts

LightSpy Spyware's macOS Variant Found with Advanced Surveillance Capabilities

How to navigate NIS2 and secure your vulnerabilities

Cisco fixes WebEx flaw that allowed government, military meetings to be spied on

560 million Ticketmaster customer data for sale? Week in security with Tony Anscombe

Cyber Landscape is Evolving - So Should Your SCA

The AI Debate: Google's Guidelines, Meta's GDPR Dispute, Microsoft's Recall Backlash

The Justice Department Took Down the 911 S5 Botnet

Russian hacktivists vow mass attacks against EU elections

FBI Distributes 7,000 LockBit Ransomware Decryption Keys to Help Victims

SPECTR Malware Targets Ukraine Defense Forces in SickSync Campaign

Spam blocklist SORBS closed by its owner, Proofpoint

Commando Cat Cryptojacking Attacks Target Misconfigured Docker Instances

POC exploit code published for 9.8-rated Apache HugeGraph RCE flaw

Microsoft's Recall Feature Is Even More Hackable Than You Thought

~ 6 Jun 2024 ~

FBI encourages LockBit victims to step right up for free encryption keys

FBI encourages LockBit victims to step right up for free decryption keys

The Snowflake Attack May Be Turning Into One of the Largest Data Breaches Ever

Espionage with a Drone

Uncle Sam seeks to claw back $5M+ stolen from trade union through spoofed email

Muhstik Botnet Exploiting Apache RocketMQ Flaw to Expand DDoS Attacks

Microsoft shows venerable and vulnerable NTLM security protocol the door

Mitsubishi Electric CC-Link IE TSN Industrial Managed Switch

Johnson Controls Software House iStar Pro Door Controller

Emerson PACSystem and Fanuc

Emerson Ovation

Third-Party Cyber Attacks: The Threat No One Sees Coming Here's How to Stop Them

Hackers Target Python Developers with Fake "Crytic-Compilers" Package on PyPI

7-year-old Oracle WebLogic bug under active exploitation

The Lords of Silicon Valley Are Thrilled to Present a Handheld Iron Dome

Prevent Account Takeover with Better Password Security

Hackers Exploit Legitimate Packer Software to Spread Malware Undetected

The job hunters guide: Separating genuine offers from scams

Microsoft Research chief scientist has no issue with Windows Recall

Google Maps Timeline Data to be Stored Locally on Your Device for Privacy

How to Lead an Army of Digital Sleuths in the Age of AI

~ 5 Jun 2024 ~

TikTok confirms CNN, other high-profile accounts hijacked via zero-day vulnerability

Who are these RansomHub cyber-thieves? Looks like a Knight ransomware reboot

Emergency patches released for critical vulns impacting EOL Zyxel NAS boxes

4 cuffed following probe into holiday scheme for cybercrooks

Chinese State-Backed Cyber Espionage Targets Southeast Asian Government

Online Privacy and Overfishing

Unpacking 2024's SaaS Threat Predictions

Rebranded Knight Ransomware Targeting Healthcare and Businesses Worldwide

The Age of the Drone Police Is Here

An American Company Enabled a North Korean Scam That Raised Money for WMDs

Zyxel Releases Patches for Firmware Vulnerabilities in EoL NAS Models

Microsoft paid Tenable a bug bounty for an Azure flaw it says doesn't need a fix, just better documentation

Celebrity TikTok Accounts Compromised Using Zero-Click Attack via DMs

Essential Cybersecurity Practices for Protecting Industrial Infrastructure

~ 4 Jun 2024 ~

Command senior chief busted for secretly setting up Wi-Fi on US Navy combat ship

Pentagon 'doubling down' on Microsoft despite 'massive hack,' senators complain

TikTok Hack Targets High-Profile Users via DMs

AI jailbreaks: What they are and how they can be mitigated

The four stages of creating a trust fabric with identity and network security

London hospitals declare critical incident after service partner ransomware attack

Russian Power Companies, IT Firms, and Govt Agencies Hit by Decoy Dog Trojan

This Hacker Tool Extracts All the Data Collected by Windows New Recall AI

Telerik Report Server Flaw Could Let Attackers Create Rogue Admin Accounts

Christie's stolen data sold to highest bidder rather than leaked, RansomHub claims

Microsoft accused of tracking kids with education software

Cybercrooks get cozy with BoxedApp to dodge detection

Uniview NVR301-04S2-P4

The Next Generation of RBI (Remote Browser Isolation)

Breaking a Password Manager

Hackers Use MS Excel Macro to Launch Multi-Stage Malware Attack in Ukraine

AI Is Your Coworker Now. Can You Trust It?

Snowflake Warns: Targeted Credential Theft Campaign Hits Cloud Customers

Inside the Biggest FBI Sting Operation in History

Russians Love YouTube. Thats a Problem for the Kremlin

DarkGate Malware Replaces AutoIt with AutoHotkey in Latest Cyber Attacks

Oracle WebLogic Server OS Command Injection Flaw Under Active Attack

Hudson Rock yanks report fingering Snowflake employee creds snafu for mega-leak

CISOs Navigating the GenAI Tide: Actionable Insights from SANS Institute

~ 3 Jun 2024 ~

NIST turns to IT consultants to clear National Vulnerability Database backlog

Crooks threaten to leak 3B personal records 'stolen from background check firm'

Microsoft is named a leader in the Forrester Wave for XDR

Microsoft is again named the overall leader in the Forrester Wave for XDR

Russia takes gold for disinformation as Olympics approach

Researchers Uncover RAT-Dropping npm Package Targeting Gulp Users

Authorities Ramp Up Efforts to Capture the Mastermind Behind Emotet

Check Point warns customers to patch VPN vulnerability under active exploitation

Seeing Like a Data Structure

AI Will Increase the Quantityand Qualityof Phishing Scams

SASE Threat Report: 8 Key Findings for Enterprise Security