Port 22

~ 17 Jan 2024 ~

What's worse than paying an extortion bot that auto-pwned your database?

PAX PoS Terminal Flaw Could Allow Attackers to Tamper with Transactions

Combating IP Leaks into AI Applications with Free Discovery and Risk Reduction Automation

Code Written with AI Assistants Is Less Secure

Windows Server 2022 patch is breaking apps for some users

Feds Warn of AndroxGh0st Botnet Targeting AWS, Azure, and Office 365 Credentials

How a 27-Year-Old Codebreaker Busted the Myth of Bitcoins Anonymity

Webinar: The Art of Privilege Escalation - How Hackers Become Admins

Is Temu safe? What to know before you shop like a billionaire

New iShutdown Method Exposes Hidden Spyware Like Pegasus on Your iPhone

Dark web threats and dark market predictions for 2024

Home improvement marketers dial up trouble from regulator

GitHub Rotates Keys After High-Severity Vulnerability Exposes Credentials

Combination of cheap .cloud domains and fake Shark Tank news fuel unhealthy wellness scams

Citrix, VMware, and Atlassian Hit with Critical Flaws Patch ASAP!

Nokia walks the walk about its RAN to play on Uncle Sams China fears

Zero-Day Alert: Update Chrome Now to Fix New Actively Exploited Vulnerability

FBI: Beware of thieves building Androxgh0st botnets using stolen creds

~ 16 Jan 2024 ~

Locking down the edge

Double trouble for VMware and Atlassian admins critical flaws to fix

More than 178,000 SonicWall firewalls are exposed to old denial of service bugs

Unified security operations with Microsoft Sentinel and Microsoft Defender XDR

A Flaw in Millions of Apple, AMD, and Qualcomm GPUs Could Expose AI Data

Ivanti zero-day exploits explode as bevy of attackers get in on the act

Alert: Over 178,000 SonicWall Firewalls Potentially Vulnerable to Exploits - Act Now

Remcos RAT Spreading Through Adult Games in New Attack Wave

The Story of the Mirai Botnet

The Sad Truth of the FTC's Location Data Privacy Settlement

SEW-EURODRIVE MOVITOOLS MotionStudio

Integration Objects OPC UA Server Toolkit

Case Study: The Cookie Privacy Monster in Big Global Retail

The 7 deadly cloud security sins and how SMBs can do things better

A lightweight method to detect potential iOS malware

Inferno Malware Masqueraded as Coinbase, Drained $87 Million from 137,000 Victims

Hackers Weaponize Windows Flaw to Deploy Crypto-Siphoning Phemedrone Stealer

Chinas gambling crackdown spawned wave of illegal online casinos and crypto-crime in Asia

Industrial Control Systems Cyber Threats & The Gulf Region: ICS Blog Series: 1 of 3

FOR528: Ransomware & Cyber Extortion Course Updates Implemented Whats New?

~ 15 Jan 2024 ~

Thousands of Juniper Networks devices vulnerable to critical RCE bug

Patch time: Critical GitLab vulnerability exposes 2FA-less users to account takeovers

FTC secures first databroker settlement banning sale of sensitive location data

Opera MyFlaw Bug Could Let Hackers Run ANY File on Your Mac or Windows

3 Ransomware Group Newcomers to Watch in 2024

Voice Cloning with Very Short Samples

Ransomware protection deconstructed

High-Severity Flaws Uncovered in Bosch Thermostats and Smart Nutrunners

Balada Injector Infects Over 7,100 WordPress Sites Using Plugin Vulnerability

DDoS Attacks on the Environmental Services Industry Surge by 61,839% in 2023

China loathes AirDrop so much it's publicized an old flaw in Apple's P2P protocol

Ransomware Cases Increased Greatly in 2023

~ 14 Jan 2024 ~

Upcoming Speaking Engagements

New Findings Challenge Attribution in Denmark's Energy Sector Cyberattacks

~ 13 Jan 2024 ~

A Bloody Pig Mask Is Just Part of a Wild New Criminal Charge Against eBay

Critical RCE Vulnerability Uncovered in Juniper SRX Firewalls and EX Switches

29-Year-Old Ukrainian Cryptojacking Kingpin Arrested for Exploiting Cloud Services

Number of orgs compromised via Ivanti VPN zero-days grows as Mandiant weighs in

~ 12 Jan 2024 ~

Why we update... Data-thief malware exploits SmartScreen on unpatched Windows PCs

Friday Squid Blogging: Giant Squid from Newfoundland in the 1800s

Mobile security vulnerabilities threaten millions in Latin America: ICFP and Citizen Lab fellow Beau Kujath finds security vulnerabilities in mobile applications in Latin America region.

Exploit for under-siege SharePoint vuln reportedly in hands of ransomware crew

How to Stop Your X Account From Getting Hacked Like the SEC's

Secret multimillion-dollar cryptojacker snared by Ukrainian police

Microsoft is named a Leader in the 2023 Gartner Magic Quadrant for Endpoint Protection Platforms

Secure network operations for hybrid working

Lessons from SEC's X account hack Week in security with Tony Anscombe

Nation-State Actors Weaponize Ivanti VPN Zero-Days, Deploying 5 Malware Families

Medusa Ransomware on the Rise: From Data Leaks to Multi-Extortion

So, are we going to talk about how GitHub is an absolute boon for malware, or nah?

Urgent: GitLab Releases Patch for Critical Vulnerabilities - Update ASAP

Applying the Tyson Principle to Cybersecurity: Why Attack Simulation is Key to Avoiding a KO

On IoT Devices and Software Liability

Data regulator fines HelloFresh 140k for sending 80M+ spams

While we fire the boss, can you lock him out of the network?

Cryptominers Targeting Misconfigured Apache Hadoop and Flink with Rootkit in New Attacks

Drivers: We'll take that plain dumb car over a flashy data-spilling internet one, thanks

Act Now: CISA Flags Active Exploitation of Microsoft SharePoint Vulnerability

~ 11 Jan 2024 ~

eBay to cough up $3M after cyber-stalking couple who dared criticize the souk

Mandiant's brute-forced X account exposes perils of skimping on 2FA

Threat Actors Increasingly Abusing GitHub for Malicious Purposes

Infoseccers think attackers backed by China are behind Ivanti zero-day exploits

New PoC Exploit for Apache OfBiz Vulnerability Poses Risk to ERP Systems

New Python-based FBot Hacking Toolkit Aims at Cloud and SaaS Platforms

Child Abusers Are Getting Better at Using Crypto to Cover Their Tracks

Pharmacies Giving Patient Records to Police without Warrants

US School Shooter Emergency Plans Exposed in a Highly Sensitive Database Leak

Siemens Teamcenter Visualization and JT2Go

Siemens Spectrum Power 7

Siemens Solid Edge

Siemens SIMATIC CN 4100

Siemens SIMATIC

Siemens SICAM A8000

Schneider Electric Easergy Studio

Rapid Software LLC Rapid SCADA

Horner Automation Cscape

There is a Ransomware Armageddon Coming for Us All

Atomic Stealer Gets an Upgrade - Targeting Mac Users with Encrypted Payload

A peek behind the curtain: How are sock puppet accounts used in OSINT?

Mandiant's X Account Was Hacked Using Brute-Force Attack

Chinese Hackers Exploit Zero-Day Flaws in Ivanti Connect Secure and Policy Secure

Cisco Fixes High-Risk Vulnerability Impacting Unity Connection Software