Port 22

~ 19 Jun 2024 ~

Kraken Crypto Exchange Hit by $3 Million Theft Exploiting Zero-Day Flaw

Chinese Cyber Espionage Group Exploits Fortinet, Ivanti and VMware Zero-Days

Amtrak confirms crooks are breaking into user accounts, derailing email addresses

Perplexity Is a Bullshit Machine

The Hacking of Culture and the Creation of Socio-Technical Debt

New Case Study: Unmanaged GTM Tags Become a Security Nightmare

Void Arachne Uses Deepfakes and AI to Deliver Malicious VPNs to Chinese Users

Warning: Markopolo's Scam Targeting Crypto Users via Fake Meeting Software

This Is What Would Happen if China Invaded Taiwan

Hacktivism is evolving and that could be bad news for organizations everywhere

Mailcow Mail Server Flaws Expose Servers to Remote Code Execution

That PowerShell 'fix' for your root cert 'problem' is a malware loader in disguise

~ 18 Jun 2024 ~

Rogue uni IT director pleads guilty after fraudulently buying $2.1M of tech

Dark-web kingpin puts 'stolen' internal AMD databases, source code up for sale

EU attempt to sneak through new encryption-busting law slammed by Signal, politicians

Signal Foundation Warns Against EU's Plan to Scan Private Messages for CSAM

CHERI Alliance formed to promote memory security tech ... but where's Arm?

Cybercriminals Exploit Free Software Lures to Deploy Hijack Loader and Vidar Stealer

Uncle Sam ends financial support to orgs hurt by Change Healthcare attack

Microsoft Defender Experts for XDR recognized in the latest MITRE Engenuity ATT&CK Evaluation for Managed Services

RAD Data Communications SecFlow-2

Analysis of user password strength

Analysis of user password strength

NHS boss says Scottish trust didn't meet attackers' demands

The Annual SaaS Security Report: 2025 CISO Plans and Priorities

Rethinking Democracy for the Age of AI

New Malware Targets Exposed Docker APIs for Cryptocurrency Mining

VMware Issues Patches for Cloud Foundation, vCenter Server, and vSphere ESXi

Singapore Police Extradites Malaysians Linked to Android Malware Fraud

VMware by Broadcom warns of two critical vCenter flaws, plus a nasty sudo bug

Arm security defense shattered by speculative execution 95% of the time

NIS2 Compliance for OT: Strategic Implementation of ICS Controls

Instructor Spotlight: Sean Thomas

~ 17 Jun 2024 ~

Shoddy infosec costs PwC spinoff and NMA $11.3M in settlement with Uncle Sam

Feds cuff suspected bosses of underworld Empire Market

Blackbaud has to cough up a few million dollars more over 2020 ransomware attack

ASUS Patches Critical Authentication Bypass Flaw in Multiple Router Models

Cops cuff 22-year-old Brit suspected of being Scattered Spider leader

China-Linked Hackers Infiltrate East Asian Firm for 3 Years Using F5 Devices

What is DevSecOps and Why is it Essential for Secure Software Delivery?

AWS is pushing ahead with MFA for privileged accounts. What that means for you ...

Using LLMs to Exploit Vulnerabilities

UK's Total Fitness exposed nearly 500k images of members and staff through unprotected database

Preventative defense tactics in the real world

Hackers Detail How They Allegedly Stole Ticketmaster Data From Snowflake

Amazon-Powered AI Cameras Used to Detect Emotions of Unwitting UK Train Passengers

Notorious cyber gang UNC3944 attacks vSphere and Azure to run VMs inside victims' infrastructure

Hackers Exploit Legitimate Websites to Deliver BadSpace Windows Backdoor

NiceRAT Malware Targets South Korean Users via Cracked Software

That didn't take long: replacement for SORBS spam blacklist arises ... sort of

Eight Essential Lessons for Resilient Supply Chain Security

A Visual Summary of SANS ICS Summit 2024

Japan's space junk cleaner hunts down major target

~ 16 Jun 2024 ~

How to Spot a Business Email Compromise Scam

Let Slip the Robot Dogs of War

U.K. Hacker Linked to Notorious Scattered Spider Group Arrested in Spain

~ 15 Jun 2024 ~

Alleged Boss of Scattered Spider Hacking Group Arrested

A Guide to RCS, Why Apples Adopting It, and How It Makes Texting Better

Ukrainian Sailors Are Using Telegram to Avoid Being Tricked Into Smuggling Oil for Russia

Ransomware Attacks Are Getting Worse

Grandoreiro Banking Trojan Hits Brazil as Smishing Scams Surge in Pakistan

Pakistani Hackers Use DISGOMOJI Malware in Indian Government Cyber Attacks

Meta Halts AI Training on EU User Data Amid Privacy Concerns

Microsoft answered Congress' questions on security. Now the White House needs to act

~ 14 Jun 2024 ~

Stanford Internet Observatory wilts under legal pressure during election year

Friday Squid Blogging: Squid Cartoon

Meta won't train AI on Euro posts after all, as watchdogs put their paws down

Nigerian faces up to 102 years in the slammer for $1.5M phishing scam

Upcoming Speaking Engagements

Ukraine busts SIM farms targeting soldiers with spyware

Google's Privacy Sandbox Accused of User Tracking by Austrian Non-Profit

Learn to Secure Petabyte-Scale Data in a Webinar with Industry Titans

How Arid Viper spies on Android users in the Middle East Week in security with Tony Anscombe

French state bidding for piece of Atos, offers 700M

Demo of AES GCM Misuse Problems

Why Regulated Industries are Turning to Military-Grade Cyber Defenses

ESET Research Podcast: APT Activity Report Q4 2023Q1 2024

ZKTeco Biometric System Found Vulnerable to 24 Critical Security Flaws

North Korean Hackers Target Brazilian Fintech with Sophisticated Phishing Tactics

Microsoft Delays AI-Powered Recall Feature for Copilot+ PCs Amid Security Concerns

Microsoft bigwig says the Feds catching Chinese spies in Exchange Online is the cloud working as intended

~ 13 Jun 2024 ~

US Space Force wanted $77M to reinforce GPS and Congress shot it down

Oracle Ads have had it: $2B operation shuts down after dwindling to $300M

Ukrainian cops collar Kyiv programmer believed to be Conti, LockBit linchpin

New Attack Technique 'Sleepy Pickle' Targets Machine Learning Models

Arid Viper Launches Mobile Espionage Campaign with AridSpy Malware

Google's Privacy Sandbox more like a privacy mirage, campaigners claim

Siemens TIA Administrator

Siemens Teamcenter Visualization and JT2Go

Siemens ST7 ScadaConnect

Siemens SITOP UPS1600

Siemens SINEC Traffic Analyzer

Siemens SIMATIC S7-200 SMART Devices

Siemens SIMATIC and SIPLUS

Siemens SCALANCE XM-400, XR-500

Siemens PowerSys

Siemens Mendix Applications

Rockwell Automation FactoryTalk View SE

Fuji Electric Tellus Lite V-Simulator

Student's flimsy bin bags blamed for latest NHS data breach