Port 22

~ 4 Sep 2023 ~

Beware of MalDoc in PDF: A New Polyglot Attack Allowing Attackers to Evade Antivirus

Chinese-Speaking Cybercriminals Launch Large-Scale iMessage Smishing Campaign in U.S.

Apple opens annual applications for free hackable iPhones

Evolution of Cloud Tactics, Techniques, and Procedures

~ 3 Sep 2023 ~

How to Use Proton Sentinel to Keep Your Accounts Safe

PoC Exploit Released for Critical VMware Aria's SSH Auth Bypass Vulnerability

Next Generation FOR508

~ 2 Sep 2023 ~

2 Polish Men Arrested for Radio Hack That Disrupted Trains

Cops drill into chat apps, sink plot to smuggle tons of coke into Europe

Okta Warns of Social Engineering Attacks Targeting Super Administrator Privileges

~ 1 Sep 2023 ~

Friday Squid Blogging: Were Genetically Engineering Squid Now

Lacework Expands Partnership With Google Cloud to Deliver Enterprise Flexibility in the Cloud

ReasonLabs Summer 2023 Trends Report Reveals Top Consumer Security Threats

AI for Good: Voxel AI Tech Increases Funding to $30M With Strategic Funding Round

Inaugural Pwn2Own Automotive Contest Dangles $1M for Car Hackers

More Okta customers trapped in Scattered Spider's web

US Government Denies Blocking Sales of AI Chips to Middle East

MSSQL Databases Under Fire From FreeWorld Ransomware

Will the AI Arms Race Lead to the Pollution of the Internet?

Key Group Ransomware Foiled by New Decryptor

NYC Subway Disables Trip-History Feature Over Tap-and-Go Privacy Concerns

Threat Actors Targeting Microsoft SQL Servers to Deploy FreeWorld Ransomware

Why is .US Being Used to Phish So Many of Us?

Proposed SEC Cybersecurity Rule Will Put Unnecessary Strain on CISOs

Massive attack

Spyware Vendor Hacked

Russian State-Backed 'Infamous Chisel' Android Malware Targets Ukrainian Military

New SuperBear Trojan Emerges in Targeted Phishing Attack on South Korean Activists

It's a Zero-day? It's Malware? No! It's Username and Password

Classiscam Scam-as-a-Service Raked $64.5 Million During the COVID-19 Pandemic

~ 31 Aug 2023 ~

Good news for Key Group ransomware victims: Free decryptor out now

National Cybersecurity Alliance Receives 200K Grant From Craig Newmark Philanthropies for HBCU Cybersecurity Program

Cygna Labs Corp. Announces Expansion of its DNS Firewall Service

Introducing SafeUTM: The Free Version of NGFW

3 out of 4 Cyberattacks in the Education Sector Are Associated With a Compromised OnPremises User or Admin Account

UN: Southeast Asia Gangs Are Trafficking Cybercrime Workers

Insurance Costs Rise, Coverage Shrinks, But Policies Remain Essential

Apple's Decision to Kill Its CSAM Photo-Scanning Tool Sparks Fresh Controversy

Kremlin-backed Sandworm strikes Android devices with data-stealing Infamous Chisel

Cybercriminals Team Up to Upgrade 'SapphireStealer' Malware

UK Agrees to Support Kuwait's Cybersecurity Center

Paramount, Forever 21 Data Breaches Set Stage for Follow-On Attacks

Apple iPhone 14 Pro Offered Up to the Hacking Masses

Navigating privacy in a data-driven world with Microsoft Priva

AgentSmith HIDS Host Based Intrusion Detection

Cyberattackers Swarm OpenFire Cloud Servers With Takeover Barrage

SapphireStealer Malware: A Gateway to Espionage and Ransomware Operations

A Brief History of ICS-Tailored Attacks

Adversaries Ride RocketMQ Bug to DreamBus Bot Resurgence

Fake Signal and Telegram apps Week in security with Tony Anscombe

North Korean Hackers Deploy New Malicious Python Packages in PyPI Repository

PTC Kepware KepServerEX

GE Digital CIMPLICITY

Digi RealPort Protocol

ARDEREG Sistemas SCADA

Numbers Don't Lie: Exposing the Harsh Truths of Cyberattacks in New Report

Own Your Own Government Surveillance Van

Google Fixes Serious Security Flaws in Chrome and Android

What you need to know about iCloud Private Relay

Earth Estries' Espionage Campaign Targets Governments and Tech Titans Across Continents

SEC568: Approaching the Software Supply Chain like Jack Byrnes

Next Generation FOR508 - Major Course Update Fall 2023

How to Get Into OSINT

FOR589: Cybercrime Intelligence Blog

Career Development for Security Awareness, Behavior, and Culture Professionals

~ 30 Aug 2023 ~

Barracuda gateway attacks: How Chinese snoops keep a grip on victims' networks

Chinese Group Spreads Android Spyware Via Trojan Signal, Telegram Apps

APT Attacks From 'Earth Estries' Hit Gov't, Tech With Custom Malware

New York Times Spoofed to Hide Russian Disinformation Campaign

Microsoft angry over Russian-led UN cybercrime treaty

Unmasking Trickbot, One of the Worlds Top Cybercrime Gangs

Hackers Can Exploit Windows Container Isolation Framework to Bypass Endpoint Security

4 Strategies to Safeguard the Finance Industry Against Deepfake Onslaught

Performance-Enhanced Android MMRat Scurries onto Devices Via Fake App Stores

MMRat Android Trojan Executes Remote Financial Fraud Through Accessibility Feature

Should Senior IT Professionals Be Accountable for Professional Decisions?

China-Linked BadBazaar Android Spyware Targeting Signal and Telegram Users

When Apps Go Rogue

In Airbnb, Cybercriminals Find a Comfortable Home for Fraud

How to Prevent ChatGPT From Stealing Your Content & Traffic

Malicious npm Packages Aim to Target Developers for Source Code Theft

Alert: Juniper Firewalls, Openfire, and Apache RocketMQ Under Attack from New Exploits

IT threat evolution in Q2 2023. Non-mobile statistics

IT threat evolution in Q2 2023. Mobile statistics

IT threat evolution in Q2 2023

BadBazaar espionage tool targets Android users via trojanized Signal and Telegram apps

Critical Vulnerability Alert: VMware Aria Operations Networks at Risk from Remote Attacks

FBI Dismantles QakBot Malware, Frees 700,000 Computers, Seizes $8.6 Million

Toyota Japan back on the road after probably-not-cyber attack halted production

Evolution of Cybercriminal Operations in 2023

Meta reckons China's troll farms could learn proper OpSec from Russia's fake news crews

~ 29 Aug 2023 ~

6 Ways AI Can Revolutionize Digital Forensics

Everest Group Research: C-Suite Must Recognize Critical Difference Between Cybersecurity and Cyber Resilience

SPHERE Appoints Former Johnson & Johnson CISO Marene Allison to Board of Directors

Unpatched Citrix NetScaler Devices Targeted by Ransomware Group FIN8

Delinea Research Reveals a Cyber Insurance Gap

University cuts itself off from internet after mystery security snafu

PurFoods Mom's Meals Reports Data Breach Exposing Social Security Numbers of Over 1.2 Million Consumers

Sprawling Qakbot Malware Takedown Spans 700,000 Infected Machines

MOVEit Was a SQL Injection Accident Waiting to Happen