Port 22

~ 25 Oct 2023 ~

Winter Vivern exploits zero-day vulnerability in Roundcube Webmail servers

Malvertising Campaign Targets Brazil's PIX Payment System with GoPIX Malware

Hunters International leaks pre-op plastic surgery pics in negotiation no-no

Alert: PoC Exploits Released for Citrix and VMware Vulnerabilities

VMware reveals critical vCenter vuln that you may have patched already without knowing it

Cybersecurity Regulations and Risk Assessment Requirements

~ 24 Oct 2023 ~

The AI-Generated Child Abuse Nightmare Is Here

Hot fuzz: Cascade finds dozens of RISC-V chip bugs using random data storm

Citrix urges 'immediate; patch for critical NetScaler bug as exploit POC made public

Tines Report Finds More than Half of Security Professionals Likely To Switch Jobs Next Year

This Cybersecurity Awareness Month, Don't Lose Sight of Human Risk

2023 Ransomware Attacks Up More Than 95% Over 2022, According to Corvus Insurance Q3 Report

Accenture Expands Cybersecurity Services Capabilities in Latin America With Acquisition of MNEMO Mexico

1Password Becomes Latest Victim of Okta Customer Service Breach

Meet Rhysida, a New Ransomware Strain That Deletes Itself

Former NSA Employee Faces Life in Prison After Espionage Attempt

Do Small Companies Need Fractional AppSec Teams Akin to vCISOs?

Strengthening Oman's Economic Backbone

Ex-NSA techie pleads guilty to selling state secrets to Russia

Cyberattacks on Kenya Drop in Third Quarter

Israeli-Hamas Conflict Spells Opportunity for Online Scammers

1Password confirms attacker tried to pull list of admin users after Okta intrusion

Element users are asking for protection against government encryption busting

It's Time to Establish the NATO of Cybersecurity

'Log in with...' Feature Allows Full Online Account Takeover for Millions

Ex-NSA Employee Pleads Guilty to Leaking Classified Data to Russia

Rockwell Automation Stratix 5800 and Stratix 5200

EPA Wont Force Water Utilities to Audit Their Cybersecurity

A Powerful Tool US Spies Misused to Stalk Women Faces Its Potential Demise

A Controversial Plan to Scan Private Messages for Child Abuse Meets Fresh Scandal

34 Cybercriminals Arrested in Spain for Multi-Million Dollar Online Scams

Make API Management Less Scary for Your Organization

Irish cops data debacle exposes half a million motorist records

Stealer for PIX payment system, new Lumar stealer and Rhysida ransomware

They Cracked the Code to a Locked USB Drive Worth $235 Million in Bitcoin. Then It Got Weird

Operation Triangulation: Experts Uncover Deeper Insights into iOS Zero-Day Attacks

Helping you bridge the cloud security gap

Backdoor Implant on Hacked Cisco Devices Modified to Evade Detection

1Password Detects Suspicious Activity Following Okta Support Breach

Scammers use Indias real-time payment system to siphon off money, send it to China

~ 23 Oct 2023 ~

Cisco fixes critical IOS XE bug but malware crew way ahead of them

The Hamas Threat of Hostage Execution Videos Looms Large Over Social Media

Cyberattackers Alter Implant on 30K Compromised Cisco IOS XE Devices

Valve's 2FA Mandate for Game Developers Shows SMS Stickiness

Hola Espana: 'Grandoreiro' Trojan Targets Global Banking Customers

City of Philadelphia Releases Cyber-Breach Notice

DC elections agency warns entire voting roll may have been stolen

How State and Local Governments Can Serve Citizens More Securely

Ragnar Locker Ransomware Boss Arrested in Paris

Malicious Apps Spoof Israeli Attack Detectors: Conflict Goes Mobile

Freelance Market Flooded With North Korean IT Actors

Forrester names Microsoft a Leader in the 2023 Endpoint Security Wave report

Telling Small Businesses to Buy Cyber Insurance Isn't Enough

NJ Man Hired Online to Firebomb, Shoot at Homes Gets 13 Years in Prison

Microsoft opens early access to AI assistant for infosec, Security Copilot

Redefining united data protection

Who's Experimenting with AI Tools in Your Organization?

DoNot Team's New Firebird Backdoor Hits Pakistan and Afghanistan

Child Exploitation and the Crypto Wars

The outstanding stealth of Operation Triangulation

One login to rule them all: Should you sign in with Google or Facebook on other websites?

Quasar RAT Leverages DLL Side-Loading to Fly Under the Radar

FedRAMP Rev. 5: How Cloud Service Providers Can Prepare

~ 21 Oct 2023 ~

Europol Dismantles Ragnar Locker Ransomware Infrastructure, Nabs Key Developer

The 23andMe User Data Leak May Be Far Worse Than Believed

The Dangerous Mystery of Hamas Missing Suicide Drones

Okta's Support System Breach Exposes Customer Data to Unidentified Threat Actors

Cisco Zero-Day Exploited to Implant Malicious Lua Backdoor on Thousands of Devices

9 Innovative Ways to Boost Security Hygiene for Cyber Awareness Month

~ 20 Oct 2023 ~

More Okta Customers Hacked

From Snooze to Enthuse: Security Awareness Training That Sticks

Friday Squid Blogging: Why There Are No Giant Squid in Aquariums

Critical SolarWinds RCE Bugs Enable Unauthorized Network Takeover

Cisco Finds New Zero Day Bug, Pledges Patches in Days

Admin behind E-Root stolen creds souk extradited to US

DoD Gets Closer to Nominating Cyber Policy Chief

Hackers Stole Access Tokens from Oktas Support Unit

Ducktail Infostealer, DarkGate RAT Linked to Same Threat Actors

SIM Card Ownership Slashed in Burkina Faso

Change From Within: 3 Cybersecurity Transformation Traps for CISOs to Avoid

Malvertisers Using Google Ads to Target Users Searching for Popular Software

Vietnamese Hackers Target U.K., U.S., and India with DarkGate Malware

What are Your Exception Expectations?

Spearphishing targets in Latin America Week in security with Tony Anscombe

Unleashing the Power of the Internet of Things and Cyber Security

AI and US Election Rules

ExelaStealer: A New Low-Cost Cybercrime Weapon Emerges

U.S. DoJ Cracks Down on North Korean IT Scammers Defrauding Global Businesses

Leveraging Artificial Intelligence (AI) to Manage Human Risk: Part 2 Generative AI Basics

Freelance Market Flooded with North Korean IT Actors

~ 19 Oct 2023 ~

Citing Hamas, the US Wants to Treat Crypto "Mixers" as Suspected Money Launderers

AI 'Will Have a Significant Impact on Energy Industry,' EPRI Tells Congress

Norton Boosts Security and Privacy With Enhanced Password Manager and AntiTrack

Spec Secures $15M Series A Funding, Accelerating Innovation in Fraud Defense

Fingerprint Raises $33M in Series C Funding to Accelerate Enterprise Device Intelligence and Fraud Prevention Adoption

SailPoint Unveils Annual 'Horizons of Identity Security' Report

23AndMe Hacker Leaks New Tranche of Stolen Data

North Korean State Actors Attack Critical Bug in TeamCity Server

Casio keyed up after data loss hits customers in 149 countries

Tips for a Successful SecOps Game Plan