Port 22

~ 29 Aug 2023 ~

University cuts itself off from internet after mystery security snafu

PurFoods Mom's Meals Reports Data Breach Exposing Social Security Numbers of Over 1.2 Million Consumers

Sprawling Qakbot Malware Takedown Spans 700,000 Infected Machines

MOVEit Was a SQL Injection Accident Waiting to Happen

Meta Cripples China's Signature 'Spamouflage' Influence Op

Apple security boss faces iPads-for-gun-permits bribery charge... again

FBI-led Operation Duck Hunt shoots down Qakbot

South African Department of Defence Denies Stolen Data Claims

U.S. Hacks QakBot, Quietly Removes Botnet Infections

Somalia Orders ISPs to Block Telegram and TikTok

Rackspace Faces Massive Cleanup Costs After Ransomware Attack

Addressing Cybersecurity's Talent Shortage & Its Impact on CISOs

Chinese Hacking Group Exploits Barracuda Zero-Day to Target Government, Military, and Telecom

DarkGate Malware Activity Spikes as Developer Rents Out Malware to Affiliates

Kroll's Crypto Breach Highlights SIM-Swapping Risk

Here's What Your Breach Response Plan Might Be Missing

The Weird, Big-Money World of Cybercrime Writing Contests

PTC Codebeamer

More UK cops' names and photos exposed in supplier breach

Survey Provides Takeaways for Security Pros to Operationalize their Remediation Life Cycle

Identity Theft from 1965 Uncovered through Face Recognition

Citrix NetScaler Alert: Ransomware Hackers Exploiting Critical Vulnerability

Phishing-as-a-Service Gets Smarter: Microsoft Sounds Alarm on AiTM Attacks

~ 28 Aug 2023 ~

Health, payment info for 1.2M people feared stolen from Purfoods in IT attack

Motherboard Mishaps Undermine Trust, Security

BreachLock Intelligence Report Reveals Critical Insights From Thousands of Penetration Tests

Cybercriminals Harness Leaked LockBit Builder in Wave of New Attacks

Considerations for Reducing Risk When Migrating to the Cloud

Financial Firms Breached in MOVEit Cyberattacks Now Face Lawsuits

London Police Warned to Stay Vigilant Amid Major Data Breach

5 Ways to Prepare for Google's 90-Day TLS Certificate Expiration

Malware loader lowdown: The big 3 responsible for 80% of attacks so far this year

Experts Uncover How Cybercriminals Could Exploit Microsoft Entra ID for Elevated Privilege

Developers Beware: Malicious Rust Libraries Caught Transmitting OS Info to Telegram Channel

Authentication Outage Underscores Why 'Fail Safe' Is Key

Legal Liability for Insecure Software Might Work, but It's Dangerous

Cyberattacks Targeting E-commerce Applications

Remotely Stopping Polish Trains

Recovering from a supply-chain attack: What are the lessons to learn from the 3CX hack?

Malware Unleashed: Public Sector Hit in Sudden Surge, Reveals New Research

Better SaaS Security Goes Beyond Procurement

KmsdBot Malware Gets an Upgrade: Now Targets IoT Devices with Enhanced Capabilities

Whiffy malware stinks after tracking location via Wi-FI

Taiwanese infosec researchers challenge Microsoft's China espionage finding

~ 27 Aug 2023 ~

The Cheap Radio Hack That Disrupted Poland's Railway System

The Low-Stakes Race to Crack an Encrypted German U-Boat Message

~ 26 Aug 2023 ~

This Tool Lets Hackers Dox Almost Anyone in the US

LockBit 3.0 Ransomware Builder Leak Gives Rise to Hundreds of New Variants

Tor turns to proof-of-work puzzles to defend onion network from DDoS attacks

Kroll Suffers Data Breach: Employee Falls Victim to SIM Swapping Attack

~ 25 Aug 2023 ~

Vendors Training AI With Customer Data is an Enterprise Risk

Friday Squid Blogging: Chinas Squid Fishing Ban Ineffective

Genworth Financial Under Investigation for Data Breach

China Unleashes Flax Typhoon APT to Live Off the Land, Microsoft Warns

Luna Grabber Malware Targets Roblox Gaming Devs

Kroll Employee SIM-Swapped for Crypto Investor Data

'Whiffy Recon' Malware Transmits Device Location Every 60 Seconds

Donald Trump's Mug Shot Matters in a World of Fakes

Is Bias in AI Algorithms a Threat to Cloud Security?

How a Telegram bot helps scammers target victims Week in security with Tony Anscombe

Two LAPSUS$ Hackers Convicted in London Court for High-Profile Tech Firm Hacks

NIST Publishes First Draft Standards for Post-Quantum Cryptography

Learn How Your Business Data Can Amplify Your AI/ML Threat Detection Capabilities

Hacking Food Labeling Laws

Navigating Legacy Infrastructure: A CISO's Actionable Strategy for Success

China-Linked Flax Typhoon Cyber Espionage Targets Taiwan's Key Sectors

Lockbit leak, research opportunities on tools leaked from TAs

Urgent FBI Warning: Barracuda Email Gateways Vulnerable Despite Recent Patches

Trump's Prosecution Is America's Last Hope

The Foundation to a Strong Security Culture: Feeling Safe and Included

Defending Against Ransomware in Industrial Control Systems

FBI: Who was going around hijacking Barracuda email boxes? China, probably

~ 24 Aug 2023 ~

Cerby Announces $17M in Series A Funding to Secure Nonstandard Applications

Critical Insight Releases H1 2023 Report

Black Hat USA 2023 Closes on Record-Breaking Event in Las Vega

Malwarebytes Announces Acquisition of Online Privacy Company Cyrus

Cypago Raises $13M and Unveils its Cyber GRC Automation (CGA) Platform to Simplify GRC Processes

Kyndryl and Cisco Expand Partnership Focusing on Cyber Resilience

US Space Industry More Prone to Foreign Espionage, US Agencies Warn

Ransomware With an Identity Crisis Targets Small Businesses, Individuals

New Telegram Bot "Telekopye" Powering Large-scale Phishing Scams from Russia

eBay Users Beware Russian 'Telekopye' Telegram Phishing Bot

What the Hive Ransomware Case Says About RaaS and Cryptocurrency

New "Whiffy Recon" Malware Triangulates Infected Device Location via Wi-Fi Every Minute

Flax Typhoon using legitimate software to quietly access Taiwanese organizations

The Last Hour Before Yevgeny Prigozhin's Plane Crash

Lazarus Group Exploits Critical Zoho ManageEngine Flaw to Deploy Stealthy QuiteRAT Malware

5 Best Practices for Implementing Risk-First Cybersecurity

Pulling the strings

North Korea's Lazarus Group Used GUI Framework to Build Stealthy RAT

Why The Chainsmokers Invest inand Party WithNiche Cybersecurity Companies

Rockwell Automation Input/Output Modules

OPTO 22 SNAP PAC S1

KNX Protocol

CODESYS Development System

CODESYS Development System

CODESYS Development System

The Hidden Dangers of Public Wi-Fi

Parmesan Anti-Forgery Protection

WinRAR Security Flaw Exploited in Zero-Day Attacks to Target Traders