Port 22

~ 16 May 2024 ~

Siemens Teamcenter Visualization and JT2Go

Siemens Solid Edge

Siemens Simcenter Nastran

Siemens SIMATIC CN 4100 Before V3.0

Siemens SICAM Products

Siemens RUGGEDCOM APE1808

Siemens PS/IGES Parasolid Translator Component

Siemens Parasolid

Siemens Desigo Fire Safety UL and Cerberus PRO UL Fire Protection Systems

Rockwell Automation FactoryTalk View SE

Zero-Trust DNS

Researchers Uncover 11 Security Flaws in GE HealthCare Ultrasound Machines

NCSC CTO: Broken market must be fixed to usher in new tech

Cybercriminals Exploiting Microsofts Quick Assist Feature in Ransomware Attacks

Google Patches Yet Another Actively Exploited Chrome Zero-Day Vulnerability

Tackling Modern Human Risks in Cybersecurity: Insights from the Verizon DBIR 2024

~ 15 May 2024 ~

FBI takes down BreachForums ransomware website and Telegram channel

Crook brags about US Army and $75b defense biz pwnage

FBI Seizes BreachForums Again, Urges Users to Report Criminal Activity

Improving cyber defense with open source SIEM and XDR

Google Launches AI-Powered Theft and Data Protection Features for Android Devices

Android 15 Theft Detection Lock Knows When Your Phone Is Stolen

Android 15 Rolls Out Advanced Features to Protect Users from Scams and Malicious Apps

Threat actors misusing Quick Assist in social engineering attacks leading to ransomware

Turla Group Deploys LunarWeb and LunarMail Backdoors in Diplomatic Missions

(Cyber) Risk = Probability of Occurrence x Damage

Ebury Botnet Malware Compromises 400,000 Linux Servers Over Past 14 Years

It's Time to Master the Lift & Shift: Migrating from VMware vSphere to Microsoft Azure

To the Moon and back(doors): Lunar landing in diplomatic missions

Dutch Court Sentences Tornado Cash Co-Founder to 5 Years in Prison for Money Laundering

Microsoft Patches 61 Flaws, Including Two Actively Exploited Zero-Days

Understanding the Latest Cyber Threats: Insights from RSA Conference 2024 Keynote

~ 14 May 2024 ~

Microsoft fixes a bug abused in QakBot attacks plus a second under exploit

FCC names and shames Royal Tiger AI robocall crew

Patch Tuesday, May 2024 Edition

QakBot attacks with Windows zero-day (CVE-2024-30051)

Secrecy Concerns Mount Over Spy Powers Targeting US Data Centers

Cybersec chiefs team up with insurers to say 'no' to ransomware bullies

Upcoming Speaking Engagements

VMware Patches Severe Security Flaws in Workstation and Fusion Products

Telegram CEO calls out rival Signal, claiming it has ties to US government

New Chrome Zero-Day Vulnerability CVE-2024-4761 Under Active Exploitation

Google, Apple gear to raise tracking tag stalker alarm

SUBNET PowerSYSTEM Center and Substation Server

Rockwell Automation FactoryTalk Remote Access

Mitsubishi Electric Multiple FA Engineering Software Products

Johnson Controls Software House C-CURE 9000

Critical Flaws in Cacti Framework Could Let Attackers Execute Malicious Code

Another Chrome Vulnerability

Incident response analyst report 2023

6 Mistakes Organizations Make When Deploying Advanced Authentication

Ebury is alive but unseen: 400k Linux servers compromised for cryptocurrency theft and financial gain

Ongoing Campaign Bombarded Enterprises with Spam Emails and Phone Calls

ESET APT Activity Report Q4 2023Q1 2024

Visualize your critical cyber risks

NHS Digital hints at exploit sightings of Arcserve UDP vulnerabilities

Apple and Google Launch Cross-Platform Feature to Detect Unwanted Bluetooth Tracking Devices

~ 13 May 2024 ~

'Cyberattack' shutters Christie's website days before $840M art mega-auction

Uncle Sam urges action after Black Basta ransomware infects Ascension

Internal Emails Show How a Controversial Gun-Detection AI System Found Its Way to NYC

Microsoft is again named a Leader in the 2024 Gartner Magic Quadrant for Security Information and Event Management

MITRE Unveils EMB3D: A Threat-Modeling Framework for Embedded Devices

The $2.3 Billion Tornado Cash Case Is a Pivotal Moment for Crypto Privacy

AI red-teaming tools helped X-Force break into a major tech manufacturer 'in 8 hours'

The 2024 Browser Security Report Uncovers How Every Web Session Could be a Security Minefield

Europol confirms incident following alleged auction of staff data

How Did Authorities Identify the Alleged Lockbit Boss?

LLMs Data-Control Path Insecurity

SHQ Response Platform and Risk Centre to Enable Management and Analysts Alike

Severe Vulnerabilities in Cinterion Cellular Modems Pose Risks to Various Industries

Black Basta Ransomware Strikes 500+ Entities Across North America, Europe, and Australia

Facing down the triple threat

Welcome to the Laser Wars

You want us to think of the children? Couldn't agree more

Malicious Python Package Hides Sliver C2 Framework in Fake Requests Library Logo

ASEAN organizations dealing with growing cyber menace

Encrypted mail service Proton hands suspect's personal info to cops again

A Visual Summary of SANS Cybersecurity Leadership Summit 2024

~ 12 May 2024 ~

Ransomware negotiator weighs in on the extortion payment debate with El Reg

NIS2: Transforming SOC Challenges Into Opportunities

~ 11 May 2024 ~

Critical infrastructure security will stay poor until everyone pulls together

Microsoft Deploys Generative AI for US Spies

FIN7 Hacker Group Leverages Malicious Google Ads to Deliver NetSupport RAT

~ 10 May 2024 ~

Friday Squid Blogging: Squid Mating Strategies

Iran most likely to launch destructive cyber-attack against US ex-Air Force intel analyst

How to talk about climate change and what motivates people to action: An interview with Katharine Hayhoe

Cybercriminals hit jackpot as 500k+ Ohio Lottery lovers lose out on their personal data

In it to win it! WeLiveSecurity shortlisted for European Security Blogger Awards

TunnelVision Attack Leaves Nearly All VPNs Vulnerable to Spying

New Attack Against Self-Driving Car AI

Microsoft's Brad Smith summoned by Homeland Security committee over 'cascade' of infosec failures

North Korean Hackers Deploy New Golang Malware 'Durian' Against Crypto Firms

GhostStripe attack haunts self-driving cars by making them ignore road signs

'Four horsemen of cyber' look back on 2008 DoD IT breach that led to US Cyber Command

CensysGPT: AI-Powered Threat Hunting for Cybersecurity Pros (Webinar)

It's a wrap! RSA Conference 2024 highlights Week in security with Tony Anscombe

Chrome Zero-Day Alert Update Your Browser to Patch New Vulnerability

What's the Right EDR for You?

Malicious Android Apps Pose as Google, Instagram, WhatsApp, Spread via Smishing

Researchers Uncover 'LLMjacking' Scheme Targeting Cloud-Hosted AI Models