Port 22

~ 22 Mar 2024 ~

Massive Sign1 Campaign Infects 39,000+ WordPress Sites with Scam Redirects

Implementing Zero Trust Controls for Compliance

Google Pays $10M in Bug Bounties in 2023

U.S. Justice Department Sues Apple Over Monopoly and Messaging Security

Russian Hackers Target Ukrainian Telecoms with Upgraded 'AcidPour' Malware

Truck-to-truck worm could infect and disrupt entire US commercial fleet

~ 21 Mar 2024 ~

FBI v the bots: Feds urge denial-of-service defense after critical infrastructure alert

Apple's iMessage Encryption Puts Its Security Practices in the DOJ's Crosshairs

Microsoft faces bipartisan criticism for alleged censorship on Bing in China

Congress votes unanimously to ban brokers selling American data to enemies

Russia Hackers Using TinyTurla-NG to Breach European NGO's Systems

How Microsoft Incident Response and Microsoft Defender for Identity work together to detect and respond to cyberthreats

Yacht dealer to the stars attacked by Rhysida ransomware gang

Over 800 npm Packages Found with Discrepancies, 18 Exploitable to 'Manifest Confusion'

Hackers Found a Way to Open Any of 3 Million Hotel Keycard Locks in Seconds

AndroxGh0st Malware Targets Laravel Apps to Steal Cloud Credentials

Advantech WebAccess/SCADA

UK council won't say whether two-week 'cyber incident' impacted resident data

How to Accelerate Vendor Risk Assessments in the Age of SaaS Sprawl

Public AI as an Alternative to Corporate AI

GitHub Launches AI-Powered Autofix Tool to Assist Devs in Patching Security Flaws

Making Sense of Operational Technology Attacks: The Past, Present, and Future

U.S. Sanctions Russians Behind 'Doppelganger' Cyber Influence Campaign

Exposed: Chinese smartphone farms that run thousands of barebones mobes to do crime

It's 2024 and North Korea's Kimsuky gang is exploiting Windows Help files

Ivanti Releases Urgent Fix for Critical Sentry RCE Vulnerability

Atlassian Releases Fixes for Over 2 Dozen Flaws, Including Critical Bamboo Bug

The Not-so-True People-Search Network from China

~ 20 Mar 2024 ~

It's tax season, and scammers are a step ahead of filers, Microsoft says

US task force aims to plug security leaks in water sector

Some of the Most Popular Websites Share Your Data With Over 1,500 Companies

London Clinic probes claim staffer tried to peek at Princess Kate's records

New 'Loop DoS' Attack Impacts Hundreds of Thousands of Systems

Serial extortionist of medical facilities pleads guilty to cybercrime charges

Stalkerware usage surging, despite data privacy concerns

Microsoft Threat Intelligence unveils targets and innovative tactics amidst tax season

Generative AI Security - Secure Your Business in a World Powered by LLMs

TeamCity Flaw Leads to Surge in Ransomware, Cryptomining, and RAT Attacks

Cheating Automatic Toll Booths by Obscuring License Plates

Android malware, Android malware and more Android malware

Rescoms rides waves of AceCryptor spam

Five Eyes tell critical infra orgs: take these actions now to protect against China's Volt Typhoon

New BunnyLoader Malware Variant Surfaces with Modular Attack Features

Glassdoor Wants to Know Your Real Name

Ukraine Arrests Trio for Hijacking Over 100 Million Email and Instagram Accounts

U.S. EPA Forms Task Force to Protect Water Systems from Cyberattacks

Australian techie jailed for accessing museum's accounting system and buying himself stuff

~ 19 Mar 2024 ~

Beijing-backed cyberspies attacked 70+ orgs across 23 countries

Crypto scams more costly to the US than ransomware, feds say

Citizen Lab submission to Office of the Privacy Commissioner of Canada on draft guidance for processing biometrics

APIs Drive the Majority of Internet Traffic and Cybercriminals are Taking Advantage

Microsoft Sentinel delivered 234% ROI, according to new Forrester study

Crypto wallet providers urged to rethink security as criminals drain them of millions

From Deepfakes to Malware: AI's Expanding Role in Cyber Attacks

Atos says Airbus flew off, no longer interested in infosec and big data biz

Franklin Fueling System EVO 550/5000

AI and the Evolution of Social Media

Crafting and Communicating Your Cybersecurity Strategy for Board Buy-In

Hackers Exploiting Popular Document Publishing Sites for Phishing Attacks

A prescription for privacy protection: Exercise caution when using a mobile health app

Threat landscape for industrial automation systems. H2 2023

Suspected Russian Data-Wiping 'AcidPour' Malware Targeting Linux x86 Devices

New Phishing Attack Uses Clever Microsoft Office Trick to Deploy NetSupport RAT

E-Root Marketplace Admin Sentenced to 42 Months for Selling 350K Stolen Credentials

~ 18 Mar 2024 ~

Don't be like these 900+ websites and expose millions of passwords via Firebase

Fujitsu reveals malware installed on internal systems, risk of customer data spill

More than 133,000 Fortinet appliances still vulnerable to month-old critical bug

New DEEP#GOSU Malware Campaign Targets Windows Users with Advanced Tactics

Microsoft Copilot for Security: General Availability details

Cyber baddies leak 70M+ files online, claim they're from AT&T

Cyberattack gifts esports pros with cheats, forcing Apex Legends to postpone tournament

Fortra Patches Critical RCE Vulnerability in FileCatalyst Transfer Tool

Hackers Using Sneaky HTML Smuggling to Deliver Malware via Fake Google Sites

Drones and the US Air Force

WordPress Admins Urged to Remove miniOrange Plugins Due to Critical Flaw

Infosec teams must be allowed to fail, argues Gartner

APT28 Hacker Group Targeting Europe, Americas, Asia in Widespread Phishing Scheme

Filipino police free hundreds of slaves toiling in romance scam operation

Protecting distributed branch office environments from ransomware

ChatGPT side-channel attack has easy fix: token obfuscation

~ 17 Mar 2024 ~

In the rush to build AI apps, please, please don't leave security behind

~ 16 Mar 2024 ~

Automakers Are Telling Your Insurance Company How You Really Drive

Hackers Using Cracked Software on GitHub to Spread RisePro Info Stealer

~ 15 Mar 2024 ~

Friday Squid Blogging: Operation Squid

As if working at Helldesk weren't bad enough, IT helpers now targeted by cybercrims

GhostRace New Data Leak Vulnerability Affects Modern CPUs

Sinking Section 702 Wiretap Program Offered One Last Lifeboat

Cop shop rapped for 'completely avoidable' web form blunder

Third-Party ChatGPT Plugins Could Lead to Account Takeovers

Healthcare still a prime target for cybercrime gangs Week in security with Tony Anscombe

Improving C++

Google Introduces Enhanced Real-Time URL Protection for Chrome Users

Malicious Ads Targeting Chinese Users with Fake Notepad++ and VNote Installers

~ 14 Mar 2024 ~

Forget TikTok Chinese spies want to steal IP by backdooring digital locks

CEO of Data Privacy Company Onerep.com Founded Dozens of People-Search Firms

FTC goes undercover to probe suspected antivirus scam, scores $26M settlement

LockBit ransomware kingpin gets 4 years behind bars

Google gooses Safe Browsing with real-time protection that doesn't leak to ad giant

Record breach of French government exposes up to 43 million people's data

Microsoft named as a Leader in three IDC MarketScapes for Modern Endpoint Security 2024