Port 22

~ 29 Jan 2024 ~

NSA Admits Secretly Buying Your Internet Browsing Data without Warrants

Malicious PyPI Packages Slip WhiteSnake InfoStealer Malware onto Windows Machines

Tesla hacks make big bank at Pwn2Own's first automotive-focused event

A Visual Summary of SANS CTI Summit 2024

~ 28 Jan 2024 ~

750 million Indian mobile subscribers' info for sale on dark web

~ 27 Jan 2024 ~

23andMe Failed to Detect Account Intrusions for Months

AllaKore RAT Malware Targeting Mexican Firms with Financial Fraud Tricks

Microsoft sheds some light on Russian email heist and how to learn from Redmond's mistakes

~ 26 Jan 2024 ~

Friday Squid Blogging: Footage of Black-Eyed Squid Brooding Her Eggs

Wait, security courses aren't a requirement to graduate with a computer science degree?

Police Arrest Teen Said to Be Linked to Hundreds of Swatting Attacks

The Pentagon Tried to Hide That It Bought Americans' Data Without a Warrant

Who is Alleged Medibank Hacker Aleksandr Ermakov?

Guess the company: Takes your DNA, blames you when criminals steal it, cant spot a cyberattack for 5 months

Blackwood hijacks software updates to deploy NSPX30 Week in security with Tony Anscombe

Akira ransomware gang says it stole passport scans from Lush in 110 GB data heist

Chatbots and Human Conversation

Perfecting the Defense-in-Depth Strategy with Automation

Malicious Ads on Google Target Chinese Users with Fake Messaging Apps

Microsoft Warns of Widening APT29 Espionage Attacks Targeting Global Orgs

Russian TrickBot Mastermind Gets 5-Year Prison Sentence for Cybercrime Spree

Critical Cisco Flaw Lets Hackers Remotely Take Over Unified Comms Systems

Midnight Blizzard: Guidance for responders on nation-state attack

~ 25 Jan 2024 ~

Trickbot malware scumbag gets five years for infecting hospitals, businesses

Big-Name Targets Push Midnight Blizzard Hacking Spree Back Into the Limelight

Using Google Search to Find Software Can Be Risky

China-backed Hackers Hijack Software Updates to Implant "NSPX30" Spyware

SystemBC Malware's C2 Server Analysis Exposes Payload Delivery Tricks

EquiLend drags systems offline after admitting attacker broke in

Quantum Computing Skeptics

SystemK NVR 504/508/516

Opteev MachineSense FeverWarn

How a Group of Israel-Linked Hackers Has Pushed the Limits of Cyberwar

Critical Jenkins Vulnerability Exposes Servers to RCE Attacks - Patch ASAP!

LODEINFO Fileless Malware Evolves with Anti-Analysis and Remote Code Tricks

Cyber Threat Landscape: 7 Key Findings and Upcoming Trends for 2024

Assessing and mitigating supply chain cybersecurity risks

Privacy predictions for 2024

New CherryLoader Malware Mimics CherryTree to Deploy PrivEsc Exploits

Tech Giant HP Enterprise Hacked by Russian Hackers Linked to DNC Breach

HPE joins the 'our executive email was hacked by Russia' club

Three Common Threats to Your Organizations Data to be Aware of on Data Protection Day

~ 24 Jan 2024 ~

Ring Will Stop Giving Cops a Free Pass on Warrantless Video Requests

US judge rejects spyware developer NSO's attempt to bin Apple's spyware lawsuit

Major IT outage at Europe's largest caravan and RV club makes for not-so-happy campers

How Datawiza uses Microsoft Entra ID to help universities simplify access

Using GoAnywhere MFT for file transfers? Patch now an exploit's out for a critical bug

NSPX30: A sophisticated AitM-enabled implant evolving since 2005

NSPX30: A sophisticated AitM-enabled implant evolving since 2005

Google Kubernetes Misconfig Lets Any Gmail Account Control Your Clusters

Poisoning AI Models

Notorious Spyware Maker NSO Group Is Quietly Plotting a Comeback

What is Nudge Security and How Does it Work?

Kasseika Ransomware Using BYOVD Trick to Disarms Security Pre-Encryption

What Microsoft's latest email breach says about this IT security heavyweight

The Unknown Risks of The Software Supply Chain: A Deep-Dive

U.S., U.K., Australia Sanction Russian REvil Hacker Behind Medibank Breach

COVID-19 test lab accused of exposing 1.3 million patient records to open internet

GCHQ's NCSC warns of 'realistic possibility' AI will help state-backed malware evade detection

Patch Your GoAnywhere MFT Immediately - Critical Flaw Lets Anyone Be Admin

~ 23 Jan 2024 ~

HP CEO Says They Brick Printers That Use Third-Party Ink Because of Hackers

CISA boss swatted: 'While my own experience was certainly harrowing, it was unfortunately not unique'

"Activator" Alert: MacOS Malware Hides in Cracked Apps, Targeting Crypto Wallets

Accused PII seller faces jail for running underground fraud op

VexTrio: The Uber of Cybercrime - Brokering Malware for 60+ Affiliates

Malicious NPM Packages Exfiltrate Hundreds of Developer SSH Keys via GitHub

Side Channels Are Common

Westermo Lynx 206-F2G

Voltronic Power ViewPower Pro

Lantronix XPort

Crestron AM-300

APsystems Energy Communication Unit (ECU-C) Power Control Software

UK water giant admits attackers broke into system as gang holds it to ransom

From Megabits to Terabits: Gcore Radar Warns of a New Era of DDoS Attacks

Break the fake: The race is on to stop AI voice cloning scams

BreachForums Founder Sentenced to 20 Years of Supervised Release, No Jail Time

~40,000 Attacks in 3 Days: Critical Confluence RCE Under Active Exploitation

Australia imposes cyber sanctions on Russian it says ransomwared health insurer

Apple Issues Patch for Critical Zero-Day in iPhones, Macs - Update Now

~ 22 Jan 2024 ~

Atlassian Confluence Server RCE attacks underway from 600+ IPs

Slug slimes aerospace biz AerCap with ransomware, brags about 1TB theft

Apple iOS 17.3: How to Turn on iPhone's New Stolen Device Protection

North Korean Hackers Weaponize Fake Research to Deliver RokRAT Backdoor

MavenGate Attack Could Let Hackers Hijack Java and Android via Abandoned Libraries

EFF adds Street Surveillance Hub so Americans can check who's checking on them

Ivanti and Juniper Networks accused of bending the rules with CVE assignments

Subway's data torpedoed by LockBit, ransomware gang claims

AI Bots on X (Twitter)

Cops Used DNA to Predict a Suspects Faceand Tried to Run Facial Recognition on It

NS-STEALER Uses Discord Bots to Exfiltrate Your Secrets from Popular Browsers

52% of Serious Vulnerabilities We Find are Related to Windows 10

ICO fines spam slinging financial services biz

Safeguarding against the global ransomware threat

Cracked software beats gold: new macOS backdoor stealing cryptowallets

FTC Bans InMarket for Selling Precise User Location Without Consent

Apache ActiveMQ Flaw Exploited in New Godzilla Web Shell Attacks

BreachForums admin 'Pompourin' sentenced to 20 years of supervised release

SANS 2023 Multicloud Survey: Navigating the Complexities of Multiple Clouds

~ 20 Jan 2024 ~

Fujitsu Bugs That Sent Innocent People to Prison Were Known From the Start

Fujitsu Bugs That Sent Innocent People to Prison Were Known From the Start