Port 22

~ 6 Jun 2024 ~

7-year-old Oracle WebLogic bug under active exploitation

The Lords of Silicon Valley Are Thrilled to Present a Handheld Iron Dome

Prevent Account Takeover with Better Password Security

Hackers Exploit Legitimate Packer Software to Spread Malware Undetected

The job hunters guide: Separating genuine offers from scams

Microsoft Research chief scientist has no issue with Windows Recall

Google Maps Timeline Data to be Stored Locally on Your Device for Privacy

How to Lead an Army of Digital Sleuths in the Age of AI

~ 5 Jun 2024 ~

TikTok confirms CNN, other high-profile accounts hijacked via zero-day vulnerability

Who are these RansomHub cyber-thieves? Looks like a Knight ransomware reboot

Emergency patches released for critical vulns impacting EOL Zyxel NAS boxes

4 cuffed following probe into holiday scheme for cybercrooks

Chinese State-Backed Cyber Espionage Targets Southeast Asian Government

Online Privacy and Overfishing

Unpacking 2024's SaaS Threat Predictions

Rebranded Knight Ransomware Targeting Healthcare and Businesses Worldwide

The Age of the Drone Police Is Here

An American Company Enabled a North Korean Scam That Raised Money for WMDs

Zyxel Releases Patches for Firmware Vulnerabilities in EoL NAS Models

Microsoft paid Tenable a bug bounty for an Azure flaw it says doesn't need a fix, just better documentation

Celebrity TikTok Accounts Compromised Using Zero-Click Attack via DMs

Essential Cybersecurity Practices for Protecting Industrial Infrastructure

~ 4 Jun 2024 ~

Command senior chief busted for secretly setting up Wi-Fi on US Navy combat ship

Pentagon 'doubling down' on Microsoft despite 'massive hack,' senators complain

TikTok Hack Targets High-Profile Users via DMs

AI jailbreaks: What they are and how they can be mitigated

The four stages of creating a trust fabric with identity and network security

London hospitals declare critical incident after service partner ransomware attack

Russian Power Companies, IT Firms, and Govt Agencies Hit by Decoy Dog Trojan

This Hacker Tool Extracts All the Data Collected by Windows New Recall AI

Telerik Report Server Flaw Could Let Attackers Create Rogue Admin Accounts

Christie's stolen data sold to highest bidder rather than leaked, RansomHub claims

Microsoft accused of tracking kids with education software

Cybercrooks get cozy with BoxedApp to dodge detection

Uniview NVR301-04S2-P4

The Next Generation of RBI (Remote Browser Isolation)

Breaking a Password Manager

Hackers Use MS Excel Macro to Launch Multi-Stage Malware Attack in Ukraine

AI Is Your Coworker Now. Can You Trust It?

Snowflake Warns: Targeted Credential Theft Campaign Hits Cloud Customers

Inside the Biggest FBI Sting Operation in History

Russians Love YouTube. Thats a Problem for the Kremlin

DarkGate Malware Replaces AutoIt with AutoHotkey in Latest Cyber Attacks

Oracle WebLogic Server OS Command Injection Flaw Under Active Attack

Hudson Rock yanks report fingering Snowflake employee creds snafu for mega-leak

CISOs Navigating the GenAI Tide: Actionable Insights from SANS Institute

~ 3 Jun 2024 ~

NIST turns to IT consultants to clear National Vulnerability Database backlog

Crooks threaten to leak 3B personal records 'stolen from background check firm'

Microsoft is named a leader in the Forrester Wave for XDR

Microsoft is again named the overall leader in the Forrester Wave for XDR

Russia takes gold for disinformation as Olympics approach

Researchers Uncover RAT-Dropping npm Package Targeting Gulp Users

Authorities Ramp Up Efforts to Capture the Mastermind Behind Emotet

Check Point warns customers to patch VPN vulnerability under active exploitation

Seeing Like a Data Structure

AI Will Increase the Quantityand Qualityof Phishing Scams

SASE Threat Report: 8 Key Findings for Enterprise Security

How Donald Trump Could Weaponize US Surveillance in a Second Term

Researcher Uncovers Flaws in Cox Modems, Potentially Impacting Millions

IT threat evolution in Q1 2024. Mobile statistics

IT threat evolution Q1 2024

IT threat evolution in Q1 2024. Non-mobile statistics

The murky world of password leaks and how to check if youve been hit

Derisking your CNI

Andariel Hackers Target South Korean Institutes with New Dora RAT Malware

Researchers crash Baidu robo-cars with tinfoil and paint daubed on cardboard

Beware: Fake Browser Updates Deliver BitRAT and Lumma Stealer Malware

The NIS2 Mandate: What Every Organization Needs to Know

~ 1 Jun 2024 ~

The Ticketmaster Data Breach May Be Just the Beginning

Mysterious Hack Destroyed 600,000 Internet Routers

AI Company Hugging Face Notifies Users of Suspected Unauthorized Access

~ 31 May 2024 ~

Twitch ditches Safety Advisory Council, relaunches with vetted 'ambassadors'

Snowflake denies miscreants melted its security to steal data from top customers

US senator claims UnitedHealth's CEO, board appointed 'unqualified' CISO

Friday Squid Blogging: Baby Colossal Squid

Cyber cops plead for info on elusive Emotet mastermind

Mysterious Cyber Attack Took Down 600,000+ Routers in the U.S.

New Nork-ish cyberespionage outfit uncovered after three years

What happens when facial recognition gets it wrong Week in security with Tony Anscombe

Microsoft Warns of Surge in Cyber Attacks Targeting Internet-Exposed OT Devices

Google to push ahead with Chrome's ad-blocker extension overhaul in earnest

How AI Will Change Democracy

Beyond Threat Detection A Race to Digital Security

Russian Hackers Target Europe with HeadLace Malware and Credential Harvesting

OpenAI, Meta, TikTok Disrupt Multiple AI-Powered Disinformation Campaigns

FlyingYeti phishing crew grounded after abominable Ukraine attacks

Mystery attacker remotely bricked 600,000 SOHO routers with malicious firmware update

~ 30 May 2024 ~

OpenAI is very smug after thwarting five ineffective AI covert influence ops

US Treasury says NFTs 'highly susceptible' to fraud, but ignored by high-tier criminals

Ecuador Is Literally Powerless in the Face of Drought

Euro cops disrupt malware droppers, seize thousands of domains

CISA Alerts Federal Agencies to Patch Actively Exploited Linux Kernel Flaw

Exposed and vulnerable: Recent attacks highlight critical need to protect internet-exposed OT devices

FlyingYeti Exploits WinRAR Vulnerability to Deliver COOKBOX Malware in Ukraine

Cyber Espionage Alert: LilacSquid Targets IT, Energy, and Pharma Sectors

Operation Endgame Hits Malware Delivery Platforms

RedTail Crypto-Mining Malware Exploiting Palo Alto Networks Firewall Vulnerability

Cybercriminals raid BBC pension database, steal records of over 25,000 people

Researchers Uncover Active Exploitation of WordPress Plugin Vulnerabilities

IT worker sued over vengeful cyber harassment of policeman who issued a jaywalking ticket