Port 22

~ 30 May 2024 ~

Westermo EDW-100

LenelS2 NetBox

Inosoft VisiWin

Fuji Electric Monitouch V-SFT

By Whose Authority? Pegasus targeting of Russian & Belarusian-speaking opposition activists and independent media in Europe

How to Build Your Autonomous SOC Strategy

IBM spin-off Kyndryl accused of discriminating on basis of age, race, disability

Supply Chain Attack against Courtroom Software

Europol Shuts Down 100+ Servers Linked to IcedID, TrickBot, and Other Malware

Pretty much all of the headaches affecting MSPs are due to cybersecurity

The Unusual Espionage Act Case Against a Drone Photographer

AI in HR: Is artificial intelligence changing how we hire employees forever?

U.S. Dismantles World's Largest 911 S5 Botnet, with 19 Million Infected Devices

Okta Warns of Credential Stuffing Attacks Targeting Customer Identity Cloud

Indian stock exchange finally encrypting all messages to traders

~ 29 May 2024 ~

Chinese national cuffed on charges of running 'likely the world's largest botnet ever'

Miscreants claim they've snatched 560M people's info from Ticketmaster

Largest Botnet Ever Tied to Billions in Stolen Covid-19 Relief Funds

Multi-day DDoS storm batters Internet Archive

Is Your Computer Part of The Largest Botnet Ever?

Cybercriminals Abuse StackOverflow to Promote Malicious Python Package

6 insights from Microsofts 2024 state of multicloud risk report to evolve your security strategy

Check Point Warns of Zero-Day Attacks on its VPN Gateway Products

Brazilian Banks Targeted by New AllaKore RAT Variant Called AllaSenha

North Korea building cash reserves using ransomware, video games

U.S. Sentences 31-Year-Old to 10 Years for Laundering $4.5M in Email Scams

New Research Warns About Weak Offboarding Management and Insider Risks

Privacy Implications of Tracking Wireless Access Points

Microsoft Uncovers 'Moonstone Sleet' New North Korean Hacker Group

ESET World 2024: Big on prevention, even bigger on AI

BreachForums Returns Just Weeks After FBI Seizure - Honeypot or Blunder?

What is Your Definition of Insider Threat?

How to Strengthen Your Cybersecurity Posture with the Updated SEC401 Labs

A Visual Summary of SANS Ransomware Summit 2024

Unraveling the Mysteries of Digital Forensics: A Blog on the "Secret Life of Devices" Workshop Series

~ 28 May 2024 ~

2.8M US folks learn their personal info was swiped months ago in Sav-Rx IT heist

Treasury Sanctions Creators of 911 S5 Proxy Botnet

BreachForums returns, just weeks after FBI-led takedown

SpiderOak One customers threaten to jump ship following datacenter upgrade

Moonstone Sleet emerges as new North Korean threat actor with new bag of tricks

Auction house Christies confirms criminals stole some client data

Indian National Pleads Guilty to $37 Million Cryptocurrency Theft Scheme

Campbell Scientific CSI Web Server

How Researchers Cracked an 11-Year-Old Password to a $3 Million Crypto Wallet

4-Step Approach to Mapping and Securing Your Organization's Most Critical Assets

Lattice-Based Cryptosystems and Quantum Cryptanalysis

Researchers Warn of CatDDoS Botnet and DNSBomb DDoS Attack Technique

Trusted relationship attacks: trust, but verify

Cops Are Just Trolling Cybercriminals Now

Beyond the buzz: Understanding AI and its role in cybersecurity

Take two APIs and call me in the morning: How healthcare research can cure cyber crime

WordPress Plugin Exploited to Steal Credit Card Data from E-commerce Sites

TP-Link Gaming Router Vulnerability Exposes Users to Remote Code Attacks

ICS/OT Cybersecurity & AI: Considerations for Now and the Future (Part I)

Boosting Cyber Resilience with Effective Staffing Strategies

~ 27 May 2024 ~

How's Uncle Sam getting on with Biden's AI exec order? Pretty good, we're told

Message board scams

Moroccan Cybercrime Group Steals Up to $100K Daily Through Gift Card Fraud

Report: The Dark Side of Phishing Protection

Threat landscape for industrial automation systems, Q1 2024

New Tricks in the Phishing Playbook: Cloudflare Workers, HTML Smuggling, GenAI

Pakistan-linked Hackers Deploy Python, Golang, and Rust Malware on Indian Targets

Bayer and 12 other major drug companies caught up in Cencora data loss

NIS2 Unveiled: Three Critical Changes Impacting Your Cybersecurity Strategy

~ 25 May 2024 ~

Microsofts New Recall AI Tool May Be a Privacy Nightmare

Experts Find Flaw in Replicate AI Service Exposing Customers' Models and Data

~ 24 May 2024 ~

Man behind deepfake Biden robocall indicted on felony charges, faces $6M fine

Best Buy and Geek Squad were most impersonated orgs by scammers in 2023

Friday Squid Blogging: Dana Squid Attacking Camera

Suspected supply chain attack backdoors courtroom recording software

Hackers Created Rogue VMs to Evade Detection in Recent MITRE Cyber Attack

Mandatory reporting for ransomware attacks? Week in security with Tony Anscombe

Fake Antivirus Websites Deliver Malware to Android and Windows Devices

How Do Hackers Blend In So Well? Learn Their Tricks in This Expert Webinar

On the Zero-Day Market

DevOps Dilemma: How Can CISOs Regain Control in the Age of Speed?

Google Detects 4th Chrome Zero-Day in May Actively Under Attack - Update ASAP

Courtroom Software Backdoored to Deliver RustDoor Malware in Supply Chain Attack

Japanese Experts Warn of BLOODALCHEMY Malware Targeting Government Agencies

The Evolution of Enterprise Threat Hunting: Detailed Insights from the SANS 2024 Survey

2024 Recap of Windows Patch Tuesdays: Enhancements in Security and New Challenges

Three-year-old Apache Flink flaw under active attack

~ 23 May 2024 ~

Stark Industries Solutions: An Iron Hammer in the Cloud

Here's yet more ransomware using BitLocker against Microsoft's own users

Casino cyberattacks put a bullseye on Scattered Spider and the FBI is closing in

Google guru roasts useless phishing tests, calls for fire drill-style overhaul

He Trained Crypto Cops to Fight Crypto Crimeand Allegedly Ran a $100M Dark Web Drug Market

Ransomware Attacks Exploit VMware ESXi Vulnerabilities in Alarming Pattern

CISA Warns of Actively Exploited Apache Flink Security Vulnerability

A Leak of Biometric Police Data Is a Sign of Things to Come

Veeam says critical flaw can't be abused to trash backups

New Frontiers, Old Tactics: Chinese Espionage Group Targets Africa & Caribbean Govts

70% of CISOs worry their org is at risk of a material cyber attack

Cyber Signals: Inside the growing risk of gift card fraud

ShrinkLocker: Turning BitLocker into ransomware

AutomationDirect Productivity PLCs

Inside Operation Diplomatic Specter: Chinese APT Group's Stealthy Tactics Exposed

Are Your SaaS Backups as Secure as Your Production Data?

Personal AI Assistants and Privacy

Introducing Nimfilt: A reverse-engineering tool for Nim-compiled binaries