Port 22

~ 10 Oct 2023 ~

Patch Tuesday, October 2023 Edition

Securely Moving Financial Services to the Cloud

Microsoft Patch Tuesday Haunted by Zero-Days, Wormable Bug

SBF on trial: The FTX Python code that allegedly let his Alameda hedge fund spend people's deposits

HTTP/2 'Rapid Reset' zero-day exploited in biggest DDoS deluge seen yet

Badbox Operation Targets Android Devices in Fraud Schemes

New One-Click Exploit Is a Supply Chain Risk for Linux OSes

Internet-Wide Zero-Day Bug Fuels Largest-Ever DDoS Event

Hackers For Hire Hit Both Sides in Israel-Hamas Conflict

Mirai reloads exploit arsenal as botnet embarks on another expansion drive

How Keyloggers Have Evolved From the Cold War to Today

Researcher bags two-for-one deal on Linux bugs while probing GNOME component

North Korea's State-Sponsored APTs Organize & Align

HTTP/2 Rapid Reset Zero-Day Vulnerability Exploited to Launch Record DDoS Attacks

Elon Musk Is Personally Undermining Xs Efforts to Curb Israel-Hamas War Disinformation

Fresh curl tomorrow will patch 'worst' security flaw in ages

Old-School Attacks Are Still a Danger, Despite Newer Techniques

Google Makes Passkeys Default, Stepping Up Its Push to Kill Passwords

Google Adopts Passkeys as Default Sign-in Method for All Users

Model Extraction Attack on Neural Networks

New Report: Child Sexual Abuse Content and Online Risks to Children on the Rise

Researchers Uncover Grayling APT's Ongoing Attack Campaign Across Industries

Virus Bulletin PUA a love letter

New Magecart Campaign Alters 404 Error Pages to Steal Shoppers' Credit Cards

Ransomware attacks register record speeds thanks to success of infosec industry

libcue Library Flaw Opens GNOME Linux Systems Vulnerable to RCE Attacks

Citrix Devices Under Attack: NetScaler Flaw Exploited to Capture User Credentials

Exercise Cyber Star tests Singapore response

Rethinking Compliance: The Underutilized Power of CSP Native Security Services

Living Off the Land Attacks and Countermeasures in Industrial Control Systems

~ 9 Oct 2023 ~

The Israel-Hamas War Erupts in Digital Chaos

Hacktivists Enter Fray Following Hamas Strikes Against Israel

Phishers Spoof USPS, 12 Other Natl Postal Services

'Looney Tunables' Linux Flaw Sees Snowballing Proof-of-Concept Exploits

Operation Behind Predator Mobile Spyware Is 'Industrial Scale'

Patch Now: Massive RCE Campaign Wrangles Routers Into Botnet

"I Had a Dream" and Generative AI Jailbreaks

PEACHPIT: Massive Ad Fraud Botnet Powered by Millions of Hacked Android and iOS

Expanded Microsoft Security Experts offerings provide comprehensive protection

The Israel-Hamas War Is Drowning X in Disinformation

DoJ: Ex-soldier tried to pass secrets to China after seeking a 'subreddit about spy stuff'

Cybersecurity Talent in America: Bridging the Gap

Independently Confirming Amnesty Security Labs finding of Predator targeting of U.S. & other elected officials on Twitter/X

Hacktivist attacks erupt in Middle East following Hamas assault on Israel

Cybercriminals Using EvilProxy Phishing Kit to Target Senior Executives in U.S. Firms

Webinar: How vCISOs Can Navigating the Complex World of AI and LLM Security

Datacenter cabling biz Volex confirms digital break-in

AI Risks

High-Severity Flaws in ConnectedIO's 3G/4G Routers Raise Concerns for IoT Security

Security Patch for Two New Flaws in Curl Library Arriving on October 11

Inside FTXs All-Night Race to Stop a $1 Billion Crypto Heist

Your family, home and small business need a cyber-resilience strategy, too!

The Need for Speed: When Cloud Attacks Take Only 10 Minutes

Gaza-Linked Cyber Threat Actor Targets Israeli Energy and Defense Sectors

Chinese smart TV boxes infected with malware in PEACHPIT ad fraud campaign

~ 8 Oct 2023 ~

Israel's Failure to Stop the Hamas Attack Shows the Danger of Too Much Surveillance

~ 7 Oct 2023 ~

Apple's Encryption Is Under Attack by a Mysterious Group

White Supremacist Active Clubs Are Breeding on Telegram

~ 6 Oct 2023 ~

23andMe User Data Stolen in Targeted Attack on Ashkenazi Jews

Too Rich To Ransomware? MGM Brushes Off $100M in Losses

WatchGuard Threat Lab Report Finds Endpoint Malware Volumes Decreasing Despite Campaigns Growing More Expansive

RIT Is the First University to Receive Support From the Google Cybersecurity Clinics Fund

Predictive Analysis Can Reduce Risks Associated With Data Breaches

SecTor 2023: Full Schedule Programming for Toronto Event

Cybersecurity Funding Rises by 21% in Q3 2023, Pinpoint Search Group's Report Indicates

CISA reveals 'Admin123' as top security threat in cyber sloppiness chart

23andMe Cyberbreach Exposes DNA Data, Potential Family Ties

Suspected Crime Gang Hacks Israeli President's Telegram Account

MGM Resorts attackers hit personal data jackpot, but house lost $100M

Google, Yahoo Push DMARC, Forcing Companies to Catch Up

North Korea's Lazarus Group Launders $900 Million in Cryptocurrency

Preparing for the Unexpected: A Proactive Approach to Operational Resilience

CDW data to be leaked next week after negotiations with LockBit break down

How to stop ransomware thieves WORMing their way into your data

DinodasRAT used against governmental entity in Guayana Week in security with Tony Anscombe

Google promises Germany to creep on users less after market power probe

Chinese Hackers Target Semiconductor Firms in East Asia with Cobalt Strike

New OS Tool Tells You Who Has Access to What Data

Fake friends and followers on social media and how to spot them

GitHub's Secret Scanning Feature Now Covers AWS, Microsoft, Google, and Slack

Deepfake Election Interference in Slovokia

Deepfake Election Interference in Slovakia

Supermicro's BMC Firmware Found Vulnerable to Multiple Critical Vulnerabilities

GoldDigger Android trojan targets Vietnamese banking apps, code contains hints of wider targets

~ 5 Oct 2023 ~

'Operation Jacana' Reveals DinodasRAT Custom Backdoor

Quash EDR/XDR Exploits With These Countermeasures

Legions of Critical Infrastructure Devices Subject to Cyber Targeting

10 Routine Security Gaffes the Feds Are Begging You to Fix

Madagascar Drops Predator Spyware on Citizens in Watering Hole Attack

Cisco warns of critical flaw in Emergency Responder code

Stealthy, Thieving Python Packages Slither Onto Windows Systems

Group-IB: 'GoldDigger' Banking Trojan Targets Vietnamese Organizations

Critical 'ShellTorch' Flaws Light Up Open Source AI Users, Like Google

Unkillable? Qakbot Infections Fly On Even After Its High-Profile Raid

Another security update, Apple? You're really keeping up with your tech rivals

Critical Zero-Day Bug in Atlassian Confluence Under Active Exploit

Could Cybersecurity Breaches Become Harmless in the Future?

QakBot Threat Actors Still in Action, Using Ransom Knight and Remcos RAT in Latest Attacks

BYOD should stand for bring your own disaster, according to Microsoft ransomware data

Cisco Releases Urgent Patch to Fix Critical Flaw in Emergency Responder Systems