Port 22

~ 20 Jan 2024 ~

US Agencies Urged to Patch Ivanti VPNs That Are Actively Being Hacked

Chinese Hackers Silently Weaponized VMware Zero-Day Flaw for 2 Years

CISA Issues Emergency Directive to Federal Agencies on Ivanti Zero-Day Exploits

Microsoft's Top Execs' Emails Breached in Sophisticated Russia-Linked APT Attack

Invoice Phishing Alert: TA866 Deploys WasabiSeed & Screenshotter Malware

Russians invade Microsoft exec mail while China jabs at VMware vCenter Server

~ 19 Jan 2024 ~

Friday Squid Blogging: New Foods from Squid Fins

Five ripped off IT giant with $7M+ in bogus work expenses, prosecutors claim

Zelle Is Using My Name and Voice without My Consent

Canadian Man Stuck in Triangle of E-Commerce Fraud

Why many CISOs consider quitting Week in security with Tony Anscombe

Thieves steal 35.5M customers data from Vans sneakers maker

Npm Trojan Bypasses UAC, Installs AnyDesk with "Oscompatible" Package

How to Opt Out of Comcasts Xfinity Storing Your Sensitive Data

Experts Warn of macOS Backdoor Hidden in Pirated Versions of Popular Software

Speaking to the CIAs Creative Writing Group

Preventing Data Loss: Backup and Recovery Strategies for Exchange Server Administrators

IT consultant fined for daring to expose shoddy security

U.S. Cybersecurity Agency Warns of Actively Exploited Ivanti EPMM Vulnerability

US agencies warn made-in-China drones might help Beijing snoop on the world

~ 18 Jan 2024 ~

JPMorgan exec claims bank repels 45 billion cyberattack attempts per day

Future of America's Cyber Safety Review Board hangs in balance amid calls for rethink

Job Opportunity: Communication Strategist

Ransomware attacks hospitalizing security pros, as one admits suicidal feelings

Microsoft at Legalweek: Secure data and gain efficiencies with Microsoft Purview eDiscovery enhanced by generative AI

New Docker Malware Steals CPU for Crypto & Drives Fake Website Traffic

Two more Citrix NetScaler bugs exploited in the wild

Russian COLDRIVER Hackers Expand Beyond Phishing with Custom Malware

Google TAG: Kremlin cyber spies move into malware with a custom backdoor

Stablecoins Enabled $40 Billion in Crypto Crime Since 2022

TensorFlow CI/CD Flaw Exposed Supply Chain to Poisoning Attacks

Canadian Citizen Gets Phone Back from Police

MFA Spamming and Fatigue: When Security Measures Go Wrong

AVEVA PI Server

Virtual kidnapping: How to see through this terrifying scam

Vast botnet hijacks smart TVs for prime-time cybercrime

Enter the era of platform-based cloud security

PixieFail UEFI Flaws Expose Millions of Computers to RCE, DoS, and Data Theft

Iranian Hackers Masquerade as Journalists to Spy on Israel-Hamas War Experts

Insurance website's buggy API leaked Office 365 password and a giant email trove

~ 17 Jan 2024 ~

Apple, AMD, Qualcomm GPU security hole lets miscreants snoop on AI training and chats

Call for applications: Information Controls Fellowship Program 2024

New Microsoft Incident Response guides help security teams analyze suspicious activity

E-Crime Rapper Punchmade Dev Debuts Card Shop

New TTPs observed in Mint Sandstorm campaign targeting high-profile individuals at universities and research orgs

What's worse than paying an extortion bot that auto-pwned your database?

PAX PoS Terminal Flaw Could Allow Attackers to Tamper with Transactions

Combating IP Leaks into AI Applications with Free Discovery and Risk Reduction Automation

Code Written with AI Assistants Is Less Secure

Windows Server 2022 patch is breaking apps for some users

Feds Warn of AndroxGh0st Botnet Targeting AWS, Azure, and Office 365 Credentials

How a 27-Year-Old Codebreaker Busted the Myth of Bitcoins Anonymity

Webinar: The Art of Privilege Escalation - How Hackers Become Admins

Is Temu safe? What to know before you shop like a billionaire

New iShutdown Method Exposes Hidden Spyware Like Pegasus on Your iPhone

Dark web threats and dark market predictions for 2024

Home improvement marketers dial up trouble from regulator

GitHub Rotates Keys After High-Severity Vulnerability Exposes Credentials

Combination of cheap .cloud domains and fake Shark Tank news fuel unhealthy wellness scams

Citrix, VMware, and Atlassian Hit with Critical Flaws Patch ASAP!

Nokia walks the walk about its RAN to play on Uncle Sams China fears

Zero-Day Alert: Update Chrome Now to Fix New Actively Exploited Vulnerability

FBI: Beware of thieves building Androxgh0st botnets using stolen creds

~ 16 Jan 2024 ~

Locking down the edge

Double trouble for VMware and Atlassian admins critical flaws to fix

More than 178,000 SonicWall firewalls are exposed to old denial of service bugs

Unified security operations with Microsoft Sentinel and Microsoft Defender XDR

A Flaw in Millions of Apple, AMD, and Qualcomm GPUs Could Expose AI Data

Ivanti zero-day exploits explode as bevy of attackers get in on the act

Alert: Over 178,000 SonicWall Firewalls Potentially Vulnerable to Exploits - Act Now

Remcos RAT Spreading Through Adult Games in New Attack Wave

The Story of the Mirai Botnet

The Sad Truth of the FTC's Location Data Privacy Settlement

SEW-EURODRIVE MOVITOOLS MotionStudio

Integration Objects OPC UA Server Toolkit

Case Study: The Cookie Privacy Monster in Big Global Retail

The 7 deadly cloud security sins and how SMBs can do things better

A lightweight method to detect potential iOS malware

Inferno Malware Masqueraded as Coinbase, Drained $87 Million from 137,000 Victims

Hackers Weaponize Windows Flaw to Deploy Crypto-Siphoning Phemedrone Stealer

Chinas gambling crackdown spawned wave of illegal online casinos and crypto-crime in Asia

Industrial Control Systems Cyber Threats & The Gulf Region: ICS Blog Series: 1 of 3

FOR528: Ransomware & Cyber Extortion Course Updates Implemented Whats New?

~ 15 Jan 2024 ~

Thousands of Juniper Networks devices vulnerable to critical RCE bug

Patch time: Critical GitLab vulnerability exposes 2FA-less users to account takeovers

FTC secures first databroker settlement banning sale of sensitive location data

Opera MyFlaw Bug Could Let Hackers Run ANY File on Your Mac or Windows

3 Ransomware Group Newcomers to Watch in 2024

Voice Cloning with Very Short Samples

Ransomware protection deconstructed

High-Severity Flaws Uncovered in Bosch Thermostats and Smart Nutrunners

Balada Injector Infects Over 7,100 WordPress Sites Using Plugin Vulnerability

DDoS Attacks on the Environmental Services Industry Surge by 61,839% in 2023

China loathes AirDrop so much it's publicized an old flaw in Apple's P2P protocol

Ransomware Cases Increased Greatly in 2023

~ 14 Jan 2024 ~

Upcoming Speaking Engagements

New Findings Challenge Attribution in Denmark's Energy Sector Cyberattacks

~ 13 Jan 2024 ~

A Bloody Pig Mask Is Just Part of a Wild New Criminal Charge Against eBay

Critical RCE Vulnerability Uncovered in Juniper SRX Firewalls and EX Switches

29-Year-Old Ukrainian Cryptojacking Kingpin Arrested for Exploiting Cloud Services