Port 22

~ 5 Oct 2023 ~

Analysis and Config Extraction of Lu0Bot, a Node.js Malware with Considerable Capabilities

Guyana Governmental Entity Hit by DinodasRAT in Cyber Espionage Attack

Lorenz ransomware crew bungles blackmail blueprint by leaking two years of contacts

GoldDigger Android Trojan Targets Banking Apps in Asia Pacific Countries

Operation Jacana: Foundling hobbits in Guyana

CISA Warns of Active Exploitation of JetBrains and Windows Vulnerabilities

North Korea goes phishing in Souths shipyards

Apple Rolls Out Security Patches for Actively Exploited iOS Zero-Day Flaw

Atlassian Confluence Hit by Newly Actively Exploited Zero-Day Patch Now

Insurance Companies Have a Lot to Lose in Cyberattacks

~ 4 Oct 2023 ~

Nokia Selected by Brazil's K2 Telecom As Partner to Strengthen its Security and Create Revenue Streams

IT networks under attack via critical Confluence zero-day. Patch now

Trend Micro Drives Latest Phase of Channel Prosperity and Engagement

New Malwarebytes Survey: Consumers Lack Trust in New Tech

ForAllSecure Announces First Dynamic Software Bill of Materials for Application Security

Make-me-root 'Looney Tunables' security hole on Linux needs your attention

Okta Launches Cybersecurity Workforce Development Initiative to Help Close the Tech and Cybersecurity Skills Gap

Mitiga Secures Strategic Investment From Cisco

37% Intimidated, 39% Frustrated With Online Security Highlighting Digital Anxiety

BeyondID Introduces Identity-First Model for Zero-Trust Maturity

'Gay furry hackers' brag of second NATO break-in, steal and leak more data

Bing Chat LLM Tricked into Circumventing CAPTCHA Filter

AWS Plans Multifactor Authentication Mandates for 2024

Red Cross lays down hacktivism law as Ukraine war rages on

On the Dark Web, Prices Are Down for Middle Eastern Network Access

CISA barred from coordinating with social media sites to police misinformation

'Looney Tunables' Bug Opens Millions of Linux Systems to Root Takeover

Breaches Are the Cost of Doing Business, but NIST Is Here to Help

Turnkey Rootkit for Amateur Hackers Makes Supply Chain Attacks Easy

Researchers Link DragonEgg Android Spyware to LightSpy iOS Surveillanceware

How to Measure Patching and Remediation Performance

Patch Confusion for Critical Exim Bug Puts Email Servers at Risk--Again

Wing Disrupts the Market by Introducing Affordable SaaS Security

Rogue npm Package Deploys Open-Source Rootkit in New Supply Chain Attack

Malicious Ads in Bing Chat

The Team Helping Women Fight Digital Domestic Abuse

Microsoft Warns of Cyber Attacks Attempting to Breach Cloud via SQL Server Instance

Your Cheap Android TV Streaming Box May Have a Dangerous Backdoor

How Neuralink Keeps Dead Monkey Photos Secret

Looney Tunables: New Linux Flaw Enables Privilege Escalation on Major Distributions

Trio of TorchServe flaws means PyTorch users need an urgent upgrade

SEC670 Prep Quiz Answers

SEC670 Prep Quiz

~ 3 Oct 2023 ~

US v Sam Bankman-Fried trial begins ... as imploded crypto-biz boss sues his insurer

Russian Hacktivism Takes a Toll on Organizations in Ukraine, EU, US

Gartner Forecasts Global Security and Risk Management Spending to Grow 14% in 2024

Attacks on Maximum Severity WS_FTP Bug Have Been Limited So Far

USPS Anchors Snowballing Smishing Campaigns

Name That Edge Toon: Office Artifacts

Mercenary spyware: Defending against whats next iMEdD International Journalism Forum 2023

Qualcomm Releases Patch for 3 new Zero-Days Under Active Exploitation

Defending new vectors: Threat actors attempt SQL Server to cloud lateral movement

Fast-Growing Dropbox Campaign Steals Microsoft SharePoint Credentials

Warning: PyTorch Models Vulnerable to Remote Code Execution via ShellTorch

Over 3 Dozen Data-Stealing Malicious npm Packages Found Targeting Developers

Ransomware Crisis, Recession Fears Leave CISOs in Tough Spot

CISA adds latest Chrome zero-day to Known Exploited Vulnerabilities Catalog

API Security Trends 2023 Have Organizations Improved their Security Posture?

Protecting your IT infrastructure with Security Configuration Assessment (SCA)

Hacking Gas Pumps via Bluetooth

Playing your part in building a safer digital world: Why cybersecurity matters

Researcher Reveals New Techniques to Bypass Cloudflare's Firewall and DDoS Protection

Arm Issues Patch for Mali GPU Kernel Driver Vulnerability Amidst Ongoing Exploitation

Nexusflow Launches to Help Automate the SOC

Co-founder of collapsed crypto biz Three Arrows cuffed at airport

~ 2 Oct 2023 ~

Secure Yeti Appoints Jayson E. Street as Chief Adversarial Officer to Spearhead Cybersecurity Empowerment

Visa Program Combats Friendly Fraud Losses For Small Businesses Globally

Feds hopelessly behind the times on ransomware trends in alert to industry

In Search of Rust Developers, Companies Turn to In-House Training

North Korea Poses as Meta to Deploy Complex Backdoor at Aerospace Org

KillNet Claims DDoS Attack Against Royal Family Website

FBI: Crippling 'Dual Ransomware Attacks' on the Rise

Norway Urges Europe-Wide Ban on Meta's Targeted Ad Data Collection

Addressing AI and Security Challenges With Red Teams: A Google Perspective

Iran-Linked APT34 Spy Campaign Targets Saudis

Which DFIR Challenges Does the Middle East Face?

NSA AI Security Center

Celebrate 20 years of Cybersecurity Awareness Month with Microsoft and lets secure our world together

Dont Let Zombie Zoom Links Drag You Down

The Biggest Hack of 2023 Keeps Getting Bigger

Predictive Policing Software Terrible at Predicting Crimes

Making Sense of Today's Payment Cybersecurity Landscape

Security researchers believe mass exploitation attempts against WS_FTP have begun

LUCR-3: Scattered Spider Getting SaaS-y in the Cloud

APIs: Unveiling the Silent Killer of Cyber Security Risk Across Industries

Silent Skimmer: A Year-Long Web Skimming Campaign Targeting Online Payment Businesses

AWS stirs the MadPot busting bot baddies and eastern espionage since 2010

OpenRefine's Zip Slip Vulnerability Could Let Attackers Execute Malicious Code

The Silent Threat of APIs: What the New Data Reveals About Unknown Risk

BunnyLoader: New Malware-as-a-Service Threat Emerges in the Cybercrime Underground

Zanubis Android Banking Trojan Poses as Peruvian Government App to Target Users

Yes, Singapore immigration plans to scan your face instead of your passport

SANS ICS Security Awareness - New Series: Managing Human Risk in Industrial Control System Environments

~ 1 Oct 2023 ~

Now MOVEit maker Progress patches holes in WS_FTP

How to Stop Google Bard From Storing Your Data and Location

How to Tell When Your Phone Will Stop Getting Security Updates

~ 30 Sep 2023 ~

A Closer Look at the Snatch Data Ransom Group

Chinese Hackers Are Hiding in Routers in the US and Japan

Apple, Microsoft, and Google Just Fixed Multiple Zero-Day Flaws

FBI Warns of Rising Trend of Dual Ransomware Attacks Targeting U.S. Companies