Port 22

~ 16 Oct 2023 ~

'RomCom' Cyber Campaign Targets Women Political Leaders

We're not in e-Kansas anymore: State courts reel from 'unauthorized incursion'

Name That Toon: Modern Monarchy

Pro-Israeli Hacktivist Group Predatory Sparrow Reappears

A hack in hand is worth two in the bush

BLOODALCHEMY provides backdoor to southeast Asian nations' secrets

How Data Changes the Cyber-Insurance Market Outlook

Pro-Russian Hackers Exploiting Recent WinRAR Vulnerability in New Campaign

SpyNote: Beware of This Android Trojan that Records Audio and Phone Calls

The Fast Evolution of SaaS Security from 2020 to 2024 (Told Through Video)

Coin Flips Are Biased

Deepfake Porn Is Out of Control

Signal Debunks Zero-Day Vulnerability Reports, Finds No Evidence

Why Zero Trust Is the Cloud Security Imperative

3 Essential Steps to Strengthen SaaS Security

Binance's Smart Chain Exploited in New 'EtherHiding' Malware Campaign

Regulator, insurers and customers all coming for Progress after MOVEit breach

A Visual Summary of SANS CloudSecNext Summit 2023

~ 14 Oct 2023 ~

The US Congress Was Targeted With Predator Spyware

Microsoft to Phase Out NTLM in Favor of Kerberos for Stronger Authentication

~ 13 Oct 2023 ~

Friday Squid Blogging: On Squid Intelligence

How MOVEit Is Likely to Shift Cyber Insurance Calculus

Feds: Beware AvosLocker Ransomware Attacks on Critical Infrastructure

Security Pros Warn that EU's Vulnerability Disclosure Rule is Risky

530K people's info feared stolen from cloud PC gaming biz Shadow

Bungled ransomware raid targeting WS_FTP servers demanded just 0.018 BTC

ShellBot Cracks Linux SSH Servers, Debuts New Evasion Tactic

Microsoft Debuts AI Bug-Bounty Program, Offers $15K

Rumors of a Global Day of Jihad Have Unleashed a Dangerous Wave of Disinformation

Gaza Conflict Paves Way for Pro-Hamas Information Operations

Passkeys Are Cool, But They Aren't Enterprise-Ready

Calls for Visual Studio security tweak fall on deaf ears despite one-click RCE exploit

Staying on top of security updates Week in security with Tony Anscombe

Can open source be saved from the EU's Cyber Resilience Act?

New PEAPOD Cyberattack Campaign Targeting Women Political Leaders

What the Hollywood Writers Strike Resolution Means for Cybersecurity

US House Republicans Had Their Phones Confiscated to Stop Leaks

Equifax scores 11.1M slap on wrist over 2017 mega breach

ChatGPT at work: how chatbots help employees, but threaten business

Researchers Unveil ToddyCat's New Set of Tools for Data Exfiltration

Hacking the High School Grading System

Ransomware attacks doubled year on year. Are organizations equipped to handle the evolution of Ransomware in 2023?

HTTP/2 Rapid Reset: A New Protocol Vulnerability Will Haunt the Web for Years

DarkGate Malware Spreading via Messaging Services Posing as PDF Files

FBI, CISA Warn of Rising AvosLocker Ransomware Attacks Against Critical Infrastructure

Squid games: 35 security holes still unpatched in proxy after 2 years, now public

~ 12 Oct 2023 ~

Making the Case for Cryptographic Agility and Orchestration

How to Scan Your Environment for Vulnerable Versions of Curl

DigiCert Announces Comprehensive Discovery of Cryptographic Assets

Appdome Announces Attack Evaluation Tools in Digital Economy's Mobile XDR

DarkGate Operator Uses Skype, Teams Messages to Distribute Malware

Brands Beware: X's New Badge System Is a Ripe Cyber-Target

Microsoft Set to Retire Grunge-Era VBScript, to Cybercrime's Chagrin

BlackBerry Unveils Next-Generation UEM Redefining the Endpoint Management Market

Simpson Manufacturing Launches Investigation After Cyberattack

The Cyberwar Between the East and the West Goes Through Africa

Backdoor Lurks Behind WordPress Caching Plugin to Hijack Websites

Protect Critical Infrastructure With Same Rigor as Classified Networks

Malicious NuGet Package Targeting .NET Developers with SeroXen RAT

Uber's Ex-CISO Appeals Conviction Over 2016 Data Breach

New California Delete Act Tightens Rules for Data Brokers

Everest cybercriminals offer corporate insiders cold, hard cash for remote access

Building cyber resilience with data vaults

How the FTX Thieves Have Tried to Launder Their $400 Million Haul

ShellBot Uses Hex IPs to Evade Detection in Attacks on Linux SSH Servers