Port 22

~ 3 May 2023 ~

Using Discord? Dont play down its privacy and security risks

Apple and Google Join Forces to Stop Unauthorized Tracking Alert System

Hackers Exploiting 5-year-old Unpatched Vulnerability in TBK DVR Devices

CISA Issues Advisory on Critical RCE Affecting ME RTU Remote Terminal Units

The importance of being certified

The Banana Incident

~ 2 May 2023 ~

Apple pushes first-ever 'rapid' patch and rapidly screws up

Mirai botnet loves exploiting your unpatched TP-Link routers, CISA warns

Promising Jobs at the U.S. Postal Service, US Job Services Leaks Customer Data

APT41 Subgroup Plows Through Asia-Pacific, Utilizing Layered Stealth Tactics

PrivateGPT Tackles Sensitive Info in ChatGPT Prompts

Apple, Google propose anti-stalking spec for Bluetooth tracker tags

Apple Debuts Its Rapid Response Security Update Approach

T-Mobile Experiences Yet Another Data Breach

288 arrested in multinational Monopoly Market takedown

American College of Pediatricians Leak Exposes 10,000 Confidential Files

AppSec Making Progress or Spinning Its Wheels?

With 288 Arrests, Feds Reveal a Widening Dragnet of Dark-Web Busts

North Korean APT Gets Around Macro-Blocking With LNK Switch-Up

Google Ads Abused to Lure Corporate Workers to LOBSHOT Backdoor

Researchers Uncover New BGP Flaws in Popular Internet Routing Protocol Software

In the face of data disaster

NIST Draft Document on Post-Quantum Cryptography Guidance

4 Principles for Creating a New Blueprint for Secure Software Development

China 'Innovated' Its Cyberattack Tradecraft, Mandia Says

BouldSpy Android Spyware: Iranian Government's Alleged Tool for Spying on Minority Groups

Why Telecoms Struggle with SaaS Security

Data loss costs are going up and not just for those who choose to pay thieves

SolarWinds: The Untold Story of the Boldest Supply-Chain Hack

APT groups muddying the waters for MSPs

Managed Detection and Response in 2022

LOBSHOT: A Stealthy, Financial Trojan and Info Stealer Delivered through Google Ads

Microsoft Digital Defense Report: Trends In Device and Infrastructure Attacks

North Korea's ScarCruft Deploys RokRAT Malware via LNK File Infection Chains

Russia's APT28 targets Ukraine government with bogus Windows updates

Alert: Active Exploitation of TP-Link, Apache, and Oracle Vulnerabilities Detected

Feds rethink warrantless search stats and oh look, a huge drop in numbers

~ 1 May 2023 ~

US Wellness Provides Notification of Data Security Incident

Enterprise Strategy Group Research Reveals 75% of Organizations Change or Update APIs on a Daily or Weekly Basis

FBI Focuses on Cybersecurity With $90M Budget Request

APT28 Employs Windows Update Lures to Trick Ukrainian Targets

BlackCat Trolls Western Digital With Leaked Response Meeting Image

IT giant Bitmarck shuts down customer, internal systems after cyberattack

Centralized secrets management picks up pace

What the Cybersecurity Industry Can Learn From the SVB Crisis

Name That Edge Toon: Fare Thee Well

New Decoy Dog Malware Toolkit Uncovered: Targeting Enterprise Networks

Google adds account sync for Authenticator, without E2EE

The High-Stakes Scramble to Stop Classified Leaks

Wanted Dead or Alive: Real-Time Protection Against Lateral Movement

What does ChatGPT know about phishing?

Vietnamese Threat Actor Infects 500,000 Devices Using 'Malverposting' Tactics

Your security failure was so bad we have to close the company .... NOT!

Google Blocks 1.43 Million Malicious Apps, Bans 73,000 Bad Accounts in 2022

China has 50 hackers for every FBI cyber agent, says Bureau boss

A Visual Summary of SANS ICS Summit 2023

~ 30 Apr 2023 ~

Apple, Google, and Microsoft Just Fixed Zero-Day Security Flaws

~ 29 Apr 2023 ~

The Tragic Fallout From a School Districts Ransomware Breach

How to Remove Your Personal Info From Google's Search Results

CISA Warns of Critical Flaws in Illumina's DNA Sequencing Instruments

ChatGPT is Back in Italy After Addressing Data Privacy Concerns

~ 28 Apr 2023 ~

Friday Squid Blogging: More Squid Camouflage Research

'BellaCiao' Showcases How Iran's Threat Groups Are Modernizing Their Malware

Hacking the Layoff Process

AT&T: What Security Pros Should Know About the Evolving Edge Ecosystem