Port 22

~ 29 Feb 2024 ~

Blue Team toolkit: 6 open-source tools to assess and enhance corporate defenses

The White House Warns Cars Made in China Could Unleash Chaos on US Highways

New Backdoor Targeting European Officials Linked to Indian Diplomatic Events

Lazarus Exploits Typos to Sneak PyPI Malware into Dev Systems

A Pornhub Chatbot Stopped Millions From Searching for Child Abuse Videos

Chinese Hackers Exploiting Ivanti VPN Flaws to Deploy New Malware

President Biden Blocks Mass Transfer of Personal Data to High-Risk Nations

Chinese PC-maker Acemagic customized its own machines to get infected with malware

Australian spy chief fears sabotage of critical infrastructure

ALPHV/BlackCat claims responsibility for Change Healthcare attack

The CISO's Guide to AI: Embracing Innovation While Mitigating Risk

Google Chrome Platform Notification Analysis

Aviata Cloud Solo Flight Challenge

~ 28 Feb 2024 ~

Gone in 60 seconds: BEAST AI model attack needs just a minute of GPU time to breach LLM guardails

BEAST AI needs just a minute of GPU time to make an LLM fly off the rails

Biden Executive Order Bans Sale of US Data to China, Russia. Good Luck

Palo Alto investor sues over 28% share tumble

Calendar Meeting Links Used to Spread Mac Malware

Dictators Used Sandvine Tech to Censor the Internet. The US Finally Did Something About It

Iran-Linked UNC1549 Hackers Target Middle East Aerospace & Defense Sectors

FBI Warns U.S. Healthcare Sector of Targeted BlackCat Ransomware Attacks

A Cyber Insurance Backstop

Building Your Privacy-Compliant Customer Data Platform (CDP) with First-Party Data

Superusers Need Super Protection: How to Bridge Privileged Access Management and Identity Management

Vulnerabilities in business VPNs under the spotlight

Uncle Sam tells nosy nations to keep their hands off Americans' personal data

TimbreStealer Malware Spreading via Tax-themed Phishing Scam Targets IT Users

Cybersecurity Agencies Warn Ubiquiti EdgeRouter Users of APT28's MooBot Threat

That home router botnet the Feds took down? Moscow's probably going to try again

~ 27 Feb 2024 ~

Change Healthcare Ransomware Attack: BlackCat Hackers Quickly Returned After FBI Bust

Sandvine put on America's export no-fly list for flogging snoop-ware to Egypt

NIST updates Cybersecurity Framework after a decade of lessons

The UK Is GPS-Tagging Thousands of Migrants

An educational robot security research

WordPress LiteSpeed Plugin Vulnerability Puts 5 Million Sites at Risk

Open-Source Xeno RAT Trojan Emerges as a Potent Threat on GitHub

China Surveillance Company Hacked

Mitsubishi Electric Multiple Factory Automation Products

How the Pentagon Learned to Use Targeted Ads to Find its Targetsand Vladimir Putin

From Alert to Action: How to Speed Up Your SOC Investigations

Five Eyes Agencies Expose APT29's Evolving Cloud Attack Tactics

New Hugging Face Vulnerability Exposes AI Models to Supply Chain Attacks

Cybercrims: When we hit IT, they sometimes pay, but when we hit OT... jackpot

Broadcom builds a better SASE out of VMware VeloCloud and Symantec

WordPress Plugin Alert - Critical SQLi Vulnerability Threatens 200K+ Websites

China warns of fake digital currency wallets fleecing netizens

A Visual Summary of SANS OSINT Summit 2024

~ 26 Feb 2024 ~

Nevada sues to deny kids access to Meta's Messenger encryption

ALPHV/BlackCat responsible for Change Healthcare cyberattack

LockBit back from the dead - taunts cops and plans to leak Trump docs

Microsoft Copilot for Security: The great equalizer for government security

New IDAT Loader Attacks Using Steganography to Deploy Remcos RAT

Everything you need to know about NIS2

8,000+ Subdomains of Trusted Brands Hijacked for Massive Spam Operation

How a Right-Wing Controversy Could Sabotage US Election Security

Data watchdog tells off outsourcing giant for scanning staff biometrics despite 'power imbalance'

North Korean Hackers Targeting Developers with Malicious npm Packages

Apple Announces Post-Quantum Encryption Algorithms for iMessage

Fox News 'hacker' turns out to be journalist whose lawyers say was doing his job

10 things to avoid posting on social media and why

Three Tips to Protect Your Secrets from AI Accidents

Banking Trojans Target Latin America and Europe Through Google Cloud Run

The mobile malware threat landscape in 2023

LockBit Ransomware Group Resurfaces After Law Enforcement Takedown

FBIs LockBit Takedown Postponed a Ticking Time Bomb in Fulton County, Ga.

Industrial Control System Cyber Security and Europe

~ 25 Feb 2024 ~

Security is hard because it has to be right all the time? Yeah, like everything else

Authorities Claim LockBit Admin "LockBitSupp" Has Engaged with Law Enforcement

~ 24 Feb 2024 ~

A Vending Machine Error Revealed Secret Face Recognition Tech

A Mysterious Leak Exposed Chinese Hacking Secrets

Microsoft Expands Free Logging Capabilities for all U.S. Federal Agencies

~ 23 Feb 2024 ~

LockBit extorted billions of dollars from victims, fresh leaks suggest

Friday Squid Blogging: Illex Squid and Climate Change

U-Haul tells 67K customers that cyber-crooks drove away with their personal info

Dormant PyPI Package Compromised to Spread Nova Sentinel Malware

LockBit identity reveal a bigger letdown than Game of Thrones Season 8

AIs Hacking Websites

Tips on meeting complex cloud security challenges

PSYOP campaigns targeting Ukraine Week in security with Tony Anscombe

Microsoft Releases PyRIT - A Red Teaming Tool for Generative AI

How to Use Tines's SOC Automation Capability Matrix

X protests forced suspension of accounts on orders of India's government

Researchers Detail Apple's Recent Zero-Click Shortcuts Vulnerability

FTC Slams Avast with $16.5 Million Fine for Selling Users' Browsing Data

Here Are the Secret Locations of ShotSpotter Gunfire Sensors

Avast shells out $17M to shoo away claims it peddled people's personal data

~ 22 Feb 2024 ~

Cyberattack downs pharmacies across America

Leak Shows Alarm in Congress Over a Russian Threat Is a Real Anomaly

Authorities dismantled LockBit before it could unleash revamped variant

New Image/Video Prompt Injection Attacks

Announcing Microsofts open automation framework to red team generative AI Systems

Apple Unveils PQ3 Protocol - Post-Quantum Encryption for iMessage

Ukrainian police arrest father and son in suspected LockBit affiliate double act

New Leak Shows Business Side of Chinas APT Menace

Delta Electronics CNCSoft-B DOPSoft

Cybercriminals Weaponizing Open-Source SSH-Snake Tool for Network Attacks

A New Age of Hacktivism

Russian Government Software Backdoored to Deploy Konni RAT Malware

Everything you need to know about IP grabbers

Giant leak reveals Chinese infosec vendor I-Soon is one of Beijing's cyber-attackers for hire