Port 22

~ 10 Aug 2023 ~

Cyber Insurance Experts Make a Case for Coverage, Protection

There's a good chance your VPN is vulnerable to privacy-menacing TunnelCrack attack

ESET Research Podcast: Unmasking MoustachedBouncer

Teens Hacked Boston Subways CharlieCard to Get Infinite Free Ridesand This Time Nobody Got Sued

EvilProxy Cyberattack Flood Targets Execs via Microsoft 365

The Hard Realities of Setting AI Risk Policy

SecurityGen Study Highlights Hidden Threat to 5G Mobile Networks From GTP-Based Cyberattacks

Rootly Raises $12M to Help Enterprise IT Teams Resolve Incidents 80 Percent Faster

Osano Secures $25M Series B to Advance Data Privacy Platform

Cybersecurity: It's Time to Trust the Machines

New Attack Alert: Freeze[.]rs Injector Weaponized for XWorm Malware Attacks

New Statc Stealer Malware Emerges: Your Sensitive Data at Risk

Navigating Cybersecurity's Seas: Environmental Regulations, OT & the Maritime Industry's New Challenges

Siemens Solid Edge, JT2Go, and Teamcenter Visualization

Siemens Solid Edge SE2023

Siemens Software Center

Siemens RUGGEDCOM CROSSBOW

Siemens Parasolid Installer

Siemens Parasolid and Teamcenter Visualization

Siemens OpenSSL RSA Decryption in SIMATIC

Siemens JT Open, JT Utilities, and Parasolid

Resource Allocation in Siemens RUGGEDCOM

Network Mirroring in Siemens RUGGEDCOM

Encryption Flaws in Popular Chinese Language App Put Users' Typed Data at Risk

Emerging Attacker Exploit: Microsoft Cross-Tenant Synchronization

Cryptographic Flaw in Libbitcoin Explorer Cryptocurrency Wallet

Focus on DroxiDat/SystemBC

Get your staff's consent before you monitor them, tech inquiry warns

Leaked Yandex Code Breaks Open the Creepy Black Box of Online Advertising

Cybercriminals Increasingly Using EvilProxy Phishing Kit to Target Executives

'MoustachedBouncer' APT Spies on Embassies, Likely via ISPs

MoustachedBouncer: Espionage against foreign diplomats in Belarus

Common TTPs of attacks against industrial organizations

Interpol Busts Phishing-as-a-Service Platform '16Shop,' Leading to 3 Arrests

Zero Trust Blog Series - Blog 2: Architecting for Zero Trust

~ 9 Aug 2023 ~

Nearly every AMD CPU since 2017 vulnerable to Inception data-leak attacks

Panasonic Warns That IoT Malware Attack Cycles Are Accelerating

Hackers Rig Casino Card-Shuffling Machines for Full Control Cheating

DARPA Launches Two-Year Contest to Build AI Tools to Fix Vulnerabilities

LastPass Announces Availability of FIDO2 Authenticators for Passwordless Login

Sweet Security Lands $12M in Seed Funding to Shift Cloud Security Right

Symmetry Systems Closes $17.7M To Scale its AI-Powered Data Security Platform

Checkmarx CISO Study Finds 96% of CISOs Say Their Business Prospects Consider Their Organizations' AppSec Maturity When Making Deal Decisions

Blockchain Signing Bug Cracks Open Crypto Investors' Wallets Worldwide

Black Hat Opens With Call to Steer AI from Predictions to Policy

Windows Defender-Pretender Attack Dismantles Flagship Microsoft EDR

Disposed-of Gadgets Can Lead to Wi-Fi Network Hacks, Kaspersky Says

New LLM Tool Seeks and Remediates Vulnerabilities

It's Time for Cybersecurity to Talk About Climate Change

A Clever Honeypot Tricked Hackers Into Revealing Their Secrets

'Downfall' Bug in Billions of Intel CPUs Reveals Major Design Flaw

Safety of Officers & Civilians of PSNI Compromised in Major Data Breach

Rapid7 prepares to toss 18% of workforce to cut costs

Top 3 Insights I Learned at Recent Cybersecurity Events

C-Suite Cybersecurity Sign-off Hinges on Customer Trust, Digital Opps

OWASP Lead Flags Gaping Hole in Software Supply Chain Security

Sweet Security Debuts Runtime Management for Cloud

Interpol Shuts Down African Cybercrime Group, Seizes $2 Million

New Microsoft Security innovations expand multicloud visibility and enhance multiplatform protection

RedHotel Checks in As Dominant China-Backed Cyberspy Group

Collide+Power, Downfall, and Inception: New Side-Channel Attacks Affecting Modern CPUs

AI Risk Database Tackles AI Supply Chain Risks

Why Shellshock Remains a Cybersecurity Threat After 9 Years

Please do not make it public: Vulnerabilities in Sogou Keyboard encryption expose keypresses to network eavesdropping

China-Linked Hackers Strike Worldwide: 17 Nations Hit in 3-Year Cyber Campaign

Northern Ireland police may have endangered its own officers by posting details online in error

Closing Coverage Gaps Where Customer Resources Meet Cloud Environments

How to Remove Your Info From Google With the 'Results About You' Tool

Dark Reading News Desk: Live at Black Hat USA 2023

Continuous Security Validation with Penetration Testing as a Service (PTaaS)

Using Machine Learning to Detect Keystrokes

U.K. Electoral Commission Breach Exposes Voter Data of 40 Million Britons

Malicious Campaigns Exploit Weak Kubernetes Clusters for Crypto Mining

New Android 14 Security Feature: IT Admins Can Now Disable 2G Networks

Microsoft Releases Patches for 74 New Vulnerabilities in August Update

New Report Exposes Vice Society's Collaboration with Rhysida Ransomware

INTERPOL shutters '16shop' phishing-as-a-service outfit

Microsoft Patch Tuesday, August 2023 Edition

Attacker Breakout Time Shrinks Again, Underscoring Need for Automation

Analyzing Network Chaos Leads to Better DDoS Detection

Network Engineer Salary, Skills, and Career Path

~ 8 Aug 2023 ~

Microsoft, Intel lead this month's security fix emissions

Microsoft Fixes 74 CVEs in August Update

Russian Rocket Bureau Faces Cyber-Espionage Breach, North Korea Responsible

zkPass Secures $2.5M in Seed Funding to Safeguard User Privacy and Data

Brillio Partners With Google Cloud to Build Generative AI Solutions for the Financial Services and Healthcare Industries

75% of Organizations Worldwide Set to Ban ChatGPT and Generative AI Apps on Work Devices

India Data Protection Bill Approved, Despite Privacy Concerns

Raft of TETRA Zero-Day Vulnerabilities Endanger Industrial Communications

Cyber-extortionists pillage Colorado education dept

Custom Yashma Ransomware Crashes Into the Scene

Citrix Zero-Day: 7K Instances Remain Exposed, 460 Compromised

Meet the Brains Behind the Malware-Friendly AI Chat Service WormGPT

New Downfall Flaw Exposes Valuable Data in Generations of Intel Chips

The Problem With Cybersecurity (and AI Security) Regulation

Microsoft Purview data security mitigations for BazaCall and other human-operated data exfiltration attacks

Boost identity protection with Axiad Cloud and Microsoft Entra ID

UK voter data exposed for over a year in attack on Electoral Commission

QakBot Malware Operators Expand C2 Network with 15 New Servers

10 Key Controls to Show Your Organization Is Worthy of Cyber Insurance