Port 22

~ 5 Jan 2024 ~

Sandworm's Kyivstar attack should serve as a reminder of the Kremlin crew's 'global reach'

Russian Hackers Had Covert Access to Ukraine's Telecom Giant for Months

New Bandook RAT Variant Resurfaces, Targeting Windows Machines

Helping CTI Analysts Approach and Report on Emerging Technology Threats and Trends (Part 1)

~ 4 Jan 2024 ~

Best EDR Of The Market (BEOTM) Endpoint Detection and Response Testing Tool

X-ploited: Mandiant restores hijacked Twitter account after attempted crypto heist

Infosec experts divided over 23andMe's 'victim-blaming' stance on data breach

To Beat Russia, Ukraine Needs a Major Tech Breakthrough

Infostealer malware, weak password leaves Orange Spain RIPE for plucking

Three Ways To Supercharge Your Software Supply Chain Security

New iPhone Exploit Uses Four Zero-Days

Rockwell Automation FactoryTalk Activation

Mitsubishi Electric Factory Automation Products

As lawmakers mull outlawing poor security, what can they really do to tackle online gangs?

Beware: 3 Malicious PyPI Packages Found Targeting Linux with Crypto Miners

Lost and found: How to locate your missing devices and more

Three Chinese balloons float near Taiwanese airbase

UAC-0050 Group Using New Phishing Tactics to Distribute Remcos RAT

Mandiant's Twitter Account Restored After Six-Hour Crypto Scam Hack

Microsoft kills off Windows app installation from the web, again

Helping CTI Analysts Approach and Report on Emerging Technology Threats and Trends (Part 2)

~ 3 Jan 2024 ~

Freight giant Estes refuses to deliver ransom, says personal data opened and stolen

Atos confirms talks with Airbus over cybersecurity wing sale

Malware Using Google MultiLogin Exploit to Maintain Access Despite Password Reset

Copy that? Xerox confirms 'security incident' at subsidiary

Facial Recognition Systems in the US

5 Ways to Reduce SaaS Security Risks

SMTP Smuggling: New Flaw Lets Attackers Bypass Security and Spoof Emails

Say what you will? Your favorite speech-to-text app may be a privacy risk

Formal ban on ransomware payments? Asking orgs nicely to not cough up ain't working

DOJ Slams XCast with $10 Million Fine Over Massive Illegal Robocall Operation

~ 2 Jan 2024 ~

Google password resets not enough to stop these info-stealing malware strains

Court hearings become ransomware concern after justice system breach

TikTok Editorial Analysis

What Its Like to Use Apples Lockdown Mode

The Definitive Enterprise Browser Buyer's Guide

Google Settles $5 Billion Privacy Lawsuit Over Tracking Users in 'Incognito Mode'

Crypto-crook Sam Bankman-Fried spared a second trial

Beyond The Foundations: Diving into IAM in AWS

~ 1 Jan 2024 ~

New Variant of DLL Search Order Hijacking Bypasses Windows 10 and 11 Protections

New Terrapin Flaw Could Let Attackers Downgrade SSH Protocol Security

New JinxLoader Targeting Users with Formbook and XLoader Malware

Evolution of Cybercriminal Operations in 2023

~ 31 Dec 2023 ~

Google Fixes Nearly 100 Android Security Issues

~ 30 Dec 2023 ~

Beware: Scam-as-a-Service Aiding Cybercriminals in Crypto Wallet-Draining Attacks

~ 29 Dec 2023 ~

Happy 14th Birthday, KrebsOnSecurity!

Albanian Parliament and One Albania Telecom Hit by Cyber Attacks

AI Is Scarily Good at Guessing the Location of Random Photos

The Worst Hacks of 2023

CERT-UA Uncovers New Malware Wave Distributing OCEANMAP, MASEPIE, STEELHOOK

Friday Squid Blogging: Sqids

Kimsuky Hackers Deploying AppleSeed, Meterpreter, and TinyNuke in Latest Attacks

CEO arranged his own cybersecurity, with predictable results

Microsoft Disables MSIX App Installer Protocol Widely Used in Malware Attacks

sans-cloud-flight-simulator-sec540

~ 28 Dec 2023 ~

Financially motivated threat actors misusing App Installer

A tale of 2 casino ransomware attacks: One paid out, one did not

Kaspersky reveals previously unknown hardware 'feature' used in iPhone attacks

Google Cloud Resolves Privilege Escalation Flaw Impacting Kubernetes Service

AI and Lossy Bottlenecks

The Most Dangerous People on the Internet in 2023

Most Sophisticated iPhone Hack Ever Exploited Apple's Hidden Hardware Feature

A year in review: 10 of the biggest security incidents of 2023

New Rugmi Malware Loader Surges with Hundreds of Daily Detections

~ 27 Dec 2023 ~

Critical Zero-Day in Apache OfBiz ERP System Exposes Businesses to Attack

Operation Triangulation: The last (hardware) mystery

Chinese Hackers Exploited New Zero-Day in Barracuda's ESG Appliances

New iPhone Security Features to Protect Stolen Devices

This Clever New Idea Could Fix AirTag Stalking While Maximizing Privacy

Got a new device? 7 things to do before disposing of your old tech

New Sneaky Xamalicious Android Malware Hits Over 327,000 Devices

Warning: Poorly Secured Linux SSH Servers Under Attack for Cryptocurrency Mining

~ 26 Dec 2023 ~

Google Stops Collecting Location Data from Maps

Carbanak Banking Malware Resurfaces with New Ransomware Tactics

~ 25 Dec 2023 ~

Cloud Atlas' Spear-Phishing Attacks Target Russian Agro and Research Companies

~ 24 Dec 2023 ~

British LAPSUS$ Teen Members Sentenced for High-Profile Attacks

~ 23 Dec 2023 ~

Iranian cyberspies target US defense orgs with a brand new backdoor

~ 22 Dec 2023 ~

Friday Squid Blogging: Squid Parts into Fertilizer

Ben Rothkes Review of A Hackers Mind

Rogue WordPress Plugin Exposes E-Commerce Sites to Credit Card Theft

Cyber sleuths reveal how they infiltrate the biggest ransomware gangs

Operation RusticWeb: Rust-Based Malware Targets Indian Government Entities

Decoy Microsoft Word Documents Used to Deliver Nim-Based Malware

Data Exfiltration Using Indirect Prompt Injection

Facebook Marketplace Is Being Ruined by Zelle Scammers

Congress Sure Made a Lot of Noise About Kids Privacy in 2023and Not Much Else

Key findings from ESET Threat Report H2 2023 Week in security with Tony Anscombe

UAC-0099 Using WinRAR Exploit to Target Ukrainian Firms with LONEPAGE Malware

Microsoft Warns of New 'FalseFont' Backdoor Targeting the Defense Sector

~ 21 Dec 2023 ~

Lapsus$ teen sentenced to indefinite detention in hospital after Nvidia, GTA cyberattacks

Experts Detail Multi-Million Dollar Licensing Model of Predator Spyware

Chameleon Android Banking Trojan Variant Bypasses Biometric Authentication

Four in five Apache Struts 2 downloads are for versions featuring critical flaw

New JavaScript Malware Targeted 50,000+ Users at Dozens of Banks Worldwide

Cyberattack on Ukraines Kyivstar Seems to Be Russian Hacktivists

QNAP VioStor NVR

FXC AE1021/AE1021PE

Mozilla decides Trusted Types is a worthy security feature

Cost of a Data Breach Report 2023: Insights, Mitigators and Best Practices

Safeguard the joy: 10 tips for securing your shiny new device