Port 22

~ 8 Aug 2023 ~

Hackers Abusing Cloudflare Tunnels for Covert Communications

What Doctors Wish You Knew About HIPAA and Data Security

Schneider Electric IGSS

Hitachi Energy RTU500 series

You Cant Rush Post-Quantum-Computing Cryptography Standards

China which surveils everyone everywhere floats facial recognition rules

Understanding Active Directory Attack Paths to Improve Security

New Yashma Ransomware Variant Targets Multiple English-Speaking Countries

LOLBAS in the Wild: 11 Living-Off-The-Land Binaries Used for Malicious Purposes

North Korean hackers had access to Russian missile maker for months, say researchers

Ransomware Victims Surge as Threat Actors Pivot to Zero-Day Exploits

Apple Users See Big Mac Attack, Says Accenture

~ 7 Aug 2023 ~

Stalkerware slinger LetMeSpy shuts down for good after database robbery

SecurityScorecard Launches Managed Cyber Risk Services to Mitigate Zero-Day and Critical Supply Chain Vulnerabilities

Akamai Research: Rampant Abuse of Zero-Day and One-Day Vulnerabilities Leads to 143% Increase in Victims of Ransomware

The Mystery of Chernobyls Post-Invasion Radiation Spikes

Microsofts AI Red Team Has Already Made the Case for Itself

SANS Teaches Cybersecurity Leadership in Saudi Arabia

Mallox Ransomware Group Revamps Malware Variants, Evasion Tactics

Adopting guidance from the US National Cybersecurity Strategy to secure the Internet of Things

New Malware Campaign Targets Inexperienced Cyber Criminals with OpenBullet Configs

Microsoft AI Red Team building future of safer AI

Colorado Dept. of Higher Education Hit With Massive Data Breach

Selling Software to the US Government? Know Security Attestation First

North Korean Hackers Targets Russian Missile Engineering Firm

Name That Edge Toon: How Now?

Microsoft Signing Key Stolen by Chinese

Criminals Have Created Their Own ChatGPT Clones

Enhancing Security Operations Using Wazuh: Open Source XDR and SIEM

New 'Deep Learning Attack' Deciphers Laptop Keystrokes with 95% Accuracy

New SkidMap Redis Malware Variant Targeting Vulnerable Redis Servers

Time is money, and online game scammers have lots of it

FBI Alert: Crypto Scammers are Masquerading as NFT Developers

The Dark Web Is Expanding (As Is the Value of Monitoring It)

How to Prepare for ChatGPT's Risk Management Challenges

Microsoft hits back at Tenable criticism of its infosec practices

Five Eyes nations detail dirty dozen most exploited vulnerabilities

~ 6 Aug 2023 ~

How to Automatically Delete Passcode Texts on Android and iOS

~ 5 Aug 2023 ~

Security News This Week: The Cloud Company at the Center of a Global Hacking Spree

MDR: Empowering Organizations with Enhanced Security

Reptile Rootkit: Advanced Linux Malware Targeting South Korean Systems

Microsoft Addresses Critical Power Platform Flaw After Delays and Criticism

Researchers Uncover New High-Severity Vulnerability in PaperCut Software

The Role of Mentorship in Cyber Threat Intelligence (Part 2)

~ 4 Aug 2023 ~

Two US Navy sailors charged with giving Chinese spies secret military info

Friday Squid Blogging: 2023 Squid Oil Global Market Report

Cloud Security Market Worth $62.9B by 2028

Endor Labs Raises $70M to Reform Application Security and Eliminate Developer Productivity Tax

Salesforce Zero-Day Exploited to Phish Facebook Credentials

Alarm raised over Mozilla VPN: Wonky authorization check lets users cause havoc

Burger King Serves Up Sensitive Data, No Mayo

Hawaii's Gemini North Observatory Suspended After Cyberattack

The Senates AI Future Is Haunted by the Ghost of Privacy Past

How to Talk So Your CISO Will Listen

Teach a Man to Phish and Hes Set for Life

How To Deal With the Vagueness in New Cyber Regulations

Google, Microsoft Take Refuge in Rust Language's Better Security

NYC Couple Pleads Guilty to Money Laundering in $3.6 Billion Bitfinex Hack

Political Milestones for AI

Webinar - Making PAM Great Again: Solving the Top 5 Identity Team PAM Challenges

Check cybersecurity pre-invest Week in security with Tony Anscombe

Malicious npm Packages Found Exfiltrating Sensitive Data from Developers

Major Cybersecurity Agencies Collaborate to Unveil 2022's Most Exploited Vulnerabilities

Couple admit they laundered $4B in stolen Bitcoins after Bitfinex super-heist

~ 3 Aug 2023 ~

Russia's Cozy Bear is back and hitting Microsoft Teams to phish top targets

Qualys Announces First-Party Software Risk Management Solution

Mission Secure, Idaho National Laboratory Announce Partnership to Protect Critical Infrastructure

Vulcan Cyber Attack Path Graph Targets Cloud-Scale Risk Prioritization and Mitigation

Center for Cyber Safety and Education Awards $174K in Cybersecurity Scholarships

Free Airline Miles, Hotel Points, and User Data Put at Risk by Flaws in Points Platform

Old-school hacktivism is back because it never went away

Hacktivist Group 'Mysterious Team Bangladesh' Goes on DDoS Rampage

Cult of the Dead Cow Hacktivists Give Life to 'Privacy-First' App Framework

World Cup Glory Looms, and So Do Cyber Threats, Microsoft Warns

Exclusive: CISA Sounds the Alarm on UEFI Security

As Artificial Intelligence Accelerates, Cybercrime Innovates

Malicious Apps Use Sneaky Versioning Technique to Bypass Google Play Store Scanners

Russia's 'Midnight Blizzard' Hackers Launch Flurry of Microsoft Teams Attacks

"Mysterious Team Bangladesh" Targeting India with DDoS Attacks and Data Breaches

New Version of Rilide Data Theft Malware Adapts to Chrome Extension Manifest V3

Hundreds of Citrix NetScaler ADC and Gateway Servers Hacked in Major Cyber Attack

Piles of Unpatched IoT, OT Devices Attract ICS Cyberattacks

How to Create an Effective GRC Program: 3 Phases

A Penetration Testing Buyer's Guide for IT Security Teams

TEL-STER TelWin SCADA WebInterface

Sensormatic Electronics VideoEdge

Mitsubishi Electric GT and GOT Series Products

Mitsubishi Electric GOT2000 and GOT SIMPLE

How Malicious Android Apps Slip Into Disguise

The Need for Trustworthy AI

Microsoft Flags Growing Cybersecurity Concerns for Major Sporting Events

Whats happening in the world of crimeware: Emotet, DarkGate and LokiBot

Cyber Signals: Sporting events and venues draw cyberthreats at increasing rates

Brit healthcare body rapped for WhatsApp chat sharing patient data

Fingerprints all over: Can browser fingerprinting increase website security?

Prepare for plenty more pain from Ivanti's MDM flaws, warn cyber agencies

Microsoft Exposes Russian Hackers' Sneaky Phishing Tactics via Microsoft Teams Chats

Researchers Discover Bypass for Recently Patched Critical Ivanti EPMM Vulnerability

A Visual Summary of SANS DFIR Summit 2023

~ 2 Aug 2023 ~

CISOs Need Backing to Take Charge of Security