Port 22

~ 26 Sep 2023 ~

Critical JetBrains TeamCity Flaw Could Expose Source Code and Build Pipelines to Attackers

~ 25 Sep 2023 ~

When It Comes to Email Security, The Cloud You Pick Matters

Xenomorph Android Malware Targets Customers of 30 US Banks

MOVEit Flaw Leads to 900 University Data Breaches

UAE-Linked 'Stealth Falcon' APT Mimics Microsoft in Homoglyph Attack

Satellite Images Show the Devastating Cost of Sudans Aerial War

Mixin suspends deposits and withdrawals after $200m cryptocurrency heist

The Hot Seat: CISO Accountability in a New Era of SEC Regulation

Ukrainian Military Targeted in Phishing Campaign Leveraging Drone Manuals

Cyber Hygiene: A First Line of Defense Against Evolving Cyberattacks

Watch the Webinar AI vs. AI: Harnessing AI Defenses Against AI-Powered Risks

Are You Willing to Pay the High Cost of Compromised Credentials?

Your Bosss Spyware Could Train AI to Replace You

A Tricky New Way to Sneak Past Repressive Internet Censorship

From Watering Hole to Spyware: EvilBamboo Targets Tibetans, Uyghurs, and Taiwanese

Don't Get Burned by CAPTCHAs: A Recipe for Accurate Bot Protection

New Report Uncovers Three Distinct Clusters of China-Nexus Attacks on Southeast Asian Government

T-mobile US exposes some customer data but don't call it a breach

Summary of the New SEC Rules and Regulations

~ 23 Sep 2023 ~

The Shocking Data on Kia and Hyundai Thefts in the US

Deadglyph: New Advanced Backdoor with Distinctive Malware Tactics

Apple and Chrome Zero-Days Exploited to Hack Egyptian ex-MP with Predator Spyware

ASPM Is Good, But It's Not a Cure-All for App Security

~ 22 Sep 2023 ~

LastPass: Horse Gone Barn Bolted is Strong Password

ESET's cutting-edge threat research at LABScon Week in security with Tony Anscombe

Friday Squid Blogging: New Squid Species

Stealth Falcon preying over Middle Eastern skies with Deadglyph

Recast Software Acquires Liquit, Consolidating the Endpoint and Application Management Markets

ClassLink Provides Cybersecurity Training Course to Help Schools Protect Public Directory Data

Wing Security Launches Compliance-Grade SaaS Security Solution for Just $1.5K

Latest Acquisition Powers AI-based Network Detection and Response and Open XDR Capabilities for WatchGuard

Apple squashes security bugs after iPhone flaws exploited by Predator spyware

TikTok API Rules Stymie Analysis of US User Data, Academics Say

Hackers Let Loose on Voting Gear Ahead of US Election Season

Akira Ransomware Mutates to Target Linux Systems, Adds TTPs

PREDATOR IN THE WIRES: Ahmed Eltantawy Targeted with Predator Spyware After Announcing Presidential Ambitions

NFL, CISA Look to Intercept Cyber Threats to Super Bowl LVIII

Apple Fixes 3 More Zero-Day Vulnerabilities

MGM, Caesars Cyberattack Responses Required Brutal Choices

Bot Swarm: Attacks From Middle East & Africa Are Notably Up

New Variant of Banking Trojan BBTok Targets Over 40 Latin American Banks

Guardians of the Cyberverse: Building a Resilient Security Culture

Do CISOs Have to Report Security Flaws to the SEC?

How to Interpret the 2023 MITRE ATT&CK Evaluation Results

Iranian Nation-State Actor OilRig Targets Israeli Organizations

High-Severity Flaws Uncovered in Atlassian Products and ISC BIND Server

ESA gets the job of building Europe's secure satcomms network

Apple Rushes to Patch 3 New Zero-Day Flaws: iOS, macOS, Safari, and More Vulnerable

Building the Human Risk Dream Team

A Visual Summary of SANS OSINT Summit 2023

Cisco Moves into SIEM with $28B Deal to Acquire Splunk

~ 21 Sep 2023 ~

US govt IT help desk techie 'leaked top secrets' to foreign nation

Mysterious 'Sandman' APT Targets Telecom Sector With Novel Backdoor

What Does Socrates Have to Do With CPM?

Salvador Technologies Wins Funding for $2.2M Cybersecurity Project From BIRD Foundation

'Gold Melody' Access Broker Plays on Unpatched Servers' Strings

OPSWAT-Sponsored SANS 2023 ICS/OT Cybersecurity Report Reveals Vital Priorities to Mitigate Ongoing Threats

~ 22 Sep 2023 ~

Mysterious 'Sandman' Threat Actor Targets Telecom Providers Across Three Continents

~ 21 Sep 2023 ~

T-Mobile Racks Up Third Consumer Data Exposure of 2023

Secure Browser Tech Is Having a Moment

TransUnion reckons big dump of stolen customer data came from someone else

OilRigs Outer Space and Juicy Mix: Same ol rig, new drill pipes

MGM Restores Casino Operations 10 Days After Cyberattack

Mastering Defense-In-Depth and Data Security in the Cloud Era

Growing Chinese Tech Influence in Africa Spurs 'Soft Power' Concerns

BBTok Banking Trojan Impersonates 40+ Banks to Hijack Victim Accounts

Hikvision Intercoms Allow Snooping on Neighbors

New Microsoft security tools to protect families and businesses

Cisco spends $28B on data cruncher Splunk in cybersecurity push

Ukrainian Hacker Suspected to be Behind "Free Download Manager" Malware Attack

Understanding the Differences Between On-Premises and Cloud Cybersecurity

Researchers Raise Red Flag on P2PInfect Malware with 600x Activity Surge

Siemens Spectrum Power 7

Rockwell Automation Select Logix Communication Modules

Rockwell Automation FactoryTalk View Machine Edition

Rockwell Automation Connected Components Workbench

Real Time Automation 460 Series

Delta Electronics DIAScreen

New Revelations from the Snowden Documents

The Rise of the Malicious App

Menacing marketeers fined by ICO for 1.9M cold calls

Overview of IoT threats in 2023

China Accuses U.S. of Decade-Long Cyber Espionage Campaign Against Huawei Servers

Cyber Group 'Gold Melody' Selling Compromised Access to Ransomware Attackers

India's biggest tech centers named as cyber crime hotspots

Data breach reveals distressing info: people who order pineapple on pizza

Beware: Fake Exploit for WinRAR Vulnerability on GitHub Infects Users with VenomRAT

Latest Must-Read Malware Analysis Blogs

Cloud Engineer Salary, Skills, and Career Path

~ 20 Sep 2023 ~

Will Generative AI Kill the Nigerian Prince Scam?

GitLab Users Advised to Update Against Critical Flaw Immediately

Feds raise alarm over Snatch ransomware as extortion crew brags of Veterans Affairs hit

Yubico Goes Public

Signal adopts new alphabet jumble to protect chats from quantum computers

Fake WinRAR PoC Exploit Conceals VenomRAT Malware

FBI, CISA Issue Joint Warning on 'Snatch' Ransomware-as-a-Service

International Criminal Court hacked amid Russia investigations

Dig Security Enhances DSPM Platform to Secure Enterprise Data in On-Prem, File-Share Environments

OneLayer Expands Its Private Cellular Network Security Solutions to Operations and Asset Management

83% of IT Security Professionals Say Burnout Causes Data Breaches