Port 22

~ 5 Oct 2023 ~

Cisco warns of critical flaw in Emergency Responder code

Stealthy, Thieving Python Packages Slither Onto Windows Systems

Group-IB: 'GoldDigger' Banking Trojan Targets Vietnamese Organizations

Critical 'ShellTorch' Flaws Light Up Open Source AI Users, Like Google

Unkillable? Qakbot Infections Fly On Even After Its High-Profile Raid

Another security update, Apple? You're really keeping up with your tech rivals

Critical Zero-Day Bug in Atlassian Confluence Under Active Exploit

Could Cybersecurity Breaches Become Harmless in the Future?

QakBot Threat Actors Still in Action, Using Ransom Knight and Remcos RAT in Latest Attacks

BYOD should stand for bring your own disaster, according to Microsoft ransomware data

Cisco Releases Urgent Patch to Fix Critical Flaw in Emergency Responder Systems

Political Disinformation and AI

Analysis and Config Extraction of Lu0Bot, a Node.js Malware with Considerable Capabilities

Guyana Governmental Entity Hit by DinodasRAT in Cyber Espionage Attack

Lorenz ransomware crew bungles blackmail blueprint by leaking two years of contacts

GoldDigger Android Trojan Targets Banking Apps in Asia Pacific Countries

Operation Jacana: Foundling hobbits in Guyana

CISA Warns of Active Exploitation of JetBrains and Windows Vulnerabilities

North Korea goes phishing in Souths shipyards

Apple Rolls Out Security Patches for Actively Exploited iOS Zero-Day Flaw

Atlassian Confluence Hit by Newly Actively Exploited Zero-Day Patch Now

Insurance Companies Have a Lot to Lose in Cyberattacks

~ 4 Oct 2023 ~

Nokia Selected by Brazil's K2 Telecom As Partner to Strengthen its Security and Create Revenue Streams

IT networks under attack via critical Confluence zero-day. Patch now

Trend Micro Drives Latest Phase of Channel Prosperity and Engagement

New Malwarebytes Survey: Consumers Lack Trust in New Tech

ForAllSecure Announces First Dynamic Software Bill of Materials for Application Security

Make-me-root 'Looney Tunables' security hole on Linux needs your attention

Okta Launches Cybersecurity Workforce Development Initiative to Help Close the Tech and Cybersecurity Skills Gap

Mitiga Secures Strategic Investment From Cisco

37% Intimidated, 39% Frustrated With Online Security Highlighting Digital Anxiety

BeyondID Introduces Identity-First Model for Zero-Trust Maturity

'Gay furry hackers' brag of second NATO break-in, steal and leak more data

Bing Chat LLM Tricked into Circumventing CAPTCHA Filter

AWS Plans Multifactor Authentication Mandates for 2024

Red Cross lays down hacktivism law as Ukraine war rages on

On the Dark Web, Prices Are Down for Middle Eastern Network Access

CISA barred from coordinating with social media sites to police misinformation

'Looney Tunables' Bug Opens Millions of Linux Systems to Root Takeover

Breaches Are the Cost of Doing Business, but NIST Is Here to Help

Turnkey Rootkit for Amateur Hackers Makes Supply Chain Attacks Easy

Researchers Link DragonEgg Android Spyware to LightSpy iOS Surveillanceware

How to Measure Patching and Remediation Performance

Patch Confusion for Critical Exim Bug Puts Email Servers at Risk--Again

Wing Disrupts the Market by Introducing Affordable SaaS Security

Rogue npm Package Deploys Open-Source Rootkit in New Supply Chain Attack

Malicious Ads in Bing Chat

The Team Helping Women Fight Digital Domestic Abuse

Microsoft Warns of Cyber Attacks Attempting to Breach Cloud via SQL Server Instance

Your Cheap Android TV Streaming Box May Have a Dangerous Backdoor

How Neuralink Keeps Dead Monkey Photos Secret

Looney Tunables: New Linux Flaw Enables Privilege Escalation on Major Distributions

Trio of TorchServe flaws means PyTorch users need an urgent upgrade

SEC670 Prep Quiz Answers

SEC670 Prep Quiz

~ 3 Oct 2023 ~

US v Sam Bankman-Fried trial begins ... as imploded crypto-biz boss sues his insurer

Russian Hacktivism Takes a Toll on Organizations in Ukraine, EU, US

Gartner Forecasts Global Security and Risk Management Spending to Grow 14% in 2024

Attacks on Maximum Severity WS_FTP Bug Have Been Limited So Far

USPS Anchors Snowballing Smishing Campaigns

Name That Edge Toon: Office Artifacts

Mercenary spyware: Defending against whats next iMEdD International Journalism Forum 2023

Qualcomm Releases Patch for 3 new Zero-Days Under Active Exploitation

Defending new vectors: Threat actors attempt SQL Server to cloud lateral movement

Fast-Growing Dropbox Campaign Steals Microsoft SharePoint Credentials