Port 22

~ 16 Jan 2024 ~

Locking down the edge

Double trouble for VMware and Atlassian admins critical flaws to fix

More than 178,000 SonicWall firewalls are exposed to old denial of service bugs

Unified security operations with Microsoft Sentinel and Microsoft Defender XDR

A Flaw in Millions of Apple, AMD, and Qualcomm GPUs Could Expose AI Data

Ivanti zero-day exploits explode as bevy of attackers get in on the act

Alert: Over 178,000 SonicWall Firewalls Potentially Vulnerable to Exploits - Act Now

Remcos RAT Spreading Through Adult Games in New Attack Wave

The Story of the Mirai Botnet

The Sad Truth of the FTC's Location Data Privacy Settlement

SEW-EURODRIVE MOVITOOLS MotionStudio

Integration Objects OPC UA Server Toolkit

Case Study: The Cookie Privacy Monster in Big Global Retail

The 7 deadly cloud security sins and how SMBs can do things better

A lightweight method to detect potential iOS malware

Inferno Malware Masqueraded as Coinbase, Drained $87 Million from 137,000 Victims

Hackers Weaponize Windows Flaw to Deploy Crypto-Siphoning Phemedrone Stealer

Chinas gambling crackdown spawned wave of illegal online casinos and crypto-crime in Asia

Industrial Control Systems Cyber Threats & The Gulf Region: ICS Blog Series: 1 of 3

FOR528: Ransomware & Cyber Extortion Course Updates Implemented Whats New?

~ 15 Jan 2024 ~

Thousands of Juniper Networks devices vulnerable to critical RCE bug

Patch time: Critical GitLab vulnerability exposes 2FA-less users to account takeovers

FTC secures first databroker settlement banning sale of sensitive location data

Opera MyFlaw Bug Could Let Hackers Run ANY File on Your Mac or Windows

3 Ransomware Group Newcomers to Watch in 2024

Voice Cloning with Very Short Samples

Ransomware protection deconstructed

High-Severity Flaws Uncovered in Bosch Thermostats and Smart Nutrunners

Balada Injector Infects Over 7,100 WordPress Sites Using Plugin Vulnerability

DDoS Attacks on the Environmental Services Industry Surge by 61,839% in 2023

China loathes AirDrop so much it's publicized an old flaw in Apple's P2P protocol

Ransomware Cases Increased Greatly in 2023

~ 14 Jan 2024 ~

Upcoming Speaking Engagements

New Findings Challenge Attribution in Denmark's Energy Sector Cyberattacks

~ 13 Jan 2024 ~

A Bloody Pig Mask Is Just Part of a Wild New Criminal Charge Against eBay

Critical RCE Vulnerability Uncovered in Juniper SRX Firewalls and EX Switches

29-Year-Old Ukrainian Cryptojacking Kingpin Arrested for Exploiting Cloud Services

Number of orgs compromised via Ivanti VPN zero-days grows as Mandiant weighs in

~ 12 Jan 2024 ~

Why we update... Data-thief malware exploits SmartScreen on unpatched Windows PCs

Friday Squid Blogging: Giant Squid from Newfoundland in the 1800s

Mobile security vulnerabilities threaten millions in Latin America: ICFP and Citizen Lab fellow Beau Kujath finds security vulnerabilities in mobile applications in Latin America region.

Exploit for under-siege SharePoint vuln reportedly in hands of ransomware crew

How to Stop Your X Account From Getting Hacked Like the SEC's

Secret multimillion-dollar cryptojacker snared by Ukrainian police

Microsoft is named a Leader in the 2023 Gartner Magic Quadrant for Endpoint Protection Platforms

Secure network operations for hybrid working

Lessons from SEC's X account hack Week in security with Tony Anscombe

Nation-State Actors Weaponize Ivanti VPN Zero-Days, Deploying 5 Malware Families

Medusa Ransomware on the Rise: From Data Leaks to Multi-Extortion

So, are we going to talk about how GitHub is an absolute boon for malware, or nah?

Urgent: GitLab Releases Patch for Critical Vulnerabilities - Update ASAP

Applying the Tyson Principle to Cybersecurity: Why Attack Simulation is Key to Avoiding a KO

On IoT Devices and Software Liability

Data regulator fines HelloFresh 140k for sending 80M+ spams

While we fire the boss, can you lock him out of the network?

Cryptominers Targeting Misconfigured Apache Hadoop and Flink with Rootkit in New Attacks

Drivers: We'll take that plain dumb car over a flashy data-spilling internet one, thanks

Act Now: CISA Flags Active Exploitation of Microsoft SharePoint Vulnerability

~ 11 Jan 2024 ~

eBay to cough up $3M after cyber-stalking couple who dared criticize the souk

Mandiant's brute-forced X account exposes perils of skimping on 2FA

Threat Actors Increasingly Abusing GitHub for Malicious Purposes

Infoseccers think attackers backed by China are behind Ivanti zero-day exploits

New PoC Exploit for Apache OfBiz Vulnerability Poses Risk to ERP Systems

New Python-based FBot Hacking Toolkit Aims at Cloud and SaaS Platforms

Child Abusers Are Getting Better at Using Crypto to Cover Their Tracks

Pharmacies Giving Patient Records to Police without Warrants

US School Shooter Emergency Plans Exposed in a Highly Sensitive Database Leak

Siemens Teamcenter Visualization and JT2Go

Siemens Spectrum Power 7

Siemens Solid Edge

Siemens SIMATIC CN 4100

Siemens SIMATIC

Siemens SICAM A8000

Schneider Electric Easergy Studio

Rapid Software LLC Rapid SCADA

Horner Automation Cscape

There is a Ransomware Armageddon Coming for Us All

Atomic Stealer Gets an Upgrade - Targeting Mac Users with Encrypted Payload

A peek behind the curtain: How are sock puppet accounts used in OSINT?

Mandiant's X Account Was Hacked Using Brute-Force Attack

Chinese Hackers Exploit Zero-Day Flaws in Ivanti Connect Secure and Policy Secure

Cisco Fixes High-Risk Vulnerability Impacting Unity Connection Software

~ 10 Jan 2024 ~

Fidelity National now says 1.3M customers had data stolen by cyber-crooks

US government tells hospitals: Meet security standards or no federal dollars for you

Be honest. Would you pay off a ransomware crew?

Cybercrooks play dress-up as 'helpful' researchers in latest ransomware ruse

5 ways to secure identity and access for 2024

Lawmakers Are Out for Blood After a Hack of the SECs X Account Causes Bitcoin Chaos

ShinyHunters chief phisherman gets 3 years, must cough up $5M

NoaBot: Latest Mirai-Based Botnet Targeting SSH Servers for Crypto Mining

Heres Some Bitcoin: Oh, and Youve Been Served!

Facial Scanning by Burger King in Brazil

Getting off the Attack Surface Hamster Wheel: Identity Can Help

Free Decryptor Released for Black Basta and Babuk's Tortilla Ransomware Victims

Attack of the copycats: How fake messaging apps and app mods could bite you

FTC Bans Outlogic (X-Mode) From Selling Sensitive Location Data

Microsoft's January 2024 Windows Update Patches 48 New Vulnerabilities

CISA Flags 6 Vulnerabilities - Apple, Apache, Adobe , D-Link, Joomla Under Attack

~ 9 Jan 2024 ~

New year, new bugs in Windows, Adobe, Android, more to be fixed

The SEC's Official X Account Was Compromised and Used to Post Fake Bitcoin News