Port 22

~ 17 Apr 2023 ~

ICE Records Reveal How Agents Abuse Access to Secret Data

QBot banker delivered through business correspondence

Firmware is on shaky ground let's see what it's made of

Vice Society Ransomware Using Stealthy PowerShell Tool for Data Exfiltration

Student requested access to research data. And waited. And waited. And then hacked to get root

New Zaraza Bot Credential-Stealer Sold on Telegram Targeting 38 Web Browsers

Update now: Google emits emergency fix for zero-day Chrome vulnerability

Your Security Awareness Program Can Do More Than You Think: Fulfilling the Promise of Training for All

What are Sock Puppets in OSINT

~ 15 Apr 2023 ~

Security Roundup: Leak of Top-Secret US Intel Risks a New Wave of Mass Surveillance

Are You Being Tracked by an AirTag? Heres How to Check

Google Releases Urgent Chrome Update to Fix Actively Exploited Zero-Day Vulnerability

Montanas Looming TikTok Ban Is a Dangerous Tipping Point

~ 14 Apr 2023 ~

Russia-pushed UN Cybercrime Treaty may rewrite global law. It's ... not great

US extradites Nigerian charged in $6m email fraud scam

Friday Squid Blogging: Colossal Squid

Russian SolarWinds Culprits Launch Fresh Barrage of Espionage Cyberattacks

Why is Juice Jacking Suddenly Back in the News?

Upcoming Speaking Engagements

Why xIoT Devices Are Cyberattackers' Gateway Drug for Lateral Movement

Software-Dependency Data Delivers Security to Developers

Hacking Suicide

Security Is a Revenue Booster, Not a Cost Center

Bugs in Manarium Play-to-Earn Showcase Crypto-Gaming Insecurity

Compatibility mess breaks not one but two Windows password tools

Western Digital Hackers Demand 8-Figure Ransom Payment for Data

SASE Market Worth $5.9B by 2028 Report by MarketsandMarkets

What the Recent Collapse of SVB Means for Privacy

Russia-Linked Hackers Launches Espionage Attacks on Foreign Diplomatic Entities

Gaining an Advantage in Roulette

Hunting down BlackLotus Week in security with Tony Anscombe

Kodi Confirms Data Breach: 400K User Records and Private Messages Stolen

While Twitter wants to sell its verification, Microsoft will do it for free on LinkedIn

Safety first: 5 cybersecurity tips for freelance bloggers

Severe Android and Novi Survey Vulnerabilities Under Active Exploitation

Webinar: Tips from MSSPs to MSSPs Building a Profitable vCISO Practice

Linux kernel logic allowed Spectre attack on 'major cloud provider'

To improve security, consider how the aviation industry stopped blaming pilots

Cybersecurity Jobs: CISO (Japanese)

Cybersecurity Jobs: Blue Teamer (Japanese)

~ 13 Apr 2023 ~

New Mirai Variant Employs Uncommon Tactics to Distribute Malware

Money Ransomware Group Enters Double-Extortion Fray

Why the US Needs Quantum-Safe Cryptography Deployed Now

Remcos RAT Targets Tax Pros to Scurry Off With Workers' Filing Info

~ 14 Apr 2023 ~

Google Launches New Cybersecurity Initiatives to Strengthen Vulnerability Management

~ 13 Apr 2023 ~

Pentagon super-leak suspect cuffed: 21-year-old Air National Guardsman

Super-Yacht Specialist Lrssen in Dry Dock After Ransomware Attack

Threat actors strive to cause Tax Day headaches

The Internet Reform Trilemma

RTM Locker: Emerging Cybercrime Group Targeting Businesses with Ransomware

The Hacking of ChatGPT Is Just Getting Started

Majority of US IT Pros Told to Keep Quiet About Data Breaches

Legion Malware Marches onto Web Servers to Steal Credentials, Spam Mobile Users

Improve supply chain security and resiliency with Microsoft

How to Define Tier-Zero Assets in Active Directory Security

WhatsApp Introduces New Device Verification Feature to Prevent Account Takeover Attacks

Bypassing a Theft Threat Model

Why Shadow APIs are More Dangerous than You Think

Pakistan-based Transparent Tribe Hackers Targeting Indian Educational Institutions

Lazarus Hacker Group Evolves Tactics, Tools, and Targets in DeathNote Campaign

Uncommon infection methodspart 2

ChatGPT Security: OpenAI's Bug Bounty Program Offers Up to $20,000 Prizes

Google Tackles Open Source Security With New Dependency Service

~ 12 Apr 2023 ~

How insecure is America's FirstNet emergency response system? No one's sure

FBI: How fake Xi cops prey on Chinese nationals in the US