Threat Note

From Cybercrime Magazine – Cyber Risks Revealed From 3,000+ Pentests

Results from the 2023 BreachLock Penetration Testing Intelligence Report – Steve Morgan, Editor-in-Chief Sausalito, Calif. – Sep. 14, 2023 If you want an in-depth look at the state of penetration…

Samir K September 14, 2023

Articles

From Krebs on Security – FBI Hacker Dropped Stolen Airbus Data on 9/11

In December 2022, KrebsOnSecurity broke the news that a cybercriminal using the handle "USDoD" had infiltrated the FBI's vetted information sharing network InfraGard, and was selling the contact information for…

Samir K September 14, 2023

Research

Smashing Security – Bitcoin boo-boo, deepfakes for good, and time to say goodbye to usernames?

Deepfakes are being used for good (perhaps), common usernames could pose a security threat, and someone has paid a $500,000 fee... just to send $1,865.Oh, and our guest mentions Mr…

Samir K September 13, 2023

Articles

From Krebs on Security – Adobe, Apple, Google & Microsoft Patch 0-Day Bugs

Microsoft today issued software updates to fix at least five dozen security holes in Windows and supported software, including patches for two zero-day vulnerabilities that are already being exploited. Also,…

Samir K September 12, 2023

Podcast

Smashing Security – Catfishing services, bad sports, and another cockup

AI news is bad news, an online service to catch your cheating partner, and an IoT-enabled dick cage fails to keep a grip on its own security.All this and much…

Samir K September 6, 2023

Breaches

From Krebs on Security – Experts Fear Crooks are Cracking Keys Stolen in LastPass Breach

In November 2022, the password manager service LastPass disclosed a breach in which hackers stole password vaults containing both encrypted and plaintext data for more than 25 million users. Since…

Samir K September 6, 2023

Research

Darknet Diaries – 137: Predator

A new type of mercenary spyware came on the radar called Predator. It’ll infect a mobile phone, and then suck up all the data from it. Contacts, text messages, location,…

Samir K September 5, 2023

Research

From Krebs on Security – Why is .US Being Used to Phish So Many of Us?

Domain names ending in “.US” — the top-level domain for the United States — are among the most prevalent in phishing scams, new research shows. This is noteworthy because .US…

Samir K September 1, 2023

News

From Dark Reading – UK Agrees to Support Kuwait’s Cybersecurity Center

The UK has agreed to help the Kuwaitis meet their stated goal of information-sharing and achieving globally coordinated incident response going forward. Read More

Samir K September 1, 2023

Podcast

Smashing Security – The DEA’s crypto calamity, and scammers’ blue tick bonanza

Seized cryptocurrency is stolen from the DEA, blue-ticks are being exploited, a bath full of dollar bills, the comfort offered by an ostrich's head, and how Graham is refusing to…

Samir K August 30, 2023

News

From Dark Reading – South African Department of Defence Denies Stolen Data Claims

Attackers leaked 1.6TB of stolen data, which government officials dismissed as "fake news." Read More

Samir K August 30, 2023

News

From Dark Reading – Somalia Orders ISPs to Block Telegram and TikTok

Officials said the apps were used to "spread horrific content and misinformation to the public." Read More

Samir K August 30, 2023

News

From Dark Reading – Considerations for Reducing Risk When Migrating to the Cloud

Proper planning is an essential part of reducing security and compliance risks before, during, and after a migration to a new cloud environment. Read More

Samir K August 29, 2023

Podcast

Smashing Security – Pizza pests, and securing your wearables

Surely you should be able to order pizza without being pestered for sex? And Carole takes a look at the what and why of wearables...All this and more is discussed…

Samir K August 23, 2023

Vulnerabilities

From Cybersecurity Help – List of vendors and software affected by the Apache Log4J vulnerability (CVE-2021-44228) (Updated)

On this page we display a list of vendors and their software affected by the code injection vulnerability in the Apache Log4J. This page is being updated in real time…

Samir K August 22, 2023

From Security Week – Iranian Hackers Target Defense and Government Officials in Ongoing Campaign

From Cyber Security News – TaskHound Tool – Detects Windows Scheduled Tasks Running with Elevated Privileges and Stored Credentials

From Cybercrime Magazine – Official 2026 Cybersecurity Market Report: Predictions And Statistics

From Cyber Security News – Hackers Leverages Microsoft Entra Tenant Invitations to Launch TOAD Attacks

From Cyber Security News – CISA Warns of Fortinet FortiWeb WAF Vulnerability Exploited in the Wild to Gain Admin Access

From Security Week – DoorDash Says Personal Information Stolen in Data Breach

From Security Week – 5 Plead Guilty in US to Helping North Korean IT Workers

From The Hacker News – ⚡ Weekly Recap: Fortinet Exploited, China’s AI Hacks, PhaaS Empire Falls & More

From Cyber Security News – EVALUSION Campaign Using ClickFix Technique to deploy Amatera Stealer and NetSupport RAT

From Cyber Security News – Critical RCE Vulnerabilities in AI Inference Engines Exposes Meta, Nvidia and Microsoft Frameworks

From Security Week – Iranian Hackers Target Defense and Government Officials in Ongoing Campaign

From Cyber Security News – TaskHound Tool – Detects Windows Scheduled Tasks Running with Elevated Privileges and Stored Credentials

From Cybercrime Magazine – Official 2026 Cybersecurity Market Report: Predictions And Statistics

From Cyber Security News – Hackers Leverages Microsoft Entra Tenant Invitations to Launch TOAD Attacks

From Cyber Security News – CISA Warns of Fortinet FortiWeb WAF Vulnerability Exploited in the Wild to Gain Admin Access

From Security Week – DoorDash Says Personal Information Stolen in Data Breach

From Cybercrime Magazine – Cyber Risks Revealed From 3,000+ Pentests

From Krebs on Security – FBI Hacker Dropped Stolen Airbus Data on 9/11

Smashing Security – Bitcoin boo-boo, deepfakes for good, and time to say goodbye to usernames?

From Krebs on Security – Adobe, Apple, Google & Microsoft Patch 0-Day Bugs

Smashing Security – Catfishing services, bad sports, and another cockup

From Krebs on Security – Experts Fear Crooks are Cracking Keys Stolen in LastPass Breach

Darknet Diaries – 137: Predator

From Krebs on Security – Why is .US Being Used to Phish So Many of Us?

From Dark Reading – UK Agrees to Support Kuwait’s Cybersecurity Center

Smashing Security – The DEA’s crypto calamity, and scammers’ blue tick bonanza

From Dark Reading – South African Department of Defence Denies Stolen Data Claims

From Dark Reading – Somalia Orders ISPs to Block Telegram and TikTok

From Dark Reading – Considerations for Reducing Risk When Migrating to the Cloud

Smashing Security – Pizza pests, and securing your wearables

From Cybersecurity Help – List of vendors and software affected by the Apache Log4J vulnerability (CVE-2021-44228) (Updated)