Chinese Spies Caught Exploiting VMware ESXi Zero Day

MSSQL Makes Up 93% Of All Activity On Honeypots Across 10 DBs

Gozi banking malware “IT chief” finally jailed after more than 10 years

Gozi threesome from way back in the late 2000s and early 2010s now all charged, convicted and sentenced. The DOJ got there in the end...

History revisited: US DOJ unseals Mt. Gox cybercrime charges

Though the mills of the Law grind slowly/Yet they grind exceeding small/Though with patience they stand waiting/With exactness grind they all...

Progress Software Issues New Critical Fix For MOVEit Transfer App

Online Muggers Make Serious Moves On Unpatched Microsoft Bugs

Nvidia's AI Software Tricked Into Leaking Data

Ransomware Gang Clop Prepped Zero Day MOVEit Attacks In 2021

Hacker Attempts To Exploit Old And New Bugs Up 55%

VMware Discloses Trio Of High Severity Bugs In Network Monitoring Tool

MoveIt Hack: What Actions Can Data Breach Victims Take?

Gmail Spoofing Vulnerability Sparks Google Priority 1 Probe

Millions Of Users Vulnerable To Zero Day In MOVEit File Transfer App

Python Byte Code Used To Avoid Detection And Load Malware

S3 Ep137: 16th century crypto skullduggery

Lots to learn, clearly explained in plain English... listen now! (Full transcript inside.)

New Vulnerability Gives MacOS Users A Migraine

Researchers Tell Owners To Assume Compromise Of Unpatched Zyxel Firewalls

Organizations Warned Of Backdoor In Hundreds Of Gigabyte Motherboards

XFS Bug In Linux Kernel 6.3.3 Coincides With SGI Code Comebank

Critical Barracuda 0-Day Was Used To Backdoor Networks For 8 Months

Software Liability And Hard Truths Of Manufacturer Responsibility

Hacker Wins $105k For Reporting Flaws In Sonos One Speakers

OneMain Pays $4.5M After Ignored Security Flaws Caused Data Breaches

Is Cybersecurity An Unsolvable Problem?

Google Cloud Patches Vulnerability In CloudSQL Service

S3 Ep136: Navigating a manic malware maelstrom

Latest episode - listen now. Full transcript inside...

API Bug In OAuth Dev Tool Opened Apps To Account Hijacking

KeePass Bug Lets Attackers Extract The Master Password From Memory

Phone scamming kingpin gets 13 years for running “iSpoof” service

Site marketing video promised total anonymity, but that was a lie. 170 arrested already. Potentially 1000s more to follow.

Cisco Squashes Critical Bugs In Small Biz Switches

Threat Actor Bypasses Detection, Protections In Microsoft Azure Serial Console

US offers $10m bounty for Russian ransomware suspect outed in indictment

"Up to $10 million for information that leads to the arrest and/or conviction of this defendant."

Upstart Encryption App Walks Back Privacy Claims, Pulls From Stores After Probe

Intel Says Friday's Mystery Security Update Microcode Isn't Really A Security Update

Not-Too-Safe Boot: Remotely Bypassing Endpoint Security Solutions And Anti-Tampering Mechanisms

ARM Acknowledges Side-Channel Attack But Denies Cortex-M Is Crocked

Whodunnit? Cybercrook gets 6 years for ransoming his own employer

Not just an active adversary, but a two-faced one, too.

Microsoft Will Take Nearly A Year To Finish Patching New 0-Day Secure Boot Bug

More Than 2 Million Toyota Users Face Risk Of Vehicle Data Leak In Japan

Fujitsu Triggers Privacy Breach At Japanese Convenience Stores

WordPress Plugin Hole Puts 2 Million Websites At Risk

CyberGhost VPN Patches Command Injection Vulnerability

Twitter Admits To Security Incident Involving Circles Tweets

Cisco Warns RCE Bug In EOL IP Phone Adapters Won't Get Patched

Mirai Botnet Loves Exploiting Your Unpatched TP-Link Routers

Operation SpecTor: $53.4 Million Seized, 288 Vendors Arrested in Dark Web Drug Bust

An international law enforcement operation has resulted in the arrest of 288 vendors who are believed to be involved in drug trafficking on the dark web, adding to a long list of criminal enterprises that have been shuttered in recent years. The effort, codenamed Operation SpecTor, also saw the authorities confiscating more than $53.4 million in cash and virtual currencies, 850 kg of drugs, and

Apple Uses Rapid Security Response Feature For The First Time

High Severity SLP Bug Could Launch Amplified DoS Attacks

Sensitive Data Is Being Leaked From Servers Running Salesforce Software

Google wins court order to force ISPs to filter botnet traffic

CryptBot criminals are alleged to have plundered browser passwords, illicitly-snapped screenshots, cryptocurrency account data, and more.

Microsoft Probes Complaints Of Edge Leaking URLs To Bing

VMware Releases Patches For Workstation, Fusion Exploits

Evilflare: Circumventing Cloudflare's Protection

Apache Superset: A Story Of Insecure Default Keys, Thousands Of Vulnerable Systems, Few Paying Attention

Google's New Two-Factor Authentication Isn't End-To-End Encrypted

If You Haven't Patched Microsoft Process Explorer, Prepare To Get Pwned

GhostToken Vuln Could Permanently Expose Data Of Google Users

S3 Ep131: Can you really have fun with FORTRAN?

Loop-the-loop in this week's episode. Entertaining, educational and all in plain English. Transcript inside.

NSO Group Escalates Spyware Tactics With 3 New iPhone Zero-Click Exploit Chains

Russian Snoops Just Love Invading Unpatched Cisco Gear, America And UK Warn