March 21, 2024 – SSC Technology & Support

Allowing Calendar Invites

Post author:ssctechops
Post category:Google Calendar

To help keep your Google Calendar free from spam, you can now select an option to display events on your calendar only if they come from a sender you know.…

The Hacker News
Krebs on Security
CSO Online

Malvertising Sends Malware in Pieces, Then Makes the Browser Build the Executable

25 July 2026

A malvertising operation dubbed SourTrade is making victims' browsers build the final Windows executable themselves, using a legitimate Bun runtime as its base instead of serving one complete malicious file [...]

Fastjson 1.x RCE Vulnerability Targeted in Attacks With No Patched Available

25 July 2026

Security firms ThreatBook and Imperva say attackers are targeting a critical flaw in Fastjson, Alibaba's JSON library for Java. In affected Spring Boot applications, a malicious JSON request can execute [...]

Researcher Publishes GitLab RCE PoC Letting Authenticated Users Run Commands as Git

25 July 2026

Security researchers at depthfirst published working exploit code on July 24 for a GitLab flaw that GitLab patched six weeks earlier, on June 10. It runs commands as git on any [...]

CTM360 Research Reveals How Insurance Phishing Has Evolved Into Real-Time Account Hijacking

25 July 2026

For years, phishing campaigns targeting financial institutions followed the same playbook. Victims were tricked into entering usernames and passwords, attackers collected the credentials, and accounts were compromised later when an [...]

Cl0p Affiliates Target Internet-Exposed PTC Windchill and FlexPLM with Unauthenticated RCE

25 July 2026

Threat actors linked to the Cl0p (aka Chubby Scorpius, FIN11, Graceful Spider, and Lace Tempest) ransomware campaign are exploiting flaws in internet-exposed PTC Windmill and FlexPLM deployments as part of [...]

LG to Ban Residential Proxies from Smart TV Apps

22 July 2026

The home appliance giant LG Electronics USA said this week it plans to suspend any apps built for its smart TVs that turn one's television into an always-on residential proxy [...]

Microsoft Patches a Record 570 Security Flaws

14 July 2026

Microsoft Corp. today released software updates to plug at least 570 security holes in its Windows operating systems and other software, almost triple the number of vulnerabilities the software giant [...]

Lessons Learned from CISA’s Recent GitHub Leak

13 July 2026

The Cybersecurity and Infrastructure Security Agency (CISA) has issued a postmortem on a data leak in which a contractor published dozens of internal CISA credentials -- including AWS Govcloud keys [...]

Felons, Fraudsters Flog Offensive Cybersecurity Startup

8 July 2026

A cybersecurity startup dangling millions of dollars to acquire zero-day security vulnerabilities in popular software is run by a pair of far-right conspiracy theorists and convicted felons whose most recent [...]

FBI Seizes NetNut Proxy Platform, Popa Botnet

2 July 2026

The Federal Bureau of Investigation (FBI) said today it worked with industry partners to seize hundreds of domains associated with NetNut, a sprawling residential proxy service operated by the publicly-traded [...]

How CISOs can rise to the business resilience challenge

27 July 2026

CISOs have quietly become their organizations’ de facto chief resilience officers as the role has evolved from its primary prevention roots to now include greater emphasis on incident response and [...]

Top AIs invent same fake PyPl and npm package names

24 July 2026

Enterprise software developers continue to be in danger of falling victim to slopsquatting, where AI coding tools hallucinate the existence of nonexistent libraries and hackers create malicious packages in response. [...]

Tycoon2FA takedown reshapes the phishing landscape

24 July 2026

Traditional phishing techniques are in decline as a result of the disruption of the Tycoon2FA phishing-as-a-service (PHaaS) platform, Microsoft said in a new report, “Email threat landscape: Q2 2026 trends [...]

Ransomware groups are hammering your vulnerable VPNs

24 July 2026

Cybercriminals are actively exploiting a recently discovered vulnerability in Palo Alto Networks firewall and VPN appliances to deploy the Qilin ransomware strain. A critical authentication bypass flaw (CVE-2026-0257) in Palo [...]

AgentForger proves AI agents can become persistent insider threats

24 July 2026

A new attack method found by Zenity Labs reveals that AI agents are becoming persistent insiders that attackers can recruit, rather than malware they have to install. Its researchers have [...]