Port 22

~ 25 Apr 2025 ~

Signalgate lessons learned: If creating a culture of security is the goal, America is screwed

Amid CVE funding fumble, 'we were mushrooms, kept in the dark,' says board member

Friday Squid Blogging: Squid Facts on Your Phone

North Korean Hackers Spread Malware via Fake Crypto Firms and Job Interview Lures

More Ivanti attacks may be on horizon, say experts who are seeing 9x surge in endpoint scans

Oh, cool. Microsoft melts bug that froze Server 2025 Remote Desktop sessions

M&S stops online orders as 'cyber incident' issues worsen

SAP Confirms Critical NetWeaver Flaw Amid Suspected Zero-Day Exploitation by Hackers

Why NHIs Are Security's Most Dangerous Blind Spot

Explore practical best practices to secure your data with Microsoft Purview

Emergency patch for potential SAP zero-day that could grant full system control

Researchers Identify Rack::Static Vulnerability Enabling Data Breaches in Ruby Servers

DslogdRAT Malware Deployed via Ivanti ICS Zero-Day CVE-2025-0282 in Japan Attacks

Cryptocurrency Thefts Get Physical

Triada strikes back

Claims assistance firm fined for cold-calling people who put themselves on opt-out list

Darcula adds AI to its DIY phishing kits to help would-be vampires bleed victims dry

~ 24 Apr 2025 ~

Protecting Your Phoneand Your Privacyat the US Border

The Real Lesson of SignalGate: A Surveillance Arms Race Has Poked a Gaping Hole in National Security

SSNs and more on 5.5M+ patients feared stolen from Yale Health

Lazarus Hits 6 South Korean Firms via Cross EX, Innorix Zero-Day and ThreatNeedle Malware

New Linux Rootkit

Linux io_uring PoC Rootkit Bypasses System Call-Based Threat Detection Tools

159 CVEs Exploited in Q1 2025 28.3% Within 24 Hours of Disclosure

Microsoft mystery folder fix might need a fix of its own

Darcula Adds GenAI to Phishing Toolkit, Lowering the Barrier for Cybercriminals

New whitepaper outlines the taxonomy of failure modes in AI agents

Gmails New Encrypted Messages Feature Opens a Door for Scams

Automating Zero Trust in Healthcare: From Risk Scoring to Dynamic Policy Enforcement Without Network Redesign

Assassin's Creed maker faces GDPR complaint for forcing single-player gamers online

Critical Commvault Command Center Flaw Enables Attackers to Execute Code Remotely

Ron Deibert on CBC Ideas: Spyware Abusers Can Easily Hack Your Phone and Surveil You

Vestel AC Charger

Schneider Electric Modicon Controllers

Planet Technology Network Products

Nice Linear eMerge E3

Johnson Controls ICU

ALBEDO Telecom Net.Time - PTP/NTP Clock

M&S takes systems offline as 'cyber incident' lingers

WhatsApp Adds Advanced Chat Privacy to Blocks Chat Exports and Auto-Downloads

Your vendor may be the weakest link: Percentage of third-party breaches doubled in a year

Booby-trapped Alpine Quest Android app geolocates Russian soldiers

Operation SyncHole: Lazarus APT goes back to the well

Ransomware scum and other crims bilked victims out of a 'staggering' $16.6B last year, says FBI

~ 23 Apr 2025 ~

DPRK Hackers Steal $137M from TRON Users in Single-Day Phishing Attack

Blue Shield says it shared health info on up to 4.7M patients with Google Ads

DOGE Workers Code Supports NLRB Whistleblower

Iran-Linked Hackers Target Israel with MURKYTOUR Malware via Fake Job Campaign

Ripple NPM supply chain attack hunts for private keys

Android Spyware Disguised as Alpine Quest App Targets Russian Military Devices

Were calling it now: Agentic AI will win RSAC buzzword Bingo

Three Reasons Why the Browser is Best for Stopping Phishing Attacks

Russian Hackers Exploit Microsoft OAuth to Target Ukraine Allies via Signal and WhatsApp

Regulating AI Behavior with a Hypervisor

Understanding the threat landscape for Kubernetes and containerized assets

Who needs phishing when your login's already in the wild?

Ripple's xrpl.js npm Package Backdoored to Steal Private Keys in Major Supply Chain Attack

Google Drops Cookie Prompt in Chrome, Adds IP Protection to Incognito

Ex-NSA chief warns AI devs: Dont repeat infosecs early-day screwups

How fraudsters abuse Google Forms to spread scams

America's cyber defenses are being dismantled from the inside

The Tech That Safeguards the Conclaves Secrecy

~ 22 Apr 2025 ~

Docker Malware Exploits Teneo Web3 Node to Earn Crypto via Fake Heartbeat Signals

RIP, Google Privacy Sandbox

GCP Cloud Composer Bug Let Attackers Elevate Access via Malicious PyPI Packages

Two CISA officials jump ship, both proud of pushing for Secure by Design software

Fog ransomware channels Musk with demands for work recaps or a trillion bucks

A pot of $250K is now available to ransomware researchers, but it feeds a commercial product

5 Major Concerns With Employees Using The Browser

Phishers Exploit Google Sites and DKIM Replay to Send Signed Emails, Steal Credentials

This is not just any 'cyber incident' this is an M&S 'cyber incident'

Android Improves Its Security

UN says Asian scam call center epidemic expanding globally amid political heat

Microsoft Secures MSA Signing with Azure Confidential VMs Following Storm-0558 Breach

Russian organizations targeted by backdoor masquerading as secure networking software updates

Siemens TeleControl Server Basic SQL

Siemens TeleControl Server Basic

Schneider Electric Wiser Home Controller WHC-5918A

ABB MV Drives

Lotus Panda Hacks SE Asian Governments With Browser Stealers and Sideloaded Malware

Will super-smart AI be attacking us anytime soon?

Bug hunter tricked SSL.com into issuing cert for Alibaba Cloud domain in 5 steps

Whistleblower: DOGE Siphoned NLRB Case Data

~ 21 Apr 2025 ~

Kimsuky Exploits BlueKeep RDP Vulnerability to Breach Systems in South Korea and Japan

SuperCard X Android Malware Enables Contactless ATM and PoS Fraud via NFC Relay Attacks

Today's LLMs craft exploits from patches at lightning speed

Microsoft rated this bug as low exploitability. Miscreants weaponized it in just 8 days

5 Reasons Device Management Isn't Device Trust

THN Weekly Recap: iOS Zero-Days, 4Chan Breach, NTLM Exploits, WhatsApp Spyware & More

Securing our future: April 2025 progress report on Microsofts Secure Future Initiative

Hackers Abuse Russian Bulletproof Host Proton66 for Global Attacks and Malware Delivery

Lumma Stealer Tracking distribution channels

How to Protect Yourself From Phone Searches at the US Border

Phishing attacks leveraging HTML code inside SVG files

~ 20 Apr 2025 ~

APT29 Deploys GRAPELOADER Malware Targeting European Diplomats Through Wine-Tasting Lures

~ 19 Apr 2025 ~

Rogue npm Packages Mimic Telegram Bot API to Plant SSH Backdoors on Linux Systems

ASUS Confirms Critical Flaw in AiCloud Routers; Users Urged to Update Firmware

Hacking US crosswalks to talk like Zuck is as easy as 1234

Florida Man Enters the Encryption Wars

~ 18 Apr 2025 ~

Friday Squid Blogging: Live Colossal Squid Filmed