Port 22

~ 1 Apr 2025 ~

Over 1,500 PostgreSQL Servers Compromised in Fileless Cryptocurrency Mining Campaign

Enterprise Gmail Users Can Now Send End-to-End Encrypted Emails to Any Platform

Lucid PhaaS Hits 169 Targets in 88 Countries Using iMessage and RCS Smishing

Apple Backports Critical Fixes for 3 Live Exploits Impacting iOS and macOS Legacy Devices

Nearly 24,000 IPs Target PAN-OS GlobalProtect in Coordinated Login Scan Campaign

New Case Study: Global Retailer Overshares CSRF Tokens with Facebook

China-Linked Earth Alux Uses VARGEIT and COBEACON in Multi-Stage Cyber Intrusions

Transforming public sector security operations in the AI era

Gender-Based Digital Transnational Repression and the Authoritarian Targeting of Women in the Diaspora

Microsoft to mark five decades of Ctrl-Alt-Deleting the competition

Google makes end-to-end encrypted Gmail easy for all even Outlook users

Rockwell Automation Lifecycle Services with Veeam Backup and Replication

UK threatens 100K-a-day fines under new cyber bill

Apple Fined 150 Million by French Regulator Over Discriminatory ATT Consent Practices

Cell Phone OPSEC for Border Crossings

GCHQ intern took top secret spy tool home, now faces prison

CISA spots spawn of Spawn malware targeting Ivanti flaw

~ 31 Mar 2025 ~

Top cybersecurity boffin, wife vanish as FBI raids homes

Russian Hackers Exploit CVE-2025-26633 via MSC EvilTwin to Deploy SilentPrism and DarkWisp

Oracle Cloud security SNAFU latest: IT giant accused of pedantry as evidence vanishes

Cybersecurity Professor Mysteriously Disappears as FBI Raids His Homes

Hackers Exploit WordPress mu-Plugins to Inject Spam and Hijack Site Images

Weekly Recap: Chrome 0-Day, IngressNightmare, Solar Bugs, DNS Tactics, and More

Check Point confirms breach, but says it was 'old' data and crook made 'false' claims

5 Impactful AWS Vulnerabilities You're Responsible For

Analyzing open-source bootloaders: Finding vulnerabilities faster with AI

Russia-Linked Gamaredon Uses Troop-Related Lures to Deploy Remcos RAT in Ukraine

New innovations in Microsoft Purview for protected, AI-ready data

The Signal Chat Leak and the NSA

Cloud security explained: Whats left exposed?

An AI Image Generators Exposed Database Reveals What People Really Used It For

How Each Pillar of the 1st Amendment is Under Attack

China cracks down on personal information collection. No, seriously

~ 30 Mar 2025 ~

Oracle Health reportedly warns of info leak from legacy server

RESURGE Malware Exploits Ivanti Flaw with Rootkit and Web Shell Features

~ 29 Mar 2025 ~

New Android Trojan Crocodilus Abuses Accessibility to Steal Banking and Crypto Credentials

Malware in Lisp? Now you're just being cruel

Top Trump Officials Passwords and Personal Phone Numbers Discovered Online

BlackLock Ransomware Exposed After Researchers Exploit Leak Site Vulnerability

~ 28 Mar 2025 ~

Friday Squid Blogging: Squid Werewolf Hacking Group

Researchers Uncover 46 Critical Flaws in Solar Inverters From Sungrow, Growatt, and SMA

CoffeeLoader Uses GPU-Based Armoury Packer to Evade EDR and Antivirus Detection

Product Walkthrough: How Datto BCDR Delivers Unstoppable Business Continuity

PJobRAT Malware Campaign Targeted Taiwanese Users via Fake Chat Apps

Cardiff's children's chief confirms data leak 2 months after cyber risk was 'escalated'

Nine-Year-Old npm Packages Hijacked to Exfiltrate API Keys via Obfuscated Scripts

Mozilla Patches Critical Firefox Bug Similar to Chromes Recent Zero-Day Vulnerability

AIs as Trusted Third Parties

After Chrome patches zero-day used to target Russians, Firefox splats similar bug

Cyber-crew claims it cracked American cableco, releases terrible music video to prove it

~ 27 Mar 2025 ~

New Morphing Meerkat Phishing Kit Mimics 114 Brands Using Victims DNS Email Records

Chinas FamousSparrow flies back into action, breaches US org after years off the radar

Even More Venmo Accounts Tied to Trump Officials in Signal Group Chat Left Data Public

Hackers Repurpose RansomHub's EDRKillShifter in Medusa, BianLian, and Play Attacks

SignalGate Is Driving the Most US Downloads of Signal Ever

APT36 Spoofs India Post Website to Infect Windows and Android Users with Malware

New Report Explains Why CASB Solutions Fail to Address Shadow SaaS and HowtoFixIt

When Getting Phished Puts You in Mortal Danger

Security shop pwns ransomware gang, passes insider info to authorities

US Department of Labors journey to Zero Trust security with Microsoft Entra ID

Top 3 MS Office Exploits Hackers Use in 2025 Stay Alert!

150,000 Sites Compromised by JavaScript Injection Promoting Chinese Gambling Platforms

CrushFTP CEO's feisty response to VulnCheck's CVE for critical make-me-admin bug

CISA Warns of Sitecore RCE Flaws; Active Exploits Hit Next.js and DrayTek Devices

NetApp SnapCenter Flaw Could Let Users Gain Remote Admin Access on Plug-In Systems

A Taxonomy of Adversarial Machine Learning Attacks and Mitigations

UK's first permanent facial recognition cameras installed in South London

Ransomwared NHS software supplier nabs 3M discount from ICO for good behavior

~ 26 Mar 2025 ~

New SparrowDoor Backdoor Variants Found in Attacks on U.S. and Mexican Organizations

Signalgate storm intensifies as journalist releases full secret Houthi airstrike chat

Mike Waltz Left His Venmo Friends List Public

US defense contractor cops to sloppy security, settles after infosec lead blows whistle

EncryptHub Exploits Windows Zero-Day to Deploy Rhadamanthys and StealC Malware

RedCurl Shifts from Espionage to Ransomware with First-Ever QWCrypt Deployment

SignalGate Isn't About Signal

Malicious npm Package Modifies Local 'ethers' Library to Launch Reverse Shell Attacks

Files stolen from NSW court system, including restraining orders for violence

Sparring in the Cyber Ring: Using Automated Pentesting to Build Resilience

How PAM Mitigates Insider Threats: Preventing Data Breaches, Privilege Misuse, and More

Credible nerd says stop using atop, doesn't say why, everyone panics

Hackers Using E-Crime Tool Atlantis AIO for Credential Stuffing on 140+ Platforms

AI Data Poisoning

NCSC taps influencers to make 2FA go viral

Zero-Day Alert: Google Releases Chrome Patch for Exploit Used in Russian Espionage Attacks

New Security Flaws Found in VMware Tools and CrushFTP High Risk, No Workaround

~ 25 Mar 2025 ~

Operation ForumTroll: APT attack with Google Chrome zero-day exploit chain

Job Opportunity Systems and Security Administrator

Researchers Uncover ~200 Unique C2 Domains Linked to Raspberry Robin Access Broker

There are perhaps 10,000 reasons to doubt Oracle Cloud's security breach denial

Chinese Hackers Breach Asian Telecom, Remain Undetected for Over 4 Years

AI-Powered SaaS Security: Keeping Pace with an Expanding Attack Surface

Hackers Use .NET MAUI to Target Indian and Chinese Users with Fake Banking, Social Apps

Infosec pro Troy Hunt HasBeenPwned in Mailchimp phish

INTERPOL Arrests 306 Suspects, Seizes 1,842 Devices in Cross-Border Cybercrime Bust

Rockwell Automation Verve Asset Manager

Rockwell Automation 440G TLS-Z

Inaba Denki Sangyo CHOCO TEI WATCHER Mini

ABB RMC-100

Report on Paragon Spyware

You know that generative AI browser assistant extension is probably beaming everything to the cloud, right?