Port 22

~ 14 May 2025 ~

Patch Tuesday, May 2025 Edition

Googles Advanced Protection Now on Android

North Korean IT Workers Are Being Exposed on a Massive Scale

Fortinet Patches CVE-2025-32756 Zero-Day RCE Flaw Exploited in FortiVoice Systems

Ivanti Patches EPMM Vulnerabilities Exploited for Remote Code Execution in Limited Attacks

Everyone's deploying AI, but no one's securing it what could go wrong?

Ransomware scum have put a target on the no man's land between IT and operations

Best Open Source HIDS Tools for Linux in 2025 (Compared & Ranked)

Apple patched one first, but Microsofts blasted five exploited flaws this Pa-Tu

~ 13 May 2025 ~

Intel's data-leaking Spectre defenses scared off yet again

Metrics of Sovereignty: Mixed Methods Approach to Sovereign Networks

China-Linked APTs Exploit SAP CVE-2025-31324 to Breach 581 Critical Systems Worldwide

Qatars $400M jet for Trump is a gold-plated security nightmare

Malicious PyPI Package Posing as Solana Tool Stole Source Code in 761 Downloads

Googles Advanced Protection for Vulnerable Users Comes to Android

Commvault fixes critical Command Center issue after flaw finder alert

Google Is Using On-Device AI to Spot Scam Texts and Investment Fraud

Deepfake Defense in the Age of AI

North Korean Konni APT Targets Ukraine with Malware to track Russian Invasion Progress

'We still have embeds in CISA': CTO of Brit cyber agency talks post-Trump relationship with US counterpart

An $8.4 Billion Chinese Hub for Crypto Crime Is Incorporated in Colorado

Moldovan Police Arrest Suspect in 4.5M Ransomware Attack on Dutch Research Agency

Hitachi Energy Service Suite

Hitachi Energy Relion 670/650/SAM600-IO Series

Hitachi Energy MACH GWS Products

ABB Automation Builder

Court Rules Against NSO Group

Marks & Spencer admits cybercrooks made off with customer info

Trkiye Hackers Exploited Output Messenger Zero-Day to Drop Golang Backdoors on Kurdish Servers

Using a Mythic agent to optimize penetration testing

As US vuln-tracking falters, EU enters with its own security bug database

Trkiye-linked spy crew exploited a messaging app zero-day to snoop on Kurdish army in Iraq

~ 12 May 2025 ~

M365 apps on Windows 10 to get security fixes into 2028

ASUS Patches DriverHub RCE Flaws Exploitable via HTTP and Crafted .ini Files

CISA mutes own website, shifts routine cyber alerts to Musks X, RSS, email

Why aggregating your asset inventory leads to better security

Weekly Recap: Zero-Day Exploits, Developer Malware, IoT Botnets, and AI-Powered Scams

Attackers pwn charter airline helping Trump's deportation campaign

The Persistence Problem: Why Exposed Credentials Remain Unfixedand How to Change That

Marbled Dust leverages zero-day in Output Messenger for regional espionage

WireWatch: Measuring the Security of Proprietary Network Encryption in the Global Android Ecosystem

Fake AI Tools Used to Spread Noodlophile Malware, Targeting 62,000+ via Facebook Lures

SUDO_KILLER Auditing Sudo Configurations for Privilege Escalation Paths

Florida Backdoor Bill Fails

Deepfakes, Scams, and the Age of Paranoia

Britain's cyber agents and industry clash over how to tackle shoddy software

How can we counter online disinformation? | Unlocked 403 cybersecurity podcast (S2E2)

Unending ransomware attacks are a symptom, not the sickness

DOGE worker's old creds found exposed in infostealer malware dumps

~ 11 May 2025 ~

You think ransomware is bad now? Wait until it infects CPUs

~ 10 May 2025 ~

Feds disrupt proxy-for-hire botnet, indict four alleged net miscreants

Google Pays $1.375 Billion to Texas Over Unauthorized Tracking and Biometric Data Collection

Germany Shuts Down eXch Over $1.9B Laundering, Seizes 34M in Crypto and 8TB of Data

UK Ministry of Defence is spending less with US biz, and more with Europeans

ICEs Deportation Airline Hack Reveals Man Disappeared to El Salvador

~ 9 May 2025 ~

BREAKING: 7,000-Device Proxy Botnet Using IoT, EoL Systems Dismantled in U.S. - Dutch Operation

OtterCookie v4 Adds VM Detection and Chrome, MetaMask Credential Theft Capabilities

Friday Squid Blogging: Japanese Divers Video Giant Squid

VC behemoth Insight Partners fears top-secret financial info swiped by cyber-miscreants

US Customs and Border Protection Plans to Photograph Everyone Exiting the US by Car

Initial Access Brokers Target Brazil Execs via NF-e Spam and Legit RMM Trials

Deploying AI Agents? Learn to Secure Them Before Hackers Strike Your Business

Malicious npm Packages Infect 3,200+ Cursor Users With Backdoor, Steal Credentials

Beyond Vulnerability Management Can You CVE What I CVE?

Google Rolls Out On-Device AI Protections to Detect Scams in Chrome and Android

openSUSE deep sixes Deepin desktop over security stink

Chinese Hackers Exploit SAP RCE Flaw CVE-2025-31324, Deploy Golang-Based SuperShell

Catching a phish with many faces

Bantam Advanced PHP Backdoor Management Tool For Post Exploitation

~ 8 May 2025 ~

US Customs and Border Protection Quietly Revokes Protections for Pregnant Women and Infants

38,000+ FreeDrain Subdomains Found Exploiting SEO to Steal Crypto Wallet Seed Phrases

SonicWall Patches 3 Flaws in SMA 100 Devices Allowing Attackers to Run Code as Root

Qilin Leads April 2025 Ransomware Spike with 45 Breaches Using NETXLOADER Malware

Security Tools Alone Don't Protect You Control Effectiveness Does

MirrorFace Targets Japan and Taiwan with ROAMINGMOUSE and Upgraded ANEL Malware

Russian Hackers Using ClickFix Fake CAPTCHA to Deploy New LOSTKEYS Malware

Mitsubishi Electric CC-Link IE TSN

Horner Automation Cscape

Hitachi Energy RTU500 Series

Cisco Patches CVE-2025-20188 (10.0 CVSS) in IOS XE That Enables Root Exploits via JWT

Sudo-rs make me a sandwich, hold the buffer overflows

PowerSchool paid thieves to delete stolen student, teacher data. Crooks may have lied

~ 7 May 2025 ~

After that 2024 Windows fiasco, CrowdStrike has a plan jobs cuts, leaning on AI

Pakistani Firm Shipped Fentanyl Analogs, Scams to US

Customs and Border Protection Confirms Its Use of Hacked Signal Clone TeleMessage

Europol Shuts Down Six DDoS-for-Hire Services Used in Global Attacks

OttoKit WordPress Plugin with 100K+ Installs Hit by Exploits Targeting Multiple Flaws

Delta Air Lines class action cleared for takeoff over CrowdStrike chaos

The Trump Administration Sure Is Having Trouble Keeping Its Comms Private

You'll never guess which mobile browser is the worst for data collection

SysAid Patches 4 Critical Flaws Enabling Pre-Auth RCE in On-Premise Version

Reevaluating SSEs: A Technical Gap Analysis of Last-Mile Protection

Play Ransomware Exploited Windows CVE-2025-29824 as Zero-Day to Breach U.S. Organization

Meet the Deputy CISOs who help shape Microsofts approach to cybersecurity: Part 2

Researchers Uncover Malware in Fake Discord PyPI Package Downloaded 11,500+ Times

NSO Group Fined $168M for Targeting 1,400 WhatsApp Users With Pegasus Spyware

Chinese AI Submersible

Curl project founder snaps over deluge of time-sucking AI slop bug reports

State of ransomware in 2025

Beware of phone scams demanding money for missed jury duty