Port 22

~ 9 Jun 2025 ~

Two Distinct Botnets Exploit Wazuh Server Vulnerability to Launch Mirai-Based Attacks

Let them eat junk food: Major organic supplier to Whole Foods, Walmart, hit by cyberattack

Weekly Recap: Chrome 0-Day, Data Wipers, Misused Tools and Zero-Click iPhone Attacks

Think Your IdP or CASB Covers Shadow IT? These 5 Risks Prove Otherwise

A Researcher Figured Out How to Reveal Any Phone Number Linked to a Google Account

OpenAI Bans ChatGPT Accounts Used by Russian, Iranian and Chinese Hacker Groups

New Way to Track Covertly Android Users

Blocking stolen phones from the cloud can be done, should be done, won't be done

Chinese spy crew appears to be preparing for conflict by backdooring 75+ critical orgs

Sleep with one eye open: how Librarian Ghouls steal data by night

Are technologists a threat to doing business securely?

Chinas asteroid-and-comet hunter probe unfurls a solar wing

Monkey365 PowerShell Security Scanner for Microsoft365, Azure, and Entra ID

~ 8 Jun 2025 ~

US infrastructure could crumble under cyberattack, ex-NSA advisor warns

New Supply Chain Malware Operation Hits npm and PyPI Ecosystems, Targeting Millions Globally

Malicious Browser Extensions Infect 722 Users Across Latin America Since Early 2025

Enterprises are getting stuck in AI pilot hell, say Chatterbox Labs execs

~ 7 Jun 2025 ~

The Mystery of iPhone Crashes That Apple Denies Are Linked to Chinese Hacking

~ 6 Jun 2025 ~

New Atomic macOS Stealer Campaign Exploits ClickFix to Target Apple Users

Friday Squid Blogging: Squid Run in Southern New England

ChatGPT used for evil: Fake IT worker resumes, misinfo, and cyber-op assist

Empower Users and Protect Against GenAI Data Loss

Cybercriminals Are Hiding Malicious Web Traffic in Plain Sight

Microsoft Helps CBI Dismantle Indian Call Centers Behind Japanese Tech Support Scam

Hearing on the Federal Government and AI

Fresh strain of pro-Russian wiper flushes Ukrainian critical infrastructure

Inside the Mind of the Adversary: Why More Security Leaders Are Selecting AEV

Report on the Malicious Uses of AI

New PathWiper Data Wiper Malware Disrupts Ukrainian Critical Infrastructure in 2025 Attack

Uncle Sam moves to seize $7.7M laundered by North Korean IT worker ring

Your ransomware nightmare just came true now what?

Analysis of the latest Mirai wave exploiting TBK DVR devices with CVE-2024-3721

ProxyBlob SOCKS5 Over Azure Blob Storage for Covert Network Tunneling

~ 5 Jun 2025 ~

Uncle Sam puts $10M bounty on RedLine dev and Russia-backed cronies

Proxy Services Feast on Ukraines IP Address Exodus

AT&T not sure if new customer data dump is dj vu

Popular Chrome Extensions Leak API Keys, User Data via HTTP and Hardcoded Credentials

Cellebrite buys Corellium to help cops bust phone encryption

Trumps cyber czar pick grilled over CISA cuts: If we have a cyber 9/11, youre the guy

Researchers Detail Bitter APTs Evolving Tactics as Its Geographic Scope Expands

Ross Ulbricht Got a $31 Million Donation From a Dark Web Dealer, Crypto Tracers Suspect

BidenCash busted as Feds nuke stolen credit card bazaar

Connect with us at the Gartner Security & Risk Management Summit

Redefining Cyber Value: Why Business Impact Should Lead the Security Conversation

Iran-Linked BladedFeline Hits Iraqi and Kurdish Targets with Whisper and Spearal Malware

Meet the Deputy CISOs who help shape Microsofts approach to cybersecurity: Part 3

DoJ Seizes 145 Domains Tied to BidenCash Carding Marketplace in Global Takedown

Techno-Legal Internet Controls in Indonesia and Their Impact on Free Expression

More than a hundred backdoored malware repos traced to single GitHub user

Hitachi Energy Relion 670, 650 Series and SAM600-IO Product

CyberData 011209 SIP Emergency Intercom

Critical Cisco ISE Auth Bypass Flaw Impacts Cloud Deployments on AWS, Azure, and OCI

HMRC: Crooks broke into 100k accounts, stole 43M from British taxpayer in late 2024

IT threat evolution in Q1 2025. Non-mobile statistics

IT threat evolution in Q1 2025. Mobile statistics

What Really Happened in the Aftermath of the Lizard Squad Hacks

BladedFeline: Whispering in the dark

AI kept 15-year-old zombie vuln alive, but its time is drawing near

China accuses Taiwan of running five feeble APT gangs, with US help

IBM Cloud login breaks for second time this week and Big Blue isn't saying why

~ 4 Jun 2025 ~

Play ransomware crims exploit SimpleHelp flaw in double-extortion schemes

ICE Quietly Scales Back Rules for Courthouse Raids

Google Exposes Vishing Group UNC6040 Targeting Salesforce with Fake Data Loader App

Ukraine strikes Russian bomber-maker with hack attack

Ransomware scum leak patient data after disrupting chemo treatments at Kettering

Chaos RAT Malware Targets Windows and Linux via Fake Network Tool Downloads

Your SaaS Data Isn't Safe: Why Traditional DLP Solutions Fail in the Browser Era

Malicious PyPI, npm, and Ruby Packages Exposed in Ongoing Open-Source Supply Chain Attacks

Fake IT support calls hit 20 orgs, end in stolen Salesforce data and extortion, Google warns

Crims stole 40,000 people's data from our network, admits publisher Lee Enterprises

The Ramifications of Ukraines Drone Attack

HPE Issues Security Patch for StoreOnce Bug Allowing Remote Authentication Bypass

The Race to Build Trumps Golden Dome Missile Defense System Is On

You're Not Ready for Quantum Cracks

You're Not Ready

The US Grid Attack Looming on the Horizon

The Texting Network for the End of the World

The Rise of Vibe Hacking Is the Next AI Nightmare

Deepfake Scams Are Distorting Reality Itself

A GPS Blackout Would Shut Down the World

UK CyberEM Command to spearhead new era of armed conflict

Ukraine war spurred infosec vet Mikko Hyppnen to pivot to drones

Deliberate attack deletes shopping apps AWS and GitHub resources

Weaponizing Dependabot Exploiting GitHub Automation for Supply Chain Attacks

~ 3 Jun 2025 ~

Meta pauses mobile port tracking tech on Android after researchers cry foul

You say Cozy Bear, I say Midnight Blizzard, Voodoo Bear, APT29

Fake DocuSign, Gitcode Sites Spread NetSupport RAT via Multi-Stage PowerShell Attack

Google quietly pushes emergency fix for Chrome 0-day as exploit runs wild

Critical 10-Year-Old Roundcube Webmail Bug Allows Authenticated Users Run Malicious Code

X's new 'encrypted' XChat feature seems no more secure than the failure that came before it

The PRC Transnational Repression Efforts: Influence, Interference, and Legitimacy

Crooks fleece The North Face accounts with recycled logins

Scattered Spider: Understanding Help Desk Scams and How to Defend Your Organization

How the Farm Industry Spied on Animal Rights Activists and Pushed the FBI to Treat Them as Terrorists

How Microsoft Defender for Endpoint is redefining endpoint security

Android Trojan Crocodilus Now Active in 8 Countries, Targeting Banks and Crypto Wallets

Microsoft patches the patch that put Windows 11 in a coma

Google Chrome to Distrust Two Certificate Authorities Over Compliance and Conduct Issues

Microsoft and CrowdStrike Launch Shared Threat Actor Glossary to Cut Attribution Confusion

Mitsubishi Electric MELSEC iQ-F Series