Port 22

~ 3 Jun 2025 ~

Schneider Electric Wiser Home Automation

Schneider Electric EcoStruxure Power Build Rapsody

Illicit crypto-miners pouncing on lazy DevOps configs that leave clouds vulnerable

New Linux Vulnerabilities

Host-based logs, container-based threats: How to tell where an attack began

Bling slinger Cartier tells customers to be wary of phishing attacks after intrusion

New Chrome Zero-Day Actively Exploited; Google Issues Emergency Out-of-Band Patch

~ 2 Jun 2025 ~

Cryptojacking Campaign Exploits DevOps APIs Using Off-the-Shelf Tools from GitHub

Preinstalled Apps on Ulefone, Krger&Matz Phones Let Any App Reset Device, Steal PIN

Ukrainians smuggle drones hidden in cabins on trucks to strike Russian airfields

Qualcomm Fixes 3 Zero-Days Used in Targeted Android Attacks via Adreno GPU

Discover how automatic attack disruption protects critical assets while ensuring business continuity

Weekly Recap: APT Intrusions, AI Malware, Zero-Click Exploits, Browser Hijacks and More

The Secret Defense Strategy of Four Critical Industries Combating Advanced Cyber Threats

Announcing a new strategic collaboration to bring clarity to threat actor naming

US community bank says thieves drained customer data through third party hole

Fake Recruiter Emails Target CFOs Using Legit NetBird Tool Across 6 Global Regions

Australia Requires Ransomware Victims to Declare Payments

Dont let dormant accounts become a doorway for cybercriminals

Lumma infostealer takedown may have inflicted only a flesh wound as crew keeps pinching and selling data

OSSEC Open Source Host-Based Intrusion Detection for Linux, Windows and Unix Systems

~ 31 May 2025 ~

New Linux Flaws Allow Password Hash Theft via Core Dumps in Ubuntu, RHEL, Fedora

U.S. DoJ Seizes 4 Domains Supporting Cybercrime Crypting Services in Global Operation

Mysterious leaker GangExposed outs Conti kingpins in massive ransomware data dump

~ 30 May 2025 ~

New EDDIESTEALER Malware Bypasses Chrome's App-Bound Encryption to Steal Browser Data

ConnectWise customers get mysterious warning about 'sophisticated' nation-state hack

A Hacker May Have Deepfaked Trumps Chief of Staff in a Phishing Campaign

Feds arrest DoD techie, claim he dumped top secret files in park for foreign spies to find

US medical org pays $50M+ to settle case after crims raided data and threatened to swat cancer patients

China-Linked Hackers Exploit SAP and SQL Server Flaws in Attacks Across Asia and Brazil

Meta yep, Facebook Meta is now a defense contractor

From the "Department of No" to a "Culture of Yes": A Healthcare CISO's Journey to Enabling Modern Care

Cops in Germany Claim They've ID'd the Mysterious Trickbot Ransomware Kingpin

U.S. Sanctions Funnull for $200M Romance Baiting Scams Tied to Crypto Fraud

Exploits and vulnerabilities in Q1 2025

ConnectWise Hit by Cyberattack; Nation-State Actor Suspected in Targeted Breach

Why Take9 Wont Improve Cybersecurity

Crims defeat human intelligence with fake AI installers they poison with ransomware

Meta Disrupts Influence Ops Targeting Romania, Azerbaijan, and Taiwan with Fake Personas

Data watchdog put cops on naughty step for lost CCTV footage

This month in security with Tony Anscombe May 2025 edition

The UK wants you to sign up for 1B cyber defense force

Infosecurity Europe 2025 drives cybersecurity priorities amid growing global risks

U.S. Sanctions Cloud Provider Funnull as Top Source of Pig Butchering Scams

Security outfit SentinelOne's services back online after lengthy outage

Feds gut host behind pig butchering scams that bilked $200M from Americans

~ 29 May 2025 ~

Microsoft's May Patch Tuesday update fails on some Windows 11 VMs

Cybercriminals Target AI Users with Malware-Loaded Installers Posing as Popular Tools

Friday Squid Blogging: NGC 1068 Is the Squid Galaxy

Why is China deep in US networks? 'They're preparing for war,' HR McMaster tells lawmakers

New Windows RAT Evades Detection for Weeks Using Corrupted DOS and PE Headers

A Swedish MMA Tournament Spotlights the Trump Administration's Handling of Far-Right Terrorism

Defending against evolving identity attack techniques

8,000+ Asus routers popped in 'advanced' mystery botnet plot

DragonForce Exploits SimpleHelp Flaws to Deploy Ransomware Across Customer Endpoints

How to deploy AI safely

Billions of cookies up for grabs as experts warn over session security

Siemens SiPass Integrated

Siemens SiPass

Instantel Micromate

Consilium Safety CS5000 Fire Panel

Chinese APT41 Exploits Google Calendar for Malware Command-and-Control Operations

Surveillance Via Smart Toothbrush

Over 100,000 WordPress Sites at Risk from Critical CVSS 10.0 Vulnerability in Wishlist Plugin

The US Is Storing Migrant Childrens DNA in a Criminal Database

European Commission: Make Europe Great Again... for startups

Victoria's Secret website laid bare for three days after 'security incident'

Adversarial AI: The new frontier in financial cybersecurity

~ 28 May 2025 ~

Iranian Hacker Pleads Guilty in $19 Million Robbinhood Ransomware Attack on Baltimore

Czech Republic Blames China-Linked APT31 Hackers for 2022 Cyberattack

Microsoft OneDrive File Picker Flaw Grants Apps Full Cloud Access Even When Uploading Just One File

Attack on LexisNexis Risk Solutions exposes data on 300k +

New PumaBot Botnet Targets Linux IoT Devices to Steal SSH Credentials and Mine Crypto

Pakistan Arrests 21 in Heartsender Malware Service

From Infection to Access: A 24-Hour Timeline of a Modern Stealer Campaign

Mimo Hackers Exploit CVE-2025-32432 in Craft CMS to Deploy Cryptominer and Proxyware

How 'Browser-in-the-Middle' Attacks Steal Sessions in Seconds

251 Amazon-Hosted IPs Used in Exploit Scan Targeting ColdFusion, Struts, and Elasticsearch

Russian IT pro sentenced to 14 years forced labor for sharing medical data with Ukraine

Apple Blocks $9 Billion in Fraud Over 5 Years Amid Rising App Store Threats

Location Tracking App for Foreigners in Moscow

Zanubis in motion: Tracing the active evolution of the Android banking malware

The cost of compromise: Why password attacks are still winning in 2025

DragonForce double-whammy: First hit an MSP, then use RMM software to push ransomware

ASUS to chase business PC market with free AI, or no AI - because nobody knows what to do with it

Ubers Secret Management Platform Scaling Secrets Security Across Multi-Cloud

~ 27 May 2025 ~

Don't click on that Facebook ad for a text-to-AI-video tool

New Self-Spreading Malware Infects Docker Containers to Mine Dero Cryptocurrency

Cybercriminals Clone Antivirus Site to Spread Venom RAT and Steal Crypto Wallets

New Russian cyber-spy crew Laundry Bear joins the email-stealing pack

Russian Hackers Breach 20+ NGOs Using Evilginx Phishing via Fake Microsoft Entra Pages

AI Agents and the NonHuman Identity Crisis: How to Deploy AIMore SecurelyatScale

The future of AI agentsand why OAuth must evolve

Employees Searching Payroll Portals on Google Tricked Into Sending Paychecks to Hackers

Adidas confirms criminals stole data from customer service provider

Hackers Are Calling Your Office: FBI Alerts Law Firms to Luna Moths Stealth Phishing Campaign

Ransomware attack on MATLAB dev MathWorks licensing center still locked down

Russia-Linked Hackers Target Tajikistan Government with Weaponized Word Documents

Johnson Controls iSTAR Configuration Utility (ICU) Tool

Chinese-Owned VPNs