Port 22

~ 7 May 2025 ~

Meet the Deputy CISOs who help shape Microsofts approach to cybersecurity: Part 2

Researchers Uncover Malware in Fake Discord PyPI Package Downloaded 11,500+ Times

NSO Group Fined $168M for Targeting 1,400 WhatsApp Users With Pegasus Spyware

Chinese AI Submersible

Curl project founder snaps over deluge of time-sucking AI slop bug reports

State of ransomware in 2025

Beware of phone scams demanding money for missed jury duty

New Zealand kind-of moves to ban social media for under-16s, require age checks for new accounts

~ 6 May 2025 ~

Super spyware maker NSO must pay Meta $168M in WhatsApp snoop drama

Hackers Exploit Samsung MagicINFO, GeoVision IoT Flaws to Deploy Mirai Botnet

Computacenter IT guy let girlfriend into Deutsche Bank server rooms, says fired whistleblower

The Signal Clone Mike Waltz Was Caught Using Has Direct Access to User Chats

Tulsi Gabbard Reused the Same Weak Password on Multiple Accounts for Years

New Investment Scams Use Facebook Ads, RDGA Domains, and IP Checks to Filter Victims

Pentagon declares war on 'outdated' software buying, opens fire on open source

Third Parties and Machine Credentials: The Silent Drivers Behind 2025's Worst Breaches

Microsoft Warns Default Helm Charts Could Leave Kubernetes Apps Exposed to Data Leaks

Entra ID Data Protection:Essential or Overkill?

Job Opportunity: Digital Communications Specialist

Optigo Networks ONS NC600

Milesight UG65-868M-EA

BrightSign Players

Google Fixes Actively Exploited Android System Flaw in May 2025 Security Update

Fake Student Fraud in Community Colleges

Critical Langflow Flaw Added to CISA KEV List Amid Ongoing Exploitation Evidence

US Border Agents Are Asking for Help Taking Photos of Everyone Entering the Country by Car

Toll road scams are in overdrive: Heres how to protect yourself

CISA slammed for role in 'censorship industrial complex' as budget faces possible $500M cut

~ 5 May 2025 ~

Wormable AirPlay Flaws Enable Zero-Click RCE on Apple Devices via Public Wi-Fi

Commvault CVE-2025-34028 Added to CISA KEV After Active Exploitation Confirmed

Signal Clone Used by Mike Waltz Pauses Service After Reports It Got Hacked

Signal chat app clone used by Signalgate's Waltz was apparently an insecure mess

Weekly Recap: Nation-State Hacks, Spyware Alerts, Deepfake Malware, Supply Chain Backdoors

Perfection is a Myth. Leverage Isn't: How Small Teams Can Secure Their Google Workspace

Another Move in the Deepfake Creation/Detection Arms Race

Microsoft partners with Global Anti-Scam Alliance to fight cybercrime

Golden Chickens Deploy TerraStealerV2 to Steal Browser Credentials and Crypto Wallet Data

Security Researchers Warn a Widely Used Open Source Tool Poses a 'Persistent' Risk to the US

Trump promises protection for TikTok, for which he has a warm spot in my heart

Indias chipmaking ambitions hurt by Zohos no-go and Adani unease

~ 4 May 2025 ~

Microsoft tries to knife passwords once and for all - at least for consumers

RSAC wrap: AI and China on everything, everywhere, all at once

Altman's eyeball-scanning biometric blockchain orbs officially come to America

~ 3 May 2025 ~

Malicious Go Modules Deliver Disk-Wiping Linux Malware in Advanced Supply Chain Attack

Iranian Hackers Maintain 2-Year Access to Middle East CNI via VPN Flaws and Malware

U.S. Charges Yemeni Hacker Behind Black Kingdom Ransomware Targeting 1,500 Systems

Hacking Spree Hits UK Retail Giants

~ 2 May 2025 ~

Friday Squid Blogging: Pyjama Squid

Mike Waltz Has Somehow Gotten Even Worse at Using Signal

Privacy for Agentic AI

TikTok Slammed With 530 Million GDPR Fine for Sending E.U. Data to China

Disney Slack attack wasn't Russian protesters, just a Cali dude with malware

How to Automate CVE and Vulnerability Advisory Response with Tines

Generative AI makes fraud fluent from phishing lures to fake lovers

MintsLoader Drops GhostWeaver via Phishing, ClickFix Uses DGA, TLS for Stealth Attacks

RSAC 2025 wrap-up Week in security with Tony Anscombe

Three Brits charged over 'active shooter threats' swattings in US, Canada

Microsoft Sets Passkeys Default for New Accounts; 15 Billion Users Gain Passwordless Support

NCSC Guidance on Advanced Cryptography

British govt agents step in as Harrods becomes third mega retailer under cyberattack

xAI Dev Leaks API Key for Private SpaceX, Tesla LLMs

~ 1 May 2025 ~

Dems look to close the barn door after top DOGE dog has bolted

Fake Security Plugin on WordPress Enables Remote Admin Access for Attackers

Healthcare group Ascension discloses second cyberattack on patients' data

How Amazon red-teamed Alexa+ to keep your kids from ordering 50 pizzas

How Amazon red-teamed Alexa+ to keep your kids from ordering 50 pizzas

Analyzing CVE-2025-31191: A macOS security-scoped bookmarks-based sandbox escape

Why top SOC teams are shifting to Network Detection and Response

Claude AI Exploited to Operate 100+ Fake Political Personas in Global Influence Campaign

US as a Surveillance State

Pushing passkeys forward: Microsofts latest updates for simpler, safer sign-ins

New Research Reveals: 95% of AppSec Fixes Dont Reduce Risk

DarkWatchman, Sheriff Malware Hit Russia and Ukraine with Stealth and Nation-Grade Tactics

Think Twice Before Creating That ChatGPT Action Figure

Commvault Confirms Hackers Exploited CVE-2025-3928 as Zero-Day in Azure Breach

Chris Krebs loses Global Entry membership amid Trump feud

KUNBUS GmbH Revolution Pi

SonicWall Confirms Active Exploitation of Flaws Affecting Multiple Appliance Models

Data watchdog will leave British Library alone further probes 'not worth our time'

North Korea Stole Your Job

~ 30 Apr 2025 ~

Ex-NSA cyber-boss: AI will soon be a great exploit coder

Alleged Scattered Spider Member Extradited to U.S.

Researchers Demonstrate How MCP Prompt Injection Can Be Used for Both Attack and Defense

AI Code Hallucinations Increase the Risk of Package Confusion Attacks

Ex-CISA chief decries cuts as Trump demands loyalty above all else

Maryland man pleads guilty to outsourcing US gov work to North Korean dev in China

14 secure coding tips: Learn from the experts at Microsoft Build

[Free Webinar] Guide to Securing Your Entire Identity Lifecycle Against AI-Powered Threats

Chinese Hackers Abuse IPv6 SLAAC for AitM Attacks via Spellbinder Lateral Movement Tool

Customer Account Takeovers: The Multi-Billion Dollar Problem You Dont Know About

Nebulous Mantis Targets NATO-Linked Entities with Multi-Stage Malware Attacks

RansomHub Went Dark April 1; Affiliates Fled to Qilin, DragonForce Claimed Control

FBI steps in amid rash of politically charged swattings

Meta Launches LlamaFirewall Framework to Stop AI Jailbreaks, Injections, and Insecure Code

WhatsApp Case Against NSO Group Progressing

Indian Court Orders Action to Block Proton Mail Over AI Deepfake Abuse Allegations

Ghost in the shell script: Boffins reckon they can catch bugs before programs run

TheWizards APT group uses SLAAC spoofing to perform adversary-in-the-middle attacks

Cloud doesnt mean secure: How Intruder finds what others miss

~ 29 Apr 2025 ~

WhatsApp Launches Private Processing to Enable AI Features While Protecting Message Privacy