Port 22

~ 29 Apr 2025 ~

New Reports Uncover Jailbreaks, Unsafe Code, and Data Theft Risks in Leading AI Systems

Watch out for any Linux malware sneakily evading syscall-watching antivirus

SentinelOne Uncovers Chinese Espionage Campaign Targeting Its Infrastructure and Clients

WhatsApp Is Walking a Tightrope Between AI Features and Privacy

Enterprise tech dominates zero-day exploits with no signs of slowdown

Product Walkthrough: Securing Microsoft Copilot with Reco

Google Reports 75 Zero-Days Exploited in 2024 44% Targeted Enterprise Security Products

China now America's number one cyber threat US must get up to speed

Microsoft announces the 2025 Security Excellence Awards winners

Infosec pros tell Trump to quit bullying Chris Krebs it's undermining security

Millions of Apple Airplay-Enabled Devices Can Be Hacked via Wi-Fi

Rockwell Automation ThinManager

Delta Electronics ISPSoft

This month in security with Tony Anscombe April 2025 edition

China is using AI to sharpen every link in its attack chain, FBI warns

Malware Attack Targets World Uyghur Congress Leaders via Trojanized UyghurEdit++ Tool

Applying Security Engineering to Prompt Injection Security

Outlaw cybergang attacking targets worldwide

CISA Adds Actively Exploited Broadcom and Commvault Flaws to KEV Database

The one interview question that will protect you from North Korean fake workers

Swiss boffins admit to secretly posting AI-penned posts to Reddit in the name of science

Open source text editor poisoned with malware to target Uyghur users

Ex-Disney employee gets 3 years in the clink for goofy attacks on mousey menus

~ 28 Apr 2025 ~

Cybersecurity CEO accused of running malware on hospital PC blabs about it on LinkedIn

How to survive as a CISO aka 'chief scapegoat officer'

Admission impossible: NSA, CISA brass absent from RSA Conf

The future of AI in cybersecurity in a word: Optimistic

Windscribe Acquitted on Charges of Not Collecting Users Data

Weekly Recap: Critical SAP Exploit, AI-Powered Phishing, Major Breaches, New CVEs & More

How Breaches Start: Breaking Down 5 Real Vulns

Faster, more personalized service begins at the frontline with Microsoft Intune

Earth Kurma Targets Southeast Asia With Rootkits and Cloud-Based Data Theft Tools

From 112k to 4 million folks' data HR biz attack goes from bad to mega bad

WooCommerce Users Targeted by Fake Patch Phishing Campaign Deploying Site Backdoors

Hackers Exploit Critical Craft CMS Flaws; Hundreds of Servers Likely Compromised

4chan back online after 'catastrophic' attack, says it's too broke for good IT

Car Subscription Features Raise Your Risk of Government Surveillance, Police Records Show

How safe and secure is your iPhone really?

Microsoft pitches pay-to-patch reboot reduction subscription for Windows Server 2025

Weaponized Words: Uyghur Language Software Hijacked to Deliver Malware

Samsung admits Galaxy devices can leak passwords through clipboard wormhole

~ 27 Apr 2025 ~

Storm-1977 Hits Education Clouds with AzureChecker, Deploys 200+ Crypto Mining Containers

~ 26 Apr 2025 ~

ToyMaker Uses LAGTOY to Sell Access to CACTUS Ransomware Gangs for Double Extortion

Pete Hegseths Signal Scandal Spirals Out of Control

~ 25 Apr 2025 ~

Signalgate lessons learned: If creating a culture of security is the goal, America is screwed

Amid CVE funding fumble, 'we were mushrooms, kept in the dark,' says board member

Friday Squid Blogging: Squid Facts on Your Phone

North Korean Hackers Spread Malware via Fake Crypto Firms and Job Interview Lures

More Ivanti attacks may be on horizon, say experts who are seeing 9x surge in endpoint scans

Oh, cool. Microsoft melts bug that froze Server 2025 Remote Desktop sessions

M&S stops online orders as 'cyber incident' issues worsen

SAP Confirms Critical NetWeaver Flaw Amid Suspected Zero-Day Exploitation by Hackers

Why NHIs Are Security's Most Dangerous Blind Spot

Explore practical best practices to secure your data with Microsoft Purview

Emergency patch for potential SAP zero-day that could grant full system control

Researchers Identify Rack::Static Vulnerability Enabling Data Breaches in Ruby Servers

DslogdRAT Malware Deployed via Ivanti ICS Zero-Day CVE-2025-0282 in Japan Attacks

Cryptocurrency Thefts Get Physical

Triada strikes back

Claims assistance firm fined for cold-calling people who put themselves on opt-out list

Deepfake 'doctors' take to TikTok to peddle bogus cures

Darcula adds AI to its DIY phishing kits to help would-be vampires bleed victims dry

Tyton Kernel-Mode Rootkit Hunter for Linux

~ 24 Apr 2025 ~

Protecting Your Phoneand Your Privacyat the US Border

The Real Lesson of SignalGate: A Surveillance Arms Race Has Poked a Gaping Hole in National Security

SSNs and more on 5.5M+ patients feared stolen from Yale Health

Lazarus Hits 6 South Korean Firms via Cross EX, Innorix Zero-Day and ThreatNeedle Malware

New Linux Rootkit

Linux io_uring PoC Rootkit Bypasses System Call-Based Threat Detection Tools

159 CVEs Exploited in Q1 2025 28.3% Within 24 Hours of Disclosure

Microsoft mystery folder fix might need a fix of its own

Darcula Adds GenAI to Phishing Toolkit, Lowering the Barrier for Cybercriminals

New whitepaper outlines the taxonomy of failure modes in AI agents

Gmails New Encrypted Messages Feature Opens a Door for Scams

Automating Zero Trust in Healthcare: From Risk Scoring to Dynamic Policy Enforcement Without Network Redesign

Assassin's Creed maker faces GDPR complaint for forcing single-player gamers online

Critical Commvault Command Center Flaw Enables Attackers to Execute Code Remotely

Ron Deibert on CBC Ideas: Spyware Abusers Can Easily Hack Your Phone and Surveil You

Vestel AC Charger

Schneider Electric Modicon Controllers

Planet Technology Network Products

Nice Linear eMerge E3

Johnson Controls ICU

ALBEDO Telecom Net.Time - PTP/NTP Clock

M&S takes systems offline as 'cyber incident' lingers

WhatsApp Adds Advanced Chat Privacy to Blocks Chat Exports and Auto-Downloads

Your vendor may be the weakest link: Percentage of third-party breaches doubled in a year

Booby-trapped Alpine Quest Android app geolocates Russian soldiers

Operation SyncHole: Lazarus APT goes back to the well

Ransomware scum and other crims bilked victims out of a 'staggering' $16.6B last year, says FBI

~ 23 Apr 2025 ~

DPRK Hackers Steal $137M from TRON Users in Single-Day Phishing Attack

Blue Shield says it shared health info on up to 4.7M patients with Google Ads

DOGE Workers Code Supports NLRB Whistleblower

Iran-Linked Hackers Target Israel with MURKYTOUR Malware via Fake Job Campaign

Ripple NPM supply chain attack hunts for private keys

Android Spyware Disguised as Alpine Quest App Targets Russian Military Devices

Were calling it now: Agentic AI will win RSAC buzzword Bingo

Three Reasons Why the Browser is Best for Stopping Phishing Attacks

Russian Hackers Exploit Microsoft OAuth to Target Ukraine Allies via Signal and WhatsApp

Regulating AI Behavior with a Hypervisor