Port 22

~ 27 May 2025 ~

The Privacy-Friendly Tech to Replace Your US-Based Email, Browser, and Search

New Russia-affiliated actor Void Blizzard targets critical sectors for espionage

Word to the wise: Beware of fake Docusign emails

~ 26 May 2025 ~

Over 70 Malicious npm and VS Code Packages Found Stealing Data and Crypto

CISO's Guide To Web Privacy Validation And Why It's Important

Weekly Recap: APT Campaigns, Browser Hijacks, AI Malware, Cloud Breaches and Critical CVEs

A Starter Guide to Protecting Your Data From Hackers and Corporations

TeleMessage security SNAFU worsens as 60 government staffers exposed

China approves rules for national online number ID scheme

AIDE Lightweight Linux Host Intrusion Detection

~ 25 May 2025 ~

Hackers Use Fake VPN and Browser NSIS Installers to Deliver Winos 4.0 Malware

~ 24 May 2025 ~

Cybercrime is 'orders of magnitude' larger than state-backed ops, says ex-White House advisor

Remembering John Young, co-founder of web archive Cryptome

The US Is Building a One-Stop Shop for Buying Your Data

~ 23 May 2025 ~

Hackers Use TikTok Videos to Distribute Vidar and StealC Malware via ClickFix Technique

Friday Squid Blogging: US Naval Ship Attacked by Squid in 1978

ViciousTrap Uses Cisco Flaw to Build Global Honeypot from 5,300 Compromised Devices

Ransomware scum leaked Nova Scotia Power customers' info

CISA says SaaS providers in firing line after Commvault zero-day Azure attack

300 Servers and 3.5M Seized as Europol Strikes Ransomware Networks Worldwide

SafeLine WAF: Open Source Web Application Firewall with Zero-Day Detection and Bot Protection

U.S. Dismantles DanaBot Malware Network, Charges 16 in $50M Global Cybercrime Operation

Danabot under the microscope

Signal Blocks Windows Recall

CISA Warns of Suspected Broader SaaS Attacks Exploiting App Secrets and Cloud Misconfigs

GitLab Duo Vulnerability Enabled Attackers to Hijack AI Responses with Hidden Prompts

Grandpa-conning crook jailed over sugar-coated drug scam

Suspected creeps behind DanaBot malware that hit 300K+ computers revealed

Doppler CLI Streamlined Secrets Management for DevOps

Ivanti makes dedicated fans of Chinese spies who just can't resist attacking its buggy kit

US Navy sailor charged in horrific child sextortion case

~ 22 May 2025 ~

How lean security teams can build resilient defenses

Feds finger Russian 'behind Qakbot malware' that hit 700K computers

Oops: DanaBot Malware Devs Infected Their Own PCs

Chinese Hackers Exploit Trimble Cityworks Flaw to Infiltrate U.S. Government Networks

Danabot: Analyzing a fallen empire

Feds Charge 16 Russians Allegedly Tied to Botnets Used in Ransomware, Cyberattacks, and Spying

Why 3D-Printing an Untraceable Ghost Gun Is Easier Than Ever

Chinese snoops tried to break into US city utilities, says Talos

Critical Windows Server 2025 dMSA Vulnerability Enables Active Directory Compromise

Chinese Hackers Exploit Ivanti EPMM Bugs in Global Enterprise Network Attacks

Webinar: Learn How to Build a Reasonable and Legally Defensible Cybersecurity Program

Unpatched Versa Concerto Flaws Let Attackers Escape Docker and Compromise Host

Irish privacy watchdog OKs Meta to train AI on EU folks' data

Identity Security Has an Automation ProblemAnd It's Bigger Than You Think

Lumma Stealer: Down for the count

Russia expected to pass experimental law that tracks foreigners in Moscow via smartphones

FBI and Europol Disrupt Lumma Stealer Malware Network Linked to 10 Million Infections

Signal shuts the blinds on Microsoft Recall with the power of DRM

Rockwell Automation FactoryTalk Historian ThingWorx

Lantronix Device Installer

The Voter Experience

Mysterious Database of 184 Million Records Exposes Vast Array of Login Credentials

Scottish council admits ransomware crooks stole school data

~ 21 May 2025 ~

Russian Hackers Exploit Email and VPN Vulnerabilities to Spy on Ukraine Aid Logistics

US teen to plead guilty to extortion attack against PowerSchool

Russia's Fancy Bear swipes a paw at logistics, transport orgs' email servers

FBI, Microsoft, international cops bust Lumma infostealer service

PureRAT Malware Spikes 4x in 2025, Deploying PureLogs to Target Russian Firms

Fake Kling AI Facebook Ads Deliver RAT Malware to Over 22 Million Potential Victims

Coinbase confirms insiders handed over data of 70K users

Securing CI/CD workflows with Wazuh

ESET takes part in global operation to disrupt Lumma Stealer

Lumma Stealer: Breaking down the delivery techniques and capabilities of a prolific infostealer

How to Detect Phishing Attacks Faster: Tycoon2FA Example

Authorities Carry Out Elaborate Global Takedown of Infostealer Heavily Used by Cybercriminals

Judge allows Delta's lawsuit against CrowdStrike to proceed with millions in damages on the line

Google carves out cloudy safe spaces for nations nervous about Uncle Sam's servers

Researchers Expose PWA JavaScript Attack That Redirects Users to Adult Scam Apps

Trump announces $175B for Golden Dome defense shield over America

Google Chrome Can Now Auto-Change Compromised Passwords Using Its Built-In Manager

More AIs Are Taking Polls and Surveys

Dero miner zombies biting through Docker APIs to build a cryptojacking horde

3 Teens Almost Got Away With Murder. Then Police Found Their Google Searches

M&S warns of 300M dent in profits from cyberattack

UK 'extremely dependent' on US for space security

Scattered Spider snared financial orgs before targeting shops in Britain, America

'Ongoing' Ivanti hijack bug exploitation reaches clouds

AI-Powered Malware The Next Evolution in Cyber Threats

~ 20 May 2025 ~

KrebsOnSecurity Hit With Near-Record 6.3 Tbps DDoS

Hazy Hawk Exploits DNS Records to Hijack CDC, Corporate Domains for Malware Delivery

100+ Fake Chrome Extensions Found Hijacking Sessions, Stealing Credentials, Injecting Ads

South Asian Ministries Hit by SideWinder APT Using Old Office Flaws and Custom Malware

AWS Default IAM Roles Found to Enable Lateral Movement and Cross-Service Exploitation

The Crowded Battle: Key Insights from the 2025 State of Pentesting Report

Freshly discovered bug in OpenPGP.js undermines whole point of encrypted comms

Chinese Hackers Deploy MarsSnake Backdoor in Multi-Year Attack on Saudi Organization

Go-Based Malware Deploys XMRig Miner on Linux Hosts via Redis Configuration Abuse

Ransomware attack on food distributor spells more pain for UK supermarkets

Vertiv Liebert RDU101 and UNITY

Siemens Siveillance Video

Schneider Electric PrismaSeT Active - Wireless Panel Server

Schneider Electric Modicon Controllers

Schneider Electric Galaxy VS, Galaxy VL, Galaxy VXL

National Instruments Circuit Design Suite

Mitsubishi Electric Iconics Digital Solutions and Mitsubishi Electric Products

Danfoss AK-SM 8xxA Series

AutomationDirect MB-Gateway

Assured Telematics Inc (ATI) Fleet Management System with Geotab Integration

ABUP IoT Cloud Platform