Port 22

~ 5 Jun 2025 ~

What Really Happened in the Aftermath of the Lizard Squad Hacks

BladedFeline: Whispering in the dark

AI kept 15-year-old zombie vuln alive, but its time is drawing near

China accuses Taiwan of running five feeble APT gangs, with US help

IBM Cloud login breaks for second time this week and Big Blue isn't saying why

~ 4 Jun 2025 ~

Play ransomware crims exploit SimpleHelp flaw in double-extortion schemes

ICE Quietly Scales Back Rules for Courthouse Raids

Google Exposes Vishing Group UNC6040 Targeting Salesforce with Fake Data Loader App

Ukraine strikes Russian bomber-maker with hack attack

Ransomware scum leak patient data after disrupting chemo treatments at Kettering

Chaos RAT Malware Targets Windows and Linux via Fake Network Tool Downloads

Your SaaS Data Isn't Safe: Why Traditional DLP Solutions Fail in the Browser Era

Malicious PyPI, npm, and Ruby Packages Exposed in Ongoing Open-Source Supply Chain Attacks

Fake IT support calls hit 20 orgs, end in stolen Salesforce data and extortion, Google warns

Crims stole 40,000 people's data from our network, admits publisher Lee Enterprises

The Ramifications of Ukraines Drone Attack

HPE Issues Security Patch for StoreOnce Bug Allowing Remote Authentication Bypass

The Race to Build Trumps Golden Dome Missile Defense System Is On

You're Not Ready for Quantum Cracks

You're Not Ready

The US Grid Attack Looming on the Horizon

The Texting Network for the End of the World

The Rise of Vibe Hacking Is the Next AI Nightmare

Deepfake Scams Are Distorting Reality Itself

A GPS Blackout Would Shut Down the World

UK CyberEM Command to spearhead new era of armed conflict

Ukraine war spurred infosec vet Mikko Hyppnen to pivot to drones

Deliberate attack deletes shopping apps AWS and GitHub resources

Weaponizing Dependabot Exploiting GitHub Automation for Supply Chain Attacks

~ 3 Jun 2025 ~

Meta pauses mobile port tracking tech on Android after researchers cry foul

You say Cozy Bear, I say Midnight Blizzard, Voodoo Bear, APT29

Fake DocuSign, Gitcode Sites Spread NetSupport RAT via Multi-Stage PowerShell Attack

Google quietly pushes emergency fix for Chrome 0-day as exploit runs wild

Critical 10-Year-Old Roundcube Webmail Bug Allows Authenticated Users Run Malicious Code

X's new 'encrypted' XChat feature seems no more secure than the failure that came before it

The PRC Transnational Repression Efforts: Influence, Interference, and Legitimacy

Crooks fleece The North Face accounts with recycled logins

Scattered Spider: Understanding Help Desk Scams and How to Defend Your Organization

How the Farm Industry Spied on Animal Rights Activists and Pushed the FBI to Treat Them as Terrorists

How Microsoft Defender for Endpoint is redefining endpoint security

Android Trojan Crocodilus Now Active in 8 Countries, Targeting Banks and Crypto Wallets

Microsoft patches the patch that put Windows 11 in a coma

Google Chrome to Distrust Two Certificate Authorities Over Compliance and Conduct Issues

Microsoft and CrowdStrike Launch Shared Threat Actor Glossary to Cut Attribution Confusion

Schneider Electric Wiser Home Automation

Schneider Electric EcoStruxure Power Build Rapsody

Mitsubishi Electric MELSEC iQ-F Series

Illicit crypto-miners pouncing on lazy DevOps configs that leave clouds vulnerable

New Linux Vulnerabilities

Host-based logs, container-based threats: How to tell where an attack began

Bling slinger Cartier tells customers to be wary of phishing attacks after intrusion

New Chrome Zero-Day Actively Exploited; Google Issues Emergency Out-of-Band Patch

~ 2 Jun 2025 ~

Cryptojacking Campaign Exploits DevOps APIs Using Off-the-Shelf Tools from GitHub

Preinstalled Apps on Ulefone, Krger&Matz Phones Let Any App Reset Device, Steal PIN

Ukrainians smuggle drones hidden in cabins on trucks to strike Russian airfields

Qualcomm Fixes 3 Zero-Days Used in Targeted Android Attacks via Adreno GPU

Discover how automatic attack disruption protects critical assets while ensuring business continuity

Weekly Recap: APT Intrusions, AI Malware, Zero-Click Exploits, Browser Hijacks and More

The Secret Defense Strategy of Four Critical Industries Combating Advanced Cyber Threats

Announcing a new strategic collaboration to bring clarity to threat actor naming

US community bank says thieves drained customer data through third party hole

Fake Recruiter Emails Target CFOs Using Legit NetBird Tool Across 6 Global Regions

Australia Requires Ransomware Victims to Declare Payments

Dont let dormant accounts become a doorway for cybercriminals

Lumma infostealer takedown may have inflicted only a flesh wound as crew keeps pinching and selling data

OSSEC Open Source Host-Based Intrusion Detection for Linux, Windows and Unix Systems

~ 31 May 2025 ~

New Linux Flaws Allow Password Hash Theft via Core Dumps in Ubuntu, RHEL, Fedora

U.S. DoJ Seizes 4 Domains Supporting Cybercrime Crypting Services in Global Operation

Mysterious leaker GangExposed outs Conti kingpins in massive ransomware data dump

~ 30 May 2025 ~

New EDDIESTEALER Malware Bypasses Chrome's App-Bound Encryption to Steal Browser Data

ConnectWise customers get mysterious warning about 'sophisticated' nation-state hack

A Hacker May Have Deepfaked Trumps Chief of Staff in a Phishing Campaign

Feds arrest DoD techie, claim he dumped top secret files in park for foreign spies to find

US medical org pays $50M+ to settle case after crims raided data and threatened to swat cancer patients

China-Linked Hackers Exploit SAP and SQL Server Flaws in Attacks Across Asia and Brazil

Meta yep, Facebook Meta is now a defense contractor

From the "Department of No" to a "Culture of Yes": A Healthcare CISO's Journey to Enabling Modern Care

Cops in Germany Claim They've ID'd the Mysterious Trickbot Ransomware Kingpin

U.S. Sanctions Funnull for $200M Romance Baiting Scams Tied to Crypto Fraud

Exploits and vulnerabilities in Q1 2025

ConnectWise Hit by Cyberattack; Nation-State Actor Suspected in Targeted Breach

Why Take9 Wont Improve Cybersecurity

Crims defeat human intelligence with fake AI installers they poison with ransomware

Meta Disrupts Influence Ops Targeting Romania, Azerbaijan, and Taiwan with Fake Personas

Data watchdog put cops on naughty step for lost CCTV footage

This month in security with Tony Anscombe May 2025 edition

The UK wants you to sign up for 1B cyber defense force

Infosecurity Europe 2025 drives cybersecurity priorities amid growing global risks

U.S. Sanctions Cloud Provider Funnull as Top Source of Pig Butchering Scams

Security outfit SentinelOne's services back online after lengthy outage

Feds gut host behind pig butchering scams that bilked $200M from Americans

~ 29 May 2025 ~

Microsoft's May Patch Tuesday update fails on some Windows 11 VMs

Cybercriminals Target AI Users with Malware-Loaded Installers Posing as Popular Tools

Friday Squid Blogging: NGC 1068 Is the Squid Galaxy

Why is China deep in US networks? 'They're preparing for war,' HR McMaster tells lawmakers

New Windows RAT Evades Detection for Weeks Using Corrupted DOS and PE Headers

A Swedish MMA Tournament Spotlights the Trump Administration's Handling of Far-Right Terrorism

Defending against evolving identity attack techniques

8,000+ Asus routers popped in 'advanced' mystery botnet plot

DragonForce Exploits SimpleHelp Flaws to Deploy Ransomware Across Customer Endpoints