Port 22

~ 29 May 2025 ~

How to deploy AI safely

Billions of cookies up for grabs as experts warn over session security

Siemens SiPass Integrated

Siemens SiPass

Instantel Micromate

Consilium Safety CS5000 Fire Panel

Chinese APT41 Exploits Google Calendar for Malware Command-and-Control Operations

Surveillance Via Smart Toothbrush

Over 100,000 WordPress Sites at Risk from Critical CVSS 10.0 Vulnerability in Wishlist Plugin

The US Is Storing Migrant Childrens DNA in a Criminal Database

European Commission: Make Europe Great Again... for startups

Victoria's Secret website laid bare for three days after 'security incident'

Adversarial AI: The new frontier in financial cybersecurity

~ 28 May 2025 ~

Iranian Hacker Pleads Guilty in $19 Million Robbinhood Ransomware Attack on Baltimore

Czech Republic Blames China-Linked APT31 Hackers for 2022 Cyberattack

Microsoft OneDrive File Picker Flaw Grants Apps Full Cloud Access Even When Uploading Just One File

Attack on LexisNexis Risk Solutions exposes data on 300k +

New PumaBot Botnet Targets Linux IoT Devices to Steal SSH Credentials and Mine Crypto

Pakistan Arrests 21 in Heartsender Malware Service

From Infection to Access: A 24-Hour Timeline of a Modern Stealer Campaign

Mimo Hackers Exploit CVE-2025-32432 in Craft CMS to Deploy Cryptominer and Proxyware

How 'Browser-in-the-Middle' Attacks Steal Sessions in Seconds

251 Amazon-Hosted IPs Used in Exploit Scan Targeting ColdFusion, Struts, and Elasticsearch

Russian IT pro sentenced to 14 years forced labor for sharing medical data with Ukraine

Apple Blocks $9 Billion in Fraud Over 5 Years Amid Rising App Store Threats

Location Tracking App for Foreigners in Moscow

Zanubis in motion: Tracing the active evolution of the Android banking malware

The cost of compromise: Why password attacks are still winning in 2025

DragonForce double-whammy: First hit an MSP, then use RMM software to push ransomware

ASUS to chase business PC market with free AI, or no AI - because nobody knows what to do with it

Ubers Secret Management Platform Scaling Secrets Security Across Multi-Cloud

~ 27 May 2025 ~

Don't click on that Facebook ad for a text-to-AI-video tool

New Self-Spreading Malware Infects Docker Containers to Mine Dero Cryptocurrency

Cybercriminals Clone Antivirus Site to Spread Venom RAT and Steal Crypto Wallets

New Russian cyber-spy crew Laundry Bear joins the email-stealing pack

Russian Hackers Breach 20+ NGOs Using Evilginx Phishing via Fake Microsoft Entra Pages

AI Agents and the NonHuman Identity Crisis: How to Deploy AIMore SecurelyatScale

The future of AI agentsand why OAuth must evolve

Employees Searching Payroll Portals on Google Tricked Into Sending Paychecks to Hackers

Adidas confirms criminals stole data from customer service provider

Hackers Are Calling Your Office: FBI Alerts Law Firms to Luna Moths Stealth Phishing Campaign

Ransomware attack on MATLAB dev MathWorks licensing center still locked down

Russia-Linked Hackers Target Tajikistan Government with Weaponized Word Documents

Johnson Controls iSTAR Configuration Utility (ICU) Tool

Chinese-Owned VPNs

The Privacy-Friendly Tech to Replace Your US-Based Email, Browser, and Search

New Russia-affiliated actor Void Blizzard targets critical sectors for espionage

Word to the wise: Beware of fake Docusign emails

~ 26 May 2025 ~

Over 70 Malicious npm and VS Code Packages Found Stealing Data and Crypto

CISO's Guide To Web Privacy Validation And Why It's Important

Weekly Recap: APT Campaigns, Browser Hijacks, AI Malware, Cloud Breaches and Critical CVEs

A Starter Guide to Protecting Your Data From Hackers and Corporations

TeleMessage security SNAFU worsens as 60 government staffers exposed

China approves rules for national online number ID scheme

AIDE Lightweight Linux Host Intrusion Detection

~ 25 May 2025 ~

Hackers Use Fake VPN and Browser NSIS Installers to Deliver Winos 4.0 Malware

~ 24 May 2025 ~

Cybercrime is 'orders of magnitude' larger than state-backed ops, says ex-White House advisor

Remembering John Young, co-founder of web archive Cryptome

The US Is Building a One-Stop Shop for Buying Your Data

~ 23 May 2025 ~

Hackers Use TikTok Videos to Distribute Vidar and StealC Malware via ClickFix Technique

Friday Squid Blogging: US Naval Ship Attacked by Squid in 1978

ViciousTrap Uses Cisco Flaw to Build Global Honeypot from 5,300 Compromised Devices

Ransomware scum leaked Nova Scotia Power customers' info

CISA says SaaS providers in firing line after Commvault zero-day Azure attack

300 Servers and 3.5M Seized as Europol Strikes Ransomware Networks Worldwide

SafeLine WAF: Open Source Web Application Firewall with Zero-Day Detection and Bot Protection

U.S. Dismantles DanaBot Malware Network, Charges 16 in $50M Global Cybercrime Operation

Danabot under the microscope

Signal Blocks Windows Recall

CISA Warns of Suspected Broader SaaS Attacks Exploiting App Secrets and Cloud Misconfigs

GitLab Duo Vulnerability Enabled Attackers to Hijack AI Responses with Hidden Prompts

Grandpa-conning crook jailed over sugar-coated drug scam

Suspected creeps behind DanaBot malware that hit 300K+ computers revealed

Doppler CLI Streamlined Secrets Management for DevOps

Ivanti makes dedicated fans of Chinese spies who just can't resist attacking its buggy kit

US Navy sailor charged in horrific child sextortion case

~ 22 May 2025 ~

How lean security teams can build resilient defenses

Feds finger Russian 'behind Qakbot malware' that hit 700K computers

Oops: DanaBot Malware Devs Infected Their Own PCs

Chinese Hackers Exploit Trimble Cityworks Flaw to Infiltrate U.S. Government Networks

Danabot: Analyzing a fallen empire

Feds Charge 16 Russians Allegedly Tied to Botnets Used in Ransomware, Cyberattacks, and Spying

Why 3D-Printing an Untraceable Ghost Gun Is Easier Than Ever

Chinese snoops tried to break into US city utilities, says Talos

Critical Windows Server 2025 dMSA Vulnerability Enables Active Directory Compromise

Chinese Hackers Exploit Ivanti EPMM Bugs in Global Enterprise Network Attacks

Webinar: Learn How to Build a Reasonable and Legally Defensible Cybersecurity Program

Unpatched Versa Concerto Flaws Let Attackers Escape Docker and Compromise Host

Irish privacy watchdog OKs Meta to train AI on EU folks' data

Identity Security Has an Automation ProblemAnd It's Bigger Than You Think

Lumma Stealer: Down for the count

Russia expected to pass experimental law that tracks foreigners in Moscow via smartphones

FBI and Europol Disrupt Lumma Stealer Malware Network Linked to 10 Million Infections

Signal shuts the blinds on Microsoft Recall with the power of DRM

Rockwell Automation FactoryTalk Historian ThingWorx

Lantronix Device Installer

The Voter Experience

Mysterious Database of 184 Million Records Exposes Vast Array of Login Credentials

Scottish council admits ransomware crooks stole school data

~ 21 May 2025 ~

Russian Hackers Exploit Email and VPN Vulnerabilities to Spy on Ukraine Aid Logistics