Port 22

~ 23 Apr 2025 ~

Russian Hackers Exploit Microsoft OAuth to Target Ukraine Allies via Signal and WhatsApp

Regulating AI Behavior with a Hypervisor

Understanding the threat landscape for Kubernetes and containerized assets

Who needs phishing when your login's already in the wild?

Ripple's xrpl.js npm Package Backdoored to Steal Private Keys in Major Supply Chain Attack

Google Drops Cookie Prompt in Chrome, Adds IP Protection to Incognito

Ex-NSA chief warns AI devs: Dont repeat infosecs early-day screwups

How fraudsters abuse Google Forms to spread scams

America's cyber defenses are being dismantled from the inside

The Tech That Safeguards the Conclaves Secrecy

Cybersecurity in 2025- Real-World Threats and Lessons Learned

~ 22 Apr 2025 ~

Docker Malware Exploits Teneo Web3 Node to Earn Crypto via Fake Heartbeat Signals

RIP, Google Privacy Sandbox

GCP Cloud Composer Bug Let Attackers Elevate Access via Malicious PyPI Packages

Two CISA officials jump ship, both proud of pushing for Secure by Design software

Fog ransomware channels Musk with demands for work recaps or a trillion bucks

A pot of $250K is now available to ransomware researchers, but it feeds a commercial product

5 Major Concerns With Employees Using The Browser

Phishers Exploit Google Sites and DKIM Replay to Send Signed Emails, Steal Credentials

This is not just any 'cyber incident' this is an M&S 'cyber incident'

Android Improves Its Security

UN says Asian scam call center epidemic expanding globally amid political heat

Microsoft Secures MSA Signing with Azure Confidential VMs Following Storm-0558 Breach

Russian organizations targeted by backdoor masquerading as secure networking software updates

Siemens TeleControl Server Basic SQL

Siemens TeleControl Server Basic

Schneider Electric Wiser Home Controller WHC-5918A

ABB MV Drives

Lotus Panda Hacks SE Asian Governments With Browser Stealers and Sideloaded Malware

Will super-smart AI be attacking us anytime soon?

Bug hunter tricked SSL.com into issuing cert for Alibaba Cloud domain in 5 steps

Whistleblower: DOGE Siphoned NLRB Case Data

~ 21 Apr 2025 ~

Kimsuky Exploits BlueKeep RDP Vulnerability to Breach Systems in South Korea and Japan

SuperCard X Android Malware Enables Contactless ATM and PoS Fraud via NFC Relay Attacks

Today's LLMs craft exploits from patches at lightning speed

Microsoft rated this bug as low exploitability. Miscreants weaponized it in just 8 days

5 Reasons Device Management Isn't Device Trust

THN Weekly Recap: iOS Zero-Days, 4Chan Breach, NTLM Exploits, WhatsApp Spyware & More

Securing our future: April 2025 progress report on Microsofts Secure Future Initiative

Hackers Abuse Russian Bulletproof Host Proton66 for Global Attacks and Malware Delivery

Lumma Stealer Tracking distribution channels

How to Protect Yourself From Phone Searches at the US Border

Phishing attacks leveraging HTML code inside SVG files

Elkeid A Modern, Scalable HIDS for Cloud-Native Infrastructure

~ 20 Apr 2025 ~

APT29 Deploys GRAPELOADER Malware Targeting European Diplomats Through Wine-Tasting Lures

~ 19 Apr 2025 ~

Rogue npm Packages Mimic Telegram Bot API to Plant SSH Backdoors on Linux Systems

ASUS Confirms Critical Flaw in AiCloud Routers; Users Urged to Update Firmware

Hacking US crosswalks to talk like Zuck is as easy as 1234

Florida Man Enters the Encryption Wars

~ 18 Apr 2025 ~

Friday Squid Blogging: Live Colossal Squid Filmed

Chinese Smishing Kit Powers Widespread Toll Fraud Campaign Targeting U.S. Users in 8 States

Dems fret over DOGE feeding sensitive data into random AI

Multi-Stage Malware Attack Uses .JSE and PowerShell to Deploy Agent Tesla and XLoader

Oracle hopes talk of cloud data theft dies off. CISA just resurrected it for Easter

[Webinar] AI Is Already Inside Your SaaS Stack Learn How to Prevent the Next Silent Breach

ICE Is Paying Palantir $30 Million to Build ImmigrationOS Surveillance Platform

Experts Uncover New XorDDoS Controller, Infrastructure as Malware Expands to Docker, Linux, IoT

CVE-2025-24054 Under Active AttackSteals NTLM Credentials on File Download

CVE fallout: The splintering of the standard vulnerability tracking system has begun

Nebula Autonomous AI Pentesting Tool

~ 17 Apr 2025 ~

Mustang Panda Targets Myanmar With StarProxy, EDR Bypass, and TONESHELL Updates

Krebs throws himself on the grenade, resigns from SentinelOne after Trump revokes clearances

State-Sponsored Hackers Weaponize ClickFix Tactic in Targeted Malware Campaigns

Artificial Intelligence What's all the fuss?

Age Verification Using Facial Scans

Microsofts Secure by Design journey: One year of success

Blockchain Offers Security Benefits But Don't Neglect Your Passwords

New Jersey Sues Discord for Allegedly Failing to Protect Children

Critical Erlang/OTP SSH Vulnerability (CVSS 10.0) Allows Unauthenticated Code Execution

Node.js Malware Campaign Targets Crypto Users with Fake Binance and TradingView Installers

Yokogawa Recorder Products

Schneider Electric Trio Q Licensed Data Radio

Schneider Electric Sage Series

Schneider Electric ConneXium Network Manager

CISA Flags Actively Exploited Vulnerability in SonicWall SMA Devices

Brit soldiers tune radio waves to fry drone swarms for pennies

This College Protester Isnt Real. Its an AI-Powered Undercover Bot for Cops

Apple Patches Two Actively Exploited iOS Flaws Used in Sophisticated Targeted Attacks

CapCut copycats are on the prowl

IronHusky updates the forgotten MysterySnail RAT to target Russia and Mongolia

Whistleblower describes DOGE IT dept rampage at America's labor watchdog

~ 16 Apr 2025 ~

Experts Uncover Four New Privilege Escalation Flaws in Windows Task Scheduler

Free Blue Screens of Death for Windows 11 24H2 users

Signalgate chats vanish from CIA chief phone

Stupid and Dangerous: CISA Funding Chaos Threatens Essential Cybersecurity Program

Identifying the cyber risks that matter

Google Blocked 5.1B Harmful Ads and Suspended 39.2M Advertiser Accounts in 2024

Gamma AI Platform Abused in Phishing Chain to Spoof Microsoft SharePoint Logins

From Third-Party Vendors to U.S. Tariffs: The New Cyber Risks Facing Supply Chains

CVE program gets last-minute funding from CISA and maybe a new home

New BPFDoor Controller Enables Stealthy Lateral Movement in Linux Server Attacks

Product Walkthrough: A Look Inside Wing Security's Layered SaaS Identity Defense

CVE Program Almost Unfunded

Law firm 'didn't think' data theft was a breach, says ICO. Now it's nursing a 60K fine

Chinese Android Phones Shipped with Fake WhatsApp, Telegram Apps Targeting Crypto Users

Russians lure European diplomats into malware trap with wine-tasting invite

JUICYJAM:

JUICYJAM: How Thai Authorities Use Online Doxxing to Suppress Dissent

Cyber Signals Issue 9 | AI-powered deception: Emerging fraud threats and countermeasures

U.S. Govt. Funding for MITRE's CVE Ends April 16, Cybersecurity Community on Alert