Port 22

~ 25 Feb 2025 ~

Two Actively Exploited Security Flaws in Adobe and Oracle Products Flagged by CISA

Southern Water takes the fifth over alleged $750K Black Basta ransom offer

How nice that state-of-the-art LLMs reveal their reasoning ... for miscreants to exploit

Google binning SMS MFA at last and replacing it with QR codes

~ 24 Feb 2025 ~

New Malware Campaign Uses Cracked Software to Spread Lumma and ACR Stealer

US Dept of Housing screens sabotaged to show deepfake of Trump sucking Elon's toes

Inside the Telegram Groups Doxing Women for Their Facebook Posts

TVs at HUD Played an AI-Generated Video of Donald Trump Kissing Elon Musk's Feet

THN Weekly Recap: From $1.5B Crypto Heist to AI Misuse & Apples Data Dilemma

Google Cloud KMS Adds Quantum-Safe Digital Signatures to Defend Against Future Threats

Becoming Ransomware Ready: Why Continuous Validation Is Your Best Defense

Canada-U.S. Cross-Border Surveillance Negotiations Raise Constitutional and Human Rights Whirlwind under U.S. CLOUD Act

Australia Bans Kaspersky Software Over National Security and Espionage Concerns

Shifting the cybersecurity odds

The software UK techies need to protect themselves now Apple's ADP wont

More Research Showing AI Breaking the Rules

Laurie Anderson: Building an ARK | Starmus highlights

The GitVenom campaign: cryptocurrency theft using GitHub

Rather than add a backdoor, Apple decides to kill iCloud E2EE for UK peeps

~ 23 Feb 2025 ~

Trump 2.0 Brings Cuts to Cyber, Consumer Protections

~ 22 Feb 2025 ~

Bybit Confirms Record-Breaking $1.46 Billion Crypto Heist in Sophisticated Cold Wallet Attack

$1.4 Billion Stolen From ByBit in Biggest Crypto Theft Ever

OpenAI Bans Accounts Misusing ChatGPT for Surveillance and Influence Campaigns

~ 21 Feb 2025 ~

Friday Squid Blogging: New Squid Fossil

Apple Drops iCloud's Advanced Data Protection in the U.K. Amid Encryption Backdoor Demands

Data Leak Exposes TopSec's Role in Chinas Censorship-as-a-Service Operations

DOGEs USDS Purge Included the Guy Who Keeps Veterans Data Safe Online

Cybercriminals Can Now Clone Any Brands Site in Minutes Using Darcula PhaaS v3

Webinar: Learn How to Identify High-Risk Identity Gaps and Slash Security Debt in 2025

AI-Powered Deception is a Menace to Our Societies

Truth in Transition: Disinformation in Post-Assad Syria

Implementing Cryptography in AI Systems

The Hogue Report was a missed opportunity to tackle transnational repression: Op-ed for the Globe & Mail

The US Is Considering a TP-Link Router BanShould You Worry?

Cisco Confirms Salt Typhoon Exploited CVE-2018-0171 to Target U.S. Telecom Networks

Experts race to extract intel from Black Basta internal chat leaks

CISA Flags Craft CMS Vulnerability CVE-2025-23209 Amid Active Attacks

Angry Likho: Old beasts in a new forest

Ivanti endpoint manager can become endpoint ravager, thanks to quartet of critical flaws

Thailand ready to welcome 7,000 trafficked scam call center victims back from Myanmar

Linux royalty backs adoption of Rust for kernel code, says its rise is inevitable

~ 20 Feb 2025 ~

Microsoft expands Copilot bug bounty targets, adds payouts for even moderate messes

Oops, some of our customers' Power Pages sites were exploited, says Microsoft

The National Institute of Standards and Technology Braces for Mass Firings

North Korean Hackers Target Freelance Developers in Job Scam to Deploy Malware

Microsoft at Legalweek: Help safeguard your AI future with Microsoft Purview

PCI DSS 4.0 Mandates DMARC By 31st March 2025

Chinese-Linked Attackers Exploit Check Point Flaw to Deploy ShadowPad and Ransomware

US minerals company says crooks broke into email and helped themselves to $500K

Cybercriminals Use Eclipse Jarsigner to Deploy XLoader Malware via ZIP Archives

Microsoft's End of Support for Exchange 2016 and 2019: What IT Teams Must Do Now

Critical flaws in Mongoose library expose MongoDB to data thieves, code execution

Fake job offers target software developers with infostealers

Google Ad-Tech Users Can Target National Security Decision Makers and People With Chronic Diseases

An LLM Trained to Create Backdoors in Code

Siemens SiPass Integrated

Rapid Response Monitoring My Security Account App

Elseta Vinci Protocol Analyzer

Carrier Block Load

ABB FLXEON Controllers

ABB ASPECT-Enterprise, NEXUS, and MATRIX Series

Two arrested after pensioner scammed out of six-figure crypto nest egg

How One AI Startup Founder Cornered Microsoft Into Finally Taking Down Explicit Videos of Her

Citrix Releases Security Fix for NetScaler Console Privilege Escalation Vulnerability

DeceptiveDevelopment targets freelance developers

Microsoft Patches Actively Exploited Power Pages Privilege Escalation Vulnerability

Ghost ransomware crew continues to haunt IT depts with scarily bad infosec

Managed detection and response in 2024

Medusa ransomware gang demands $2M from UK private health services provider

US Army soldier linked to Snowflake extortion rampage admits breaking the law

DOGE Now Has Access to the Top US Cybersecurity Agency

~ 19 Feb 2025 ~

Hackers Exploit Signal's Linked Devices Feature to Hijack Accounts via Malicious QR Codes

Trumps DoD CISO pick previously faced security clearance suspension

Check out this free automated tool that hunts for exposed AWS secrets in public repos

New Snake Keylogger Variant Leverages AutoIt Scripting to Evade Detection

Microsoft is named a Leader in the 2025 Gartner Magic Quadrant for cyber-physical systems protection platforms

The Ultimate MSP Guide to Structuring and Selling vCISO Services

Device Code Phishing

Trojanized Game Installers Deploy Cryptocurrency Miner in Large-Scale StaryDobry Attack

Hundreds of Dutch medical records bought for pocket change at flea market

A Signal Update Fends Off a Phishing Technique Used in Russian Espionage

Spam and phishing in 2024

London celebrity talent agency reports itself to ICO following Rhysida attack claims

CISA Adds Palo Alto Networks and SonicWall Flaws to Exploited Vulnerabilities List

Healthcare outfit that served military personnel settles allegations it faked infosec compliance for $11 million

Palo Alto firewalls under attack as miscreants chain flaws for root access

~ 18 Feb 2025 ~

Elon Musks DOGE Is Being Sued Under the Privacy Act: What to Know

Snake Keylogger slithers into Windows, evades detection with AutoIt-compiled payload

How Phished Data Turns into Apple & Google Wallets

US newspaper publisher uses linguistic gymnastics to avoid saying its outage was due to ransomware

Join us for the end-to-end Microsoft RSAC 2025 Conference experience

New OpenSSH Flaws Enable Man-in-the-Middle and DoS Attacks Patch Now

FreSSH bugs undiscovered for years threaten OpenSSH security

Chinese Hackers Exploit MAVInject.exe to Evade Detection in Targeted Cyber Attacks

Q&A with Ron Deibert and Carine Kanimba in Digital Front Lines

Time to make C the COBOL of this century

New FrigidStealer Malware Targets macOS Users via Fake Browser Updates

Juniper Session Smart Routers Vulnerability Could Let Attackers Bypass Authentication

Story About Medical Device Security

Debunking the AI Hype: Inside Real Hacker Tactics