Port 22

~ 15 May 2025 ~

Socket buys Coana to tell you which security alerts you can ignore

Malicious npm Package Leverages Unicode Steganography, Google Calendar as C2 Dropper

Snowflake CISO on the power of 'shared destiny' and 'yes and'

Sednit abuses XSS flaws to hit gov't entities, defense companies

Threat landscape for industrial automation systems in Q1 2025

Siemens VersiCharge AC Series EV Chargers

Siemens User Management Component (UMC)

Siemens Teamcenter Visualization

Siemens SIRIUS 3SK2 Safety Relays and 3RK3 Modular Safety Systems

Siemens SIPROTEC and SICAM

Siemens SIMATIC PCS neo

Siemens SCALANCE LPE9403

Siemens RUGGEDCOM ROX II

Siemens RUGGEDCOM APE1808 Devices

Siemens Polarion

Siemens OZW Web Servers

Siemens MS/TP Point Pickup Module

Siemens Mendix OIDC SSO

Siemens IPC RS-828A

Siemens INTRALOG WMS

Siemens Desigo

Siemens BACnet ATEC Devices

Siemens APOGEE PXC and TALON TC Series

Schneider Electric EcoStruxure Power Build Rapsody

ECOVACS DEEBOT Vacuum and Base Station

New Chrome Vulnerability Enables Cross-Origin Data Leak via Loader Referrer Policy

AI-Generated Law

Operation RoundPress

Here's what we know about the DragonForce ransomware that hit Marks & Spencer

~ 14 May 2025 ~

Samsung Patches CVE-2025-4632 Used to Deploy Mirai Botnet via MagicINFO 9 Exploit

BianLian and RansomExx Exploit SAP NetWeaver Flaw to Deploy PipeMagic Trojan

Xinbi Telegram Market Tied to $8.4B in Crypto Crime, Romance Scams, North Korea Laundering

Metal maker meltdown: Nucor stops production after cyber-intrusion

The Internet's Biggest-Ever Black Market Just Shut Down Amid a Telegram Purge

CTM360 Identifies Surge in Phishing Attacks Targeting Meta Business Users

Why CVSS is failing us and what we can do about it

Uncle Sam pulls $2.4B Leidos deal to support CISA after rival alleges foul play

CFPB Quietly Kills Rule to Shield Americans From Data Brokers

Earth Ammit Breached Drone Supply Chains via ERP in VENOM, TIDRONE Campaigns

Ivanti patches two zero-days under active attack as intel agency warns customers

Learning How to Hack: Why Offensive Security Training Benefits Your Entire Security Team

Horabot Malware Targets 6 Latin American Nations Using Invoice-Themed Phishing Emails

Upcoming Speaking Engagements

Meta's still violating GDPR rules with latest plan to train AI on EU user data, says noyb

John Scott-Railton Testifies Before EU Parliaments Committee on Civil Liberties, Justice and Home Affairs

VPN Secure parent company CEO explains why he had to axe thousands of 'lifetime' deals

Microsoft Fixes 78 Flaws, 5 Zero-Days Exploited; CVSS 10 Bug Impacts Azure DevOps Server

Go ahead and ignore Patch Tuesday it might improve your security

Patch Tuesday, May 2025 Edition

Googles Advanced Protection Now on Android

North Korean IT Workers Are Being Exposed on a Massive Scale

Fortinet Patches CVE-2025-32756 Zero-Day RCE Flaw Exploited in FortiVoice Systems

Ivanti Patches EPMM Vulnerabilities Exploited for Remote Code Execution in Limited Attacks

Everyone's deploying AI, but no one's securing it what could go wrong?

Ransomware scum have put a target on the no man's land between IT and operations

Best Open Source HIDS Tools for Linux in 2025 (Compared & Ranked)

Apple patched one first, but Microsofts blasted five exploited flaws this Pa-Tu

~ 13 May 2025 ~

Intel's data-leaking Spectre defenses scared off yet again

Metrics of Sovereignty: Mixed Methods Approach to Sovereign Networks

China-Linked APTs Exploit SAP CVE-2025-31324 to Breach 581 Critical Systems Worldwide

Qatars $400M jet for Trump is a gold-plated security nightmare

Malicious PyPI Package Posing as Solana Tool Stole Source Code in 761 Downloads

Googles Advanced Protection for Vulnerable Users Comes to Android

Commvault fixes critical Command Center issue after flaw finder alert

Google Is Using On-Device AI to Spot Scam Texts and Investment Fraud

Deepfake Defense in the Age of AI

North Korean Konni APT Targets Ukraine with Malware to track Russian Invasion Progress

'We still have embeds in CISA': CTO of Brit cyber agency talks post-Trump relationship with US counterpart

An $8.4 Billion Chinese Hub for Crypto Crime Is Incorporated in Colorado

Moldovan Police Arrest Suspect in 4.5M Ransomware Attack on Dutch Research Agency

Hitachi Energy Service Suite

Hitachi Energy Relion 670/650/SAM600-IO Series

Hitachi Energy MACH GWS Products

ABB Automation Builder

Court Rules Against NSO Group

Marks & Spencer admits cybercrooks made off with customer info

Trkiye Hackers Exploited Output Messenger Zero-Day to Drop Golang Backdoors on Kurdish Servers

Using a Mythic agent to optimize penetration testing

As US vuln-tracking falters, EU enters with its own security bug database

Trkiye-linked spy crew exploited a messaging app zero-day to snoop on Kurdish army in Iraq

~ 12 May 2025 ~

M365 apps on Windows 10 to get security fixes into 2028

ASUS Patches DriverHub RCE Flaws Exploitable via HTTP and Crafted .ini Files

CISA mutes own website, shifts routine cyber alerts to Musks X, RSS, email

Why aggregating your asset inventory leads to better security

Weekly Recap: Zero-Day Exploits, Developer Malware, IoT Botnets, and AI-Powered Scams

Attackers pwn charter airline helping Trump's deportation campaign

The Persistence Problem: Why Exposed Credentials Remain Unfixedand How to Change That

Marbled Dust leverages zero-day in Output Messenger for regional espionage

WireWatch: Measuring the Security of Proprietary Network Encryption in the Global Android Ecosystem

Fake AI Tools Used to Spread Noodlophile Malware, Targeting 62,000+ via Facebook Lures

SUDO_KILLER Auditing Sudo Configurations for Privilege Escalation Paths

Florida Backdoor Bill Fails

Deepfakes, Scams, and the Age of Paranoia

Britain's cyber agents and industry clash over how to tackle shoddy software

How can we counter online disinformation? | Unlocked 403 cybersecurity podcast (S2E2)

Unending ransomware attacks are a symptom, not the sickness

DOGE worker's old creds found exposed in infostealer malware dumps

~ 11 May 2025 ~

You think ransomware is bad now? Wait until it infects CPUs

~ 10 May 2025 ~

Feds disrupt proxy-for-hire botnet, indict four alleged net miscreants

Google Pays $1.375 Billion to Texas Over Unauthorized Tracking and Biometric Data Collection