Port 22

~ 2 Jun 2025 ~

OSSEC Open Source Host-Based Intrusion Detection for Linux, Windows and Unix Systems

~ 31 May 2025 ~

New Linux Flaws Allow Password Hash Theft via Core Dumps in Ubuntu, RHEL, Fedora

U.S. DoJ Seizes 4 Domains Supporting Cybercrime Crypting Services in Global Operation

Mysterious leaker GangExposed outs Conti kingpins in massive ransomware data dump

~ 30 May 2025 ~

New EDDIESTEALER Malware Bypasses Chrome's App-Bound Encryption to Steal Browser Data

ConnectWise customers get mysterious warning about 'sophisticated' nation-state hack

A Hacker May Have Deepfaked Trumps Chief of Staff in a Phishing Campaign

Feds arrest DoD techie, claim he dumped top secret files in park for foreign spies to find

US medical org pays $50M+ to settle case after crims raided data and threatened to swat cancer patients

China-Linked Hackers Exploit SAP and SQL Server Flaws in Attacks Across Asia and Brazil

Meta yep, Facebook Meta is now a defense contractor

From the "Department of No" to a "Culture of Yes": A Healthcare CISO's Journey to Enabling Modern Care

Cops in Germany Claim They've ID'd the Mysterious Trickbot Ransomware Kingpin

U.S. Sanctions Funnull for $200M Romance Baiting Scams Tied to Crypto Fraud

Exploits and vulnerabilities in Q1 2025

ConnectWise Hit by Cyberattack; Nation-State Actor Suspected in Targeted Breach

Why Take9 Wont Improve Cybersecurity

Crims defeat human intelligence with fake AI installers they poison with ransomware

Meta Disrupts Influence Ops Targeting Romania, Azerbaijan, and Taiwan with Fake Personas

Data watchdog put cops on naughty step for lost CCTV footage

This month in security with Tony Anscombe May 2025 edition

The UK wants you to sign up for 1B cyber defense force

Infosecurity Europe 2025 drives cybersecurity priorities amid growing global risks

U.S. Sanctions Cloud Provider Funnull as Top Source of Pig Butchering Scams

Security outfit SentinelOne's services back online after lengthy outage

Feds gut host behind pig butchering scams that bilked $200M from Americans

~ 29 May 2025 ~

Microsoft's May Patch Tuesday update fails on some Windows 11 VMs

Cybercriminals Target AI Users with Malware-Loaded Installers Posing as Popular Tools

Friday Squid Blogging: NGC 1068 Is the Squid Galaxy

Why is China deep in US networks? 'They're preparing for war,' HR McMaster tells lawmakers

New Windows RAT Evades Detection for Weeks Using Corrupted DOS and PE Headers

A Swedish MMA Tournament Spotlights the Trump Administration's Handling of Far-Right Terrorism

Defending against evolving identity attack techniques

8,000+ Asus routers popped in 'advanced' mystery botnet plot

DragonForce Exploits SimpleHelp Flaws to Deploy Ransomware Across Customer Endpoints

How to deploy AI safely

Billions of cookies up for grabs as experts warn over session security

Siemens SiPass Integrated

Siemens SiPass

Instantel Micromate

Consilium Safety CS5000 Fire Panel

Chinese APT41 Exploits Google Calendar for Malware Command-and-Control Operations

Surveillance Via Smart Toothbrush

Over 100,000 WordPress Sites at Risk from Critical CVSS 10.0 Vulnerability in Wishlist Plugin

The US Is Storing Migrant Childrens DNA in a Criminal Database

European Commission: Make Europe Great Again... for startups

Victoria's Secret website laid bare for three days after 'security incident'

Adversarial AI: The new frontier in financial cybersecurity

~ 28 May 2025 ~

Iranian Hacker Pleads Guilty in $19 Million Robbinhood Ransomware Attack on Baltimore

Czech Republic Blames China-Linked APT31 Hackers for 2022 Cyberattack

Microsoft OneDrive File Picker Flaw Grants Apps Full Cloud Access Even When Uploading Just One File

Attack on LexisNexis Risk Solutions exposes data on 300k +

New PumaBot Botnet Targets Linux IoT Devices to Steal SSH Credentials and Mine Crypto

Pakistan Arrests 21 in Heartsender Malware Service

From Infection to Access: A 24-Hour Timeline of a Modern Stealer Campaign

Mimo Hackers Exploit CVE-2025-32432 in Craft CMS to Deploy Cryptominer and Proxyware

How 'Browser-in-the-Middle' Attacks Steal Sessions in Seconds

251 Amazon-Hosted IPs Used in Exploit Scan Targeting ColdFusion, Struts, and Elasticsearch

Russian IT pro sentenced to 14 years forced labor for sharing medical data with Ukraine

Apple Blocks $9 Billion in Fraud Over 5 Years Amid Rising App Store Threats

Location Tracking App for Foreigners in Moscow

Zanubis in motion: Tracing the active evolution of the Android banking malware

The cost of compromise: Why password attacks are still winning in 2025

DragonForce double-whammy: First hit an MSP, then use RMM software to push ransomware

ASUS to chase business PC market with free AI, or no AI - because nobody knows what to do with it

Ubers Secret Management Platform Scaling Secrets Security Across Multi-Cloud

~ 27 May 2025 ~

Don't click on that Facebook ad for a text-to-AI-video tool

New Self-Spreading Malware Infects Docker Containers to Mine Dero Cryptocurrency

Cybercriminals Clone Antivirus Site to Spread Venom RAT and Steal Crypto Wallets

New Russian cyber-spy crew Laundry Bear joins the email-stealing pack

Russian Hackers Breach 20+ NGOs Using Evilginx Phishing via Fake Microsoft Entra Pages

AI Agents and the NonHuman Identity Crisis: How to Deploy AIMore SecurelyatScale

The future of AI agentsand why OAuth must evolve

Employees Searching Payroll Portals on Google Tricked Into Sending Paychecks to Hackers

Adidas confirms criminals stole data from customer service provider

Hackers Are Calling Your Office: FBI Alerts Law Firms to Luna Moths Stealth Phishing Campaign

Ransomware attack on MATLAB dev MathWorks licensing center still locked down

Russia-Linked Hackers Target Tajikistan Government with Weaponized Word Documents

Johnson Controls iSTAR Configuration Utility (ICU) Tool

Chinese-Owned VPNs

The Privacy-Friendly Tech to Replace Your US-Based Email, Browser, and Search

New Russia-affiliated actor Void Blizzard targets critical sectors for espionage

Word to the wise: Beware of fake Docusign emails

~ 26 May 2025 ~

Over 70 Malicious npm and VS Code Packages Found Stealing Data and Crypto

CISO's Guide To Web Privacy Validation And Why It's Important

Weekly Recap: APT Campaigns, Browser Hijacks, AI Malware, Cloud Breaches and Critical CVEs

A Starter Guide to Protecting Your Data From Hackers and Corporations

TeleMessage security SNAFU worsens as 60 government staffers exposed

China approves rules for national online number ID scheme

AIDE Lightweight Linux Host Intrusion Detection

~ 25 May 2025 ~

Hackers Use Fake VPN and Browser NSIS Installers to Deliver Winos 4.0 Malware

~ 24 May 2025 ~

Cybercrime is 'orders of magnitude' larger than state-backed ops, says ex-White House advisor

Remembering John Young, co-founder of web archive Cryptome

The US Is Building a One-Stop Shop for Buying Your Data

~ 23 May 2025 ~

Hackers Use TikTok Videos to Distribute Vidar and StealC Malware via ClickFix Technique

Friday Squid Blogging: US Naval Ship Attacked by Squid in 1978

ViciousTrap Uses Cisco Flaw to Build Global Honeypot from 5,300 Compromised Devices

Ransomware scum leaked Nova Scotia Power customers' info

CISA says SaaS providers in firing line after Commvault zero-day Azure attack

300 Servers and 3.5M Seized as Europol Strikes Ransomware Networks Worldwide