Port 22

~ 18 Feb 2025 ~

StaryDobry ruins New Years Eve, delivering miner instead of presents

No, youre not fired but beware of job termination scams

Winnti APT41 Targets Japanese Firms in RevivalStone Cyber Espionage Campaign

New Xerox Printer Flaws Could Let Attackers Capture Windows Active Directory Credentials

Indian authorities seize loot from collapsed BitConnect crypto scam

Cybercriminals Exploit Onerror Event in Image Tags to Deploy Payment Skimmers

~ 17 Feb 2025 ~

Atlas of Surveillance

Microsoft Uncovers New XCSSET macOS Malware Variant with Advanced Obfuscation Tactics

XCSSET macOS malware returns with first new version since 2022

South Korea Suspends DeepSeek AI Downloads Over Privacy Violations

CISO's Expert Guide To CTEM And Why It Matters

Katharine Hayhoe: The most important climate equation | Starmus highlights

THN Weekly Recap: Google Secrets Stolen, Windows Hack, New Crypto Scams and More

New Golang-Based Backdoor Uses Telegram Bot API for Evasive C2 Operations

Twin Google flaws allowed attacker to get from YouTube ID to Gmail address in a few easy steps

~ 16 Feb 2025 ~

Fujitsu worries US tariffs will see its clients slow digital spend

This open text-to-speech model needs just seconds of audio to clone your voice

~ 15 Feb 2025 ~

Nearly 10 years after Data and Goliath, Bruce Schneier says: Privacys still screwed

The Official DOGE Website Launch Was a Security Mess

Android's New Feature Blocks Fraudsters from Sideloading Apps During Calls

Top US Election Security Watchdog Forced to Stop Election Security Work

If you dread a Microsoft Teams invite, just wait until it turns out to be a Russian phish

~ 14 Feb 2025 ~

SonicWall firewalls now under attack: Patch ASAP or risk intrusion via your SSL VPN

Ron Deibert on Beyond the Headlines podcast

Chinas DeepSeek AI is watching what you type: Ron Deibert on NBC News

Ron Deibert talks about his new book Chasing Shadows on CityNews

~ 15 Feb 2025 ~

New whoAMI Attack Exploits AWS AMI Name Confusion for Remote Code Execution

~ 14 Feb 2025 ~

Lazarus Group Deploys Marstech1 JavaScript Implant in Targeted Developer Attacks

Friday Squid Blogging: Squid the Care Dog

Upcoming Speaking Engagements

Critical PostgreSQL bug tied to zero-day attack on US Treasury

AI and Civil Service Purges

2 charged over alleged New IRA terrorism activity linked to cops' spilled data

AI-Powered Social Engineering: Ancillary Tools and Techniques

Microsoft: Russian-Linked Hackers Using 'Device Code Phishing' to Hijack Accounts

RansomHub Becomes 2024s Top Ransomware Group, Hitting 600+ Organizations Globally

Watchdog ponders why Apple doesn't apply its strict app tracking rules to itself

PostgreSQL Vulnerability Exploited Alongside BeyondTrust Zero-Day in Targeted Attacks

Chinese spies suspected of 'moonlighting' as tawdry ransomware crooks

Storm-2372 conducts device code phishing campaign

~ 13 Feb 2025 ~

Nearly a Year Later, Mozilla is Still Promoting OneRep

More victims of China's Salt Typhoon crew emerge: Telcos just now hit via Cisco bugs

Securing DeepSeek and other AI systems with Microsoft Security

US lawmakers press Trump admin to oppose UK's order for Apple iCloud backdoor

Hackers Use CAPTCHA Trick on Webflow CDN PDFs to Bypass Security Scanners

North Korean APT43 Uses PowerShell and Dropbox in Targeted South Korea Cyberattacks

Fast Deployments, Secure Code: Watch this Learn to Sync Dev and Sec Teams

DOGE as a National Cyberattack

North Korea targets crypto developers via NPM supply chain attack

Siemens Teamcenter

Siemens SIPROTEC 5 Devices

Siemens SIPROTEC 5

Siemens SIPROTEC 5

Siemens SIMATIC S7-1200 CPU Family

Siemens SIMATIC PCS neo and TIA Administrator

Siemens SIMATIC IPC DiagBase and SIMATIC IPC DiagMonitor

Siemens SIMATIC

Siemens SCALANCE W700

Siemens RUGGEDCOM APE1808 Devices

Siemens Questa and ModelSim

Siemens OpenV2G

Siemens Opcenter Intelligence

Siemens APOGEE PXC and TALON TC Series

Outback Power Mojave Inverter

ORing IAP-420

mySCADA myPRO Manager

Dingtian DT-R0 Series

Hackers Exploited PAN-OS Flaw to Deploy Chinese Malware in Ransomware Attack

The Loneliness Epidemic Is a Security Crisis

AI and Security - A New Puzzle to Figure Out

Gaming or gambling? Lifting the lid on in-game loot boxes

Palo Alto Networks Patches Authentication Bypass Exploit in PAN-OS Software

FINALDRAFT Malware Exploits Microsoft Graph API for Espionage on Windows and Linux

Mysterious Palo Alto firewall reboots? You're not alone

Chinas Salt Typhoon Spies Are Still Hacking TelecomsNow by Exploiting Cisco Routers

Have I Been Pwned likely to ban resellers from buying subs, citing sh*tty behavior and onerous support requests

Feds want devs to stop coding 'unforgivable' buffer overflow vulnerabilities

Sophos sheds 6% of staff after swallowing Secureworks

~ 12 Feb 2025 ~

Trumps cyber chief pick has little experience in The Cyber

Arizona laptop farmer pleads guilty for funneling $17M to Kim Jong Un

Ransomware isn't always about the money: Government spies have objectives, too

Microsoft Uncovers Sandworm Subgroup's Global Cyber Attacks Spanning 15+ Countries

Russia's Sandworm caught snarfing credentials, data from American and Brit orgs

The BadPilot campaign: Seashell Blizzard subgroup conducts multiyear global access operation

A Hacker Group Within Russias Notorious Sandworm Unit Is Breaching Western Networks

Network Security Issues in RedNote

Researchers Find New Exploit Bypassing Patched NVIDIA Container Toolkit Vulnerability

Crimelords and spies for rogue states are working together, says Google

Delivering Malware Through Abandoned Amazon S3 Buckets

How to Steer AI Adoption: A CISO Guide

North Korean Hackers Exploit PowerShell Trick to Hijack Devices in New Cyberattack

What is penetration testing? | Unlocked 403 cybersecurity podcast (ep. 10)

Microsofts Patch Tuesday Fixes 63 Flaws, Including Two Under Active Exploitation

Ivanti Patches Critical Flaws in Connect Secure and Policy Secure Update Now

Microsoft Patch Tuesday, February 2025 Edition

This Ad-Tech Company Is Powering Surveillance of US Military Personnel

February's Patch Tuesday sees Microsoft offer just 63 fixes

~ 11 Feb 2025 ~

Probe finds US Coast Guard has left maritime cybersecurity adrift

Yup, AMD's Elba and Giglio definitely sound like they work corporate security

'Key kernel maintainers' still back Rust in the Linux kernel, despite the doubters