Port 22

~ 2 May 2025 ~

British govt agents step in as Harrods becomes third mega retailer under cyberattack

xAI Dev Leaks API Key for Private SpaceX, Tesla LLMs

~ 1 May 2025 ~

Dems look to close the barn door after top DOGE dog has bolted

Fake Security Plugin on WordPress Enables Remote Admin Access for Attackers

Healthcare group Ascension discloses second cyberattack on patients' data

How Amazon red-teamed Alexa+ to keep your kids from ordering 50 pizzas

How Amazon red-teamed Alexa+ to keep your kids from ordering 50 pizzas

Analyzing CVE-2025-31191: A macOS security-scoped bookmarks-based sandbox escape

Why top SOC teams are shifting to Network Detection and Response

Claude AI Exploited to Operate 100+ Fake Political Personas in Global Influence Campaign

US as a Surveillance State

Pushing passkeys forward: Microsofts latest updates for simpler, safer sign-ins

New Research Reveals: 95% of AppSec Fixes Dont Reduce Risk

DarkWatchman, Sheriff Malware Hit Russia and Ukraine with Stealth and Nation-Grade Tactics

Think Twice Before Creating That ChatGPT Action Figure

Commvault Confirms Hackers Exploited CVE-2025-3928 as Zero-Day in Azure Breach

Chris Krebs loses Global Entry membership amid Trump feud

KUNBUS GmbH Revolution Pi

SonicWall Confirms Active Exploitation of Flaws Affecting Multiple Appliance Models

Data watchdog will leave British Library alone further probes 'not worth our time'

North Korea Stole Your Job

~ 30 Apr 2025 ~

Ex-NSA cyber-boss: AI will soon be a great exploit coder

Alleged Scattered Spider Member Extradited to U.S.

Researchers Demonstrate How MCP Prompt Injection Can Be Used for Both Attack and Defense

AI Code Hallucinations Increase the Risk of Package Confusion Attacks

Ex-CISA chief decries cuts as Trump demands loyalty above all else

Maryland man pleads guilty to outsourcing US gov work to North Korean dev in China

14 secure coding tips: Learn from the experts at Microsoft Build

[Free Webinar] Guide to Securing Your Entire Identity Lifecycle Against AI-Powered Threats

Chinese Hackers Abuse IPv6 SLAAC for AitM Attacks via Spellbinder Lateral Movement Tool

Customer Account Takeovers: The Multi-Billion Dollar Problem You Dont Know About

Nebulous Mantis Targets NATO-Linked Entities with Multi-Stage Malware Attacks

RansomHub Went Dark April 1; Affiliates Fled to Qilin, DragonForce Claimed Control

FBI steps in amid rash of politically charged swattings

Meta Launches LlamaFirewall Framework to Stop AI Jailbreaks, Injections, and Insecure Code

WhatsApp Case Against NSO Group Progressing

Indian Court Orders Action to Block Proton Mail Over AI Deepfake Abuse Allegations

Ghost in the shell script: Boffins reckon they can catch bugs before programs run

TheWizards APT group uses SLAAC spoofing to perform adversary-in-the-middle attacks

Cloud doesnt mean secure: How Intruder finds what others miss

~ 29 Apr 2025 ~

WhatsApp Launches Private Processing to Enable AI Features While Protecting Message Privacy

New Reports Uncover Jailbreaks, Unsafe Code, and Data Theft Risks in Leading AI Systems

Watch out for any Linux malware sneakily evading syscall-watching antivirus

SentinelOne Uncovers Chinese Espionage Campaign Targeting Its Infrastructure and Clients

WhatsApp Is Walking a Tightrope Between AI Features and Privacy

Enterprise tech dominates zero-day exploits with no signs of slowdown

Product Walkthrough: Securing Microsoft Copilot with Reco

Google Reports 75 Zero-Days Exploited in 2024 44% Targeted Enterprise Security Products

China now America's number one cyber threat US must get up to speed

Microsoft announces the 2025 Security Excellence Awards winners

Infosec pros tell Trump to quit bullying Chris Krebs it's undermining security

Millions of Apple Airplay-Enabled Devices Can Be Hacked via Wi-Fi

Rockwell Automation ThinManager

Delta Electronics ISPSoft

This month in security with Tony Anscombe April 2025 edition

China is using AI to sharpen every link in its attack chain, FBI warns

Malware Attack Targets World Uyghur Congress Leaders via Trojanized UyghurEdit++ Tool

Applying Security Engineering to Prompt Injection Security

Outlaw cybergang attacking targets worldwide

CISA Adds Actively Exploited Broadcom and Commvault Flaws to KEV Database

The one interview question that will protect you from North Korean fake workers

Swiss boffins admit to secretly posting AI-penned posts to Reddit in the name of science

Open source text editor poisoned with malware to target Uyghur users

Ex-Disney employee gets 3 years in the clink for goofy attacks on mousey menus

~ 28 Apr 2025 ~

Cybersecurity CEO accused of running malware on hospital PC blabs about it on LinkedIn

How to survive as a CISO aka 'chief scapegoat officer'

Admission impossible: NSA, CISA brass absent from RSA Conf

The future of AI in cybersecurity in a word: Optimistic

Windscribe Acquitted on Charges of Not Collecting Users Data

Weekly Recap: Critical SAP Exploit, AI-Powered Phishing, Major Breaches, New CVEs & More

How Breaches Start: Breaking Down 5 Real Vulns

Faster, more personalized service begins at the frontline with Microsoft Intune

Earth Kurma Targets Southeast Asia With Rootkits and Cloud-Based Data Theft Tools

From 112k to 4 million folks' data HR biz attack goes from bad to mega bad

WooCommerce Users Targeted by Fake Patch Phishing Campaign Deploying Site Backdoors

Hackers Exploit Critical Craft CMS Flaws; Hundreds of Servers Likely Compromised

4chan back online after 'catastrophic' attack, says it's too broke for good IT

Car Subscription Features Raise Your Risk of Government Surveillance, Police Records Show

How safe and secure is your iPhone really?

Microsoft pitches pay-to-patch reboot reduction subscription for Windows Server 2025

Weaponized Words: Uyghur Language Software Hijacked to Deliver Malware

Samsung admits Galaxy devices can leak passwords through clipboard wormhole

~ 27 Apr 2025 ~

Storm-1977 Hits Education Clouds with AzureChecker, Deploys 200+ Crypto Mining Containers

~ 26 Apr 2025 ~

ToyMaker Uses LAGTOY to Sell Access to CACTUS Ransomware Gangs for Double Extortion

Pete Hegseths Signal Scandal Spirals Out of Control

~ 25 Apr 2025 ~

Signalgate lessons learned: If creating a culture of security is the goal, America is screwed

Amid CVE funding fumble, 'we were mushrooms, kept in the dark,' says board member

Friday Squid Blogging: Squid Facts on Your Phone

North Korean Hackers Spread Malware via Fake Crypto Firms and Job Interview Lures

More Ivanti attacks may be on horizon, say experts who are seeing 9x surge in endpoint scans

Oh, cool. Microsoft melts bug that froze Server 2025 Remote Desktop sessions

M&S stops online orders as 'cyber incident' issues worsen

SAP Confirms Critical NetWeaver Flaw Amid Suspected Zero-Day Exploitation by Hackers

Why NHIs Are Security's Most Dangerous Blind Spot

Explore practical best practices to secure your data with Microsoft Purview

Emergency patch for potential SAP zero-day that could grant full system control

Researchers Identify Rack::Static Vulnerability Enabling Data Breaches in Ruby Servers

DslogdRAT Malware Deployed via Ivanti ICS Zero-Day CVE-2025-0282 in Japan Attacks

Cryptocurrency Thefts Get Physical

Triada strikes back