Port 22

~ 11 Feb 2025 ~

'Key kernel maintainers' still back Rust in the Linux kernel, despite the doubters

Triplestrength hits victims with triple trouble: Ransomware, cloud hijacks, crypto-mining

AUKUS blasts holes in LockBit's bulletproof hosting provider

Man who SIM-swapped the SEC's X account pleads guilty

Google Confirms Android SafetyCore Enables AI-Powered On-Device Content Classification

I'm a security expert, and I almost fell for a North Korea-style deepfake job applicant Twice

4 Ways to Keep MFA From Becoming too Much of a Good Thing

Trusted Encryption Environments

Progress Software Patches High-Severity LoadMaster Flaws Affecting Multiple Versions

Gcore DDoS Radar Reveals 56% YoY Increase in DDoS Attacks

Protecting Your Software Supply Chain: Assessing the Risks Before Deployment

How AI-driven identify fraud is causing havoc

Threat Actors Exploit ClickFix to Deploy NetSupport RAT in Latest Cyber Attacks

8Base Ransomware Data Leak Sites Seized in International Law Enforcement Operation

Apple Patches Actively Exploited iOS Zero-Day CVE-2025-24200 in Emergency Update

Apple warns 'extremely sophisticated attack' may be targeting iThings

~ 10 Feb 2025 ~

All your 8Base are belong to us: Ransomware crew busted in global sting

Join the Citizen Lab researchers at the 2025 RightsCon in Taipei, Taiwan.

US Funding Cuts Are Helping Criminals Get Away With Child Abuse and Human Trafficking

The TikTok ban is already dead in the water: Jon Penney writes for the Globe and Mail

Build a stronger security strategy with proactive and reactive incident response: Cyberattack Series

Hackers Exploit Google Tag Manager to Deploy Credit Card Skimmers on Magento Stores

US news org still struggling to print papers a week after 'cybersecurity event'

THN Weekly Recap: Top Cybersecurity Threats, Tools and Tips [10 February]

Pairwise Authentication of Humans

Don't Overlook These 6 Critical Okta Security Configurations

The Rise of the Drone Boats

Neil Lawrence: What makes us unique in the age of AI | Starmus highlights

DragonRank Exploits IIS Servers with BadIIS Malware for SEO Fraud and Gambling Redirects

UK armed forces fast-tracking cyber warriors to defend digital front lines

Zimbra Releases Security Updates for SQL Injection, Stored XSS, and SSRF Vulnerabilities

Judge says US Treasury more vulnerable to hacking since Trump let the DOGE out

XE Hacker Group Exploits VeraCore Zero-Day to Deploy Persistent Web Shells

India's banking on the bank.in domain cleaning up its financial services sector

DeepSeek's iOS app is a security nightmare, and that's before you consider its TikTok links

~ 9 Feb 2025 ~

Huawei revenue growing fast, suggesting China's scoffing at sanctions

~ 8 Feb 2025 ~

UK is Ordering Apple to Break its Own Encryption

UK Secret Order Demands That Apple Give Access to Users Encrypted Data

Malicious ML Models on Hugging Face Leverage Broken Pickle Format to Evade Detection

Teen on Musks DOGE Team Graduated from The Com

~ 7 Feb 2025 ~

Friday Squid Blogging: The Colossal Squid

ACLU Warns DOGEs Unchecked Access Could Violate Federal Law

UK Home Office silent on alleged Apple backdoor order

Indias RBI Introduces Exclusive "bank.in" Domain to Combat Digital Banking Fraud

Screenshot-Reading Malware

DeepSeek App Transmits Sensitive User and Device Data Without Encryption

CISA Warns of Active Exploitation in Trimble Cityworks Vulnerability Leading to IIS RCE

UK industry leaders unleash hurricane-grade scale for cyberattacks

AI-Powered Social Engineering: Reinvented Threats

Microsoft Identifies 3,000+ Publicly Disclosed ASP.NET Machine Keys Vulnerable to Code Injection

Hackers Exploiting SimpleHelp RMM Flaws for Persistent Access and Ransomware

Apple missed screenshot-snooping malware in code that made it into the App Store, Kaspersky claims

If Ransomware Inc was a company, its 2024 results would be a horror show

~ 6 Feb 2025 ~

Coordinates of millions of smartphones feared stolen, sparking yet another lawsuit against data broker

Experts Flag Security, Privacy Risks in DeepSeek AI App

Federal judge tightens DOGE leash over critical Treasury payment system access

Dems want answers on national security risks posed by hiring freeze, DOGE

Code injection attacks using publicly disclosed ASP.NET machine keys

Fake Google Chrome Sites Distribute ValleyRAT Malware via DLL Hijacking

Ransomware Extortion Drops to $813.5M in 2024, Down from $1.25B in 2023

AIs and Robots Should Sound Robotic

Trimble Cityworks

Schneider Electric EcoStruxure Power Monitoring Expert (PME)

Schneider Electric EcoStruxure

ABB Drive Composer

SparkCat Malware Uses OCR to Extract Crypto Wallet Recovery Phrases from Images

The Evolving Role of PAM in Cybersecurity Leadership Agendas for 2025

North Korean APT Kimsuky Uses forceCopy Malware to Steal Browser-Stored Credentials

Top 3 Ransomware Threats Active in 2025

Cisco Patches Critical ISE Vulnerabilities Enabling Root CmdExec and PrivEsc

DOGE Teen Owns Tesla.Sexy LLC and Worked at Startup That Has Hired Convicted Hackers

Democrats demand to know WTF is up with that DOGE server on OPM's network

Robocallers who called the FCC pretending to be from the FCC land telco in trouble

~ 5 Feb 2025 ~

Mixing Rust and C in Linux likened to cancer by kernel maintainer

Musky minion granted 'read-only' access to federal payment systems

DOGE latest: Citrix supremo has 'read-only' access to US Treasury payment system

The Collapse of USAID Is Already Fueling Human Trafficking and Slavery at Scammer Compounds

Netgear fixes critical bugs as Five Eyes warn about break-ins at the edge

Cross-Platform JavaScript Stealer Targets Crypto Wallets in New Lazarus Group Campaign

US cranks up espionage charges against ex-Googler accused of trade secrets heist

Cybercriminals Use Go Resty and Node Fetch in 13 Million Password Spraying Attempts

Despite Catastrophic Hacks, Ransomware Payments Dropped Dramatically Last Year

Silent Lynx Using PowerShell, Golang, and C++ Loaders in Multi-Stage Cyberattacks

New Veeam Flaw Allows Arbitrary Code Execution via Man-in-the-Middle Attack

On Generative AI Security

Investors, Trump and the Illuminati: What the Nigerian prince scams became in 2024

Navigating the Future: Key IT Vulnerability Management Trends

Patch or perish: How organizations can master vulnerability management

AsyncRAT Campaign Uses Python Payloads and TryCloudflare Tunnels for Stealth Attacks

Take my money: OCR crypto stealers in Google Play and App Store

Take my money: OCR crypto stealers in Google Play and App Store

CISA Adds Four Actively Exploited Vulnerabilities to KEV Catalog, Urges Fixes by Feb 25

~ 4 Feb 2025 ~

Google: How to make any AMD Zen CPU always generate 4 as a random number

Poisoned Go programming language package lay undetected for 3 years

Whos Behind the Seized Forums Cracked & Nulled?

Grubhub serves up security incident with a side of needing to change your password

US accuses Canadian math prodigy of $65M crypto scheme

Malicious Go Package Exploits Module Mirror Caching for Persistent Remote Access

Roeland Nusselder: AI will eat all our energy, unless we make it tiny | Starmus highlights

Russian Cybercrime Groups Exploiting 7-Zip Flaw to Bypass Windows MotW Protections