Port 22

~ 22 May 2025 ~

Lumma Stealer: Down for the count

Russia expected to pass experimental law that tracks foreigners in Moscow via smartphones

FBI and Europol Disrupt Lumma Stealer Malware Network Linked to 10 Million Infections

Signal shuts the blinds on Microsoft Recall with the power of DRM

Rockwell Automation FactoryTalk Historian ThingWorx

Lantronix Device Installer

The Voter Experience

Mysterious Database of 184 Million Records Exposes Vast Array of Login Credentials

Scottish council admits ransomware crooks stole school data

~ 21 May 2025 ~

Russian Hackers Exploit Email and VPN Vulnerabilities to Spy on Ukraine Aid Logistics

US teen to plead guilty to extortion attack against PowerSchool

Russia's Fancy Bear swipes a paw at logistics, transport orgs' email servers

FBI, Microsoft, international cops bust Lumma infostealer service

PureRAT Malware Spikes 4x in 2025, Deploying PureLogs to Target Russian Firms

Fake Kling AI Facebook Ads Deliver RAT Malware to Over 22 Million Potential Victims

Coinbase confirms insiders handed over data of 70K users

Securing CI/CD workflows with Wazuh

ESET takes part in global operation to disrupt Lumma Stealer

Lumma Stealer: Breaking down the delivery techniques and capabilities of a prolific infostealer

How to Detect Phishing Attacks Faster: Tycoon2FA Example

Authorities Carry Out Elaborate Global Takedown of Infostealer Heavily Used by Cybercriminals

Judge allows Delta's lawsuit against CrowdStrike to proceed with millions in damages on the line

Google carves out cloudy safe spaces for nations nervous about Uncle Sam's servers

Researchers Expose PWA JavaScript Attack That Redirects Users to Adult Scam Apps

Trump announces $175B for Golden Dome defense shield over America

Google Chrome Can Now Auto-Change Compromised Passwords Using Its Built-In Manager

More AIs Are Taking Polls and Surveys

Dero miner zombies biting through Docker APIs to build a cryptojacking horde

3 Teens Almost Got Away With Murder. Then Police Found Their Google Searches

M&S warns of 300M dent in profits from cyberattack

UK 'extremely dependent' on US for space security

Scattered Spider snared financial orgs before targeting shops in Britain, America

'Ongoing' Ivanti hijack bug exploitation reaches clouds

AI-Powered Malware The Next Evolution in Cyber Threats

~ 20 May 2025 ~

KrebsOnSecurity Hit With Near-Record 6.3 Tbps DDoS

Hazy Hawk Exploits DNS Records to Hijack CDC, Corporate Domains for Malware Delivery

100+ Fake Chrome Extensions Found Hijacking Sessions, Stealing Credentials, Injecting Ads

South Asian Ministries Hit by SideWinder APT Using Old Office Flaws and Custom Malware

AWS Default IAM Roles Found to Enable Lateral Movement and Cross-Service Exploitation

The Crowded Battle: Key Insights from the 2025 State of Pentesting Report

Freshly discovered bug in OpenPGP.js undermines whole point of encrypted comms

Chinese Hackers Deploy MarsSnake Backdoor in Multi-Year Attack on Saudi Organization

Go-Based Malware Deploys XMRig Miner on Linux Hosts via Redis Configuration Abuse

Ransomware attack on food distributor spells more pain for UK supermarkets

Vertiv Liebert RDU101 and UNITY

Siemens Siveillance Video

Schneider Electric PrismaSeT Active - Wireless Panel Server

Schneider Electric Modicon Controllers

Schneider Electric Galaxy VS, Galaxy VL, Galaxy VXL

National Instruments Circuit Design Suite

Mitsubishi Electric Iconics Digital Solutions and Mitsubishi Electric Products

Danfoss AK-SM 8xxA Series

AutomationDirect MB-Gateway

Assured Telematics Inc (ATI) Fleet Management System with Geotab Integration

ABUP IoT Cloud Platform

Malicious PyPI Packages Exploit Instagram and TikTok APIs to Validate User Accounts

DoorDash Hack

What to Expect When Youre Convicted

Virgin Media O2 patches hole that let callers snoop on your coordinates

~ 19 May 2025 ~

CISA has a new No. 2 - but still no official top dog

RVTools Official Site Hacked to Deliver Bumblebee Malware via Trojanized Installer

Ransomware Gangs Use Skitnet Malware for Stealthy Data Theft and Remote Access

Trump Signs Controversial Law Targeting Nonconsensual Sexual Content

SEC SIM-swapper who Googled 'signs that the FBI is after you' put behind bars

The who, where, and how of APT attacks in Q4 2024Q1 2025

A Silicon Valley VC Says He Got the IDF Starlink Access Within Days of October 7 Attack

Why CTEM is the Winning Bet for CISOs in 2025

Firefox Patches 2 Zero-Days Exploited at Pwn2Own Berlin with $100K in Rewards

Microsoft extends Zero Trust to secure the agentic workforce

Weekly Recap: Zero-Day Exploits, Insider Threats, APT Targeting, Botnets and More

Millions at risk after attackers steal UK legal aid data dating back 15 years

The NSAs Fifty Years of Mathematical Cryptanalysis (19371987)

Who Even Is a Criminal Now?

We 3D-Printed Luigi Mangiones Ghost Gun. It Was Entirely Legal

How to Win Followers and Scamfluence People

For Tech Whistleblowers, Theres Safety in Numbers

IT chiefs of UK's massive health service urge vendors to make public security pledge

ESET APT Activity Report Q4 2024Q1 2025

Eeek! p0wned Alabama hit by unspecified 'cybersecurity event'

Falco Real-Time Threat Detection for Linux and Containers

China launches an AI cloud into orbit -12 sats for now, 2,800 in coming years

~ 18 May 2025 ~

Ex-NSA bad-guy hunter listened to Scattered Spider's fake help-desk calls: 'Those guys are good'

How the Signal Knockoff App TeleMessage Got Hacked in 20 Minutes

~ 17 May 2025 ~

Boffins devise technique that lets users prove location without giving it away

Coinbase Will Reimburse Customers Up to $400 Million After Data Breach

~ 16 May 2025 ~

Fired US govt workers, Uncle Xi wants you! to apply for this fake consulting gig

Americas consumer watchdog drops leash on proposed data broker crackdown

Friday Squid Blogging: Pet Squid Simulation

New HTTPBot Botnet Launches 200+ Precision DDoS Attacks on Gaming and Tech Sectors

Top 10 Best Practices for Effective Data Protection

Defamation case against DEF CON terminated with prejudice

Researchers Expose New Intel CPU Flaws Enabling Memory Leaks and Spectre v2 Attacks

Communications Backdoor in Chinese Power Inverters

Broadcom employee data stolen by ransomware crooks following hit on payroll provider

Fileless Remcos RAT Delivered via LNK Files and MSHTA in PowerShell-Based Attacks

[Webinar] From Code to Cloud to SOC: Learn a Smarter Way to Defend Modern Applications

Good luck to Atos' 7th CEO and its latest biz transformation

From hype to harm: 78% of CISOs see AI attacks already

Wazuh Open Source Security Platform for Threat Detection, Visibility & Compliance

Scammers are deepfaking voices of senior US government officials, warns FBI