Port 22

~ 22 Jan 2025 ~

President Trump Pardons Silk Road Creator Ross Ulbricht After 11 Years in Prison

Ransomware scum make it personal for <i>Reg</i> readers by impersonating tech support

PlushDaemon APT Targets South Korean VPN Provider in Supply Chain Attack

Oracle Releases January 2025 Patch to Address 318 Flaws Across Major Products

Mirai Botnet Launches Record 5.6 Tbps DDoS Attack with 13,000+ IoT Device

PlushDaemon compromises supply chain of Korean VPN service

PowerSchool theft latest: Decades of Canadian student records, data from 40-plus US states feared stolen

Trump Frees Silk Road Creator Ross Ulbricht After 11 Years in Prison

~ 21 Jan 2025 ~

Patch procrastination leaves 50,000 Fortinet firewalls vulnerable to zero-day

Mirai Variant Murdoc_Botnet Exploits AVTECH IP Cameras and Huawei Routers

HPE probes IntelBroker's bold data theft boasts

13,000 MikroTik Routers Hijacked by Botnet for Malspam and Cyberattacks

AI Mistakes Are Very Different from Human Mistakes

ZF Roll Stability Support Plus (RSSPlus)

Traffic Alert and Collision Avoidance System (TCAS) II

Siemens SIMATIC S7-1200 CPUs

Ex-CIA Analyst Pleads Guilty to Sharing Top-Secret Data with Unauthorized Parties

HackGATE: Setting New Standards for Visibility and Control in Penetration Testing Projects

Under lock and key: Protecting corporate data from cyberthreats in 2025

Breaking free from reactive security

PNGPlug Loader Delivers ValleyRAT Malware Through Fake Software Installers

CERT-UA Warns of Cyber Scams Using Fake AnyDesk Requests for Fraudulent Security Audits

Banks must keep ahead of risks and reap AI rewards

~ 20 Jan 2025 ~

Hackers game out infowar against China with the US Navy

Unsecured Tunneling Protocols Expose 4.2 Million Hosts, Including VPNs and Routers

DoNot Team Linked to New Tanzeem Android Malware Targeting Intelligence Collection

How to leave the submarine cable cutters all at sea go Swedish

Biden Signs New Cybersecurity Order

Ransomware attack forces Brit high school to shut doors

THN Weekly Recap: Top Cybersecurity Threats, Tools and Tips [20 January]

Product Walkthrough: How Satori SecuresSensitive Data From Production to AI

Sage Copilot grounded briefly to fix AI misbehavior

Hackers Deploy Malicious npm Packages to Steal Solana Wallet Keys via Gmail SMTP

Datacus extractus: Harry Potter publisher breached without resorting to magic

When food delivery apps reached Indonesia, everyone put on weight

Donald Trump proposes US government acquire half of TikTok, which thanks him and restores service

~ 19 Jan 2025 ~

OpenAI's ChatGPT crawler can be tricked into DDoSing sites, answering your queries

How to Get Around the US TikTok Ban

TikTok Goes Dark in the U.S. as Federal Ban Takes Effect January 19, 2025

~ 18 Jan 2025 ~

US Names One of the Hackers Allegedly Behind Massive Salt Typhoon Breaches

U.S. Sanctions Chinese Cybersecurity Firm Over Treasury Hack Tied to Silk Typhoon

~ 17 Jan 2025 ~

FCC to telcos: Did you know you must by law secure your networks from foreign spies?

Friday Squid Blogging: Opioid Alternatives from Squid Research

Biden signs sweeping cybersecurity order, just in time for Trump to gut it

The FCCs Jessica Rosenworcel Isnt Leaving Without a Fight

Fortinet: FortiGate config leaks are genuine but misleading

Clock ticking for TikTok as US Supreme Court upholds ban

Six vulnerabilities in ubiquitous rsync tool announced and fixed in a day

Critical Flaws in WGS-804HPT Switches Enable RCE and Network Exploitation

Python-Based Bots Exploiting PHP Servers Fuel Gambling Platform Proliferation

Social Engineering to Disable iMessage Protections

Medusa ransomware group claims attack on UK's Gateshead Council

How to Bring Zero Trust to Wi-Fi Security with a Cloud-based Captive Portal?

U.S. Sanctions North Korean IT Worker Network Supporting WMD Programs

New 'Sneaky 2FA' Phishing Kit Targets Microsoft 365 Accounts with 2FA Code Bypass

Mercedes-Benz Head Unit security research report

Microsoft eggheads say AI can never be made secure after testing Redmond's own products

European Privacy Group Sues TikTok and AliExpress for Illicit Data Transfers to China

Just as your LLM once again goes off the rails, Cisco, Nvidia are at the door smiling

GM parks claims that driver location data was given to insurers, pushing up premiums

Hackers Likely Stole FBI Call Logs From AT&T That Could Compromise Informants

~ 16 Jan 2025 ~

Chinese Innovations Spawn Wave of Toll Phishing Via SMS

Russia's Star Blizzard phishing crew caught targeting WhatsApp accounts

Russian Star Blizzard Shifts Tactics to Exploit WhatsApp QR Codes for Credential Harvesting

Enzo Biochem settles lawsuit over 2023 ransomware attack for $7.5M

New Star Blizzard spear-phishing campaign targets WhatsApp accounts

Cynthia Khoo joins Online Harms and Cyberbullying Town Hall Panel on CPAC

Cybersecurity rethink - from reaction to resilience

UEFI Secure Boot: Not so secure

Raspberry Pi hands out prizes to all in the RP2350 Hacking Challenge

Ready to Simplify Trust Management? Join Free Webinar to See DigiCert ONE in Action

FBI Deletes PlugX Malware from Thousands of Computers

Siemens Siveillance Video Camera

Siemens SIPROTEC 5 Products

Siemens Mendix LDAP

Siemens Industrial Edge Management

Schneider Electric Data Center Expert

Hitachi Energy FOX61x, FOXCST, and FOXMAN-UN Products

Hitachi Energy FOX61x Products

Fuji Electric Alpha5 SMART

The $10 Cyber Threat Responsible for the Biggest Breaches of 2024

Biden's Cyber Ambassador Urges Trump Not to Cede Ground to Russia and China in Global Tech Fight

New UEFI Secure Boot Vulnerability Could Allow Attackers to Load Malicious Bootkits

Researchers Find Exploit Allowing NTLMv1 Despite Active Directory Restrictions

Hackers Hide Malware in Images to Deploy VIP Keylogger and 0bj3ctivity Stealer

GitHubs Deepfake Porn Crackdown Still Isnt Working

Infoseccer: Private security biz let guard down, exposed 120K+ files

A New Jam-Packed Biden Executive Order Tackles Cybersecurity, AI, and More

Under the cloak of UEFI Secure Boot: Introducing CVE-2024-7344

Python-Based Malware Powers RansomHub Ransomware to Exploit Network Flaws

Researcher Uncovers Critical Flaws in Multiple Versions of Ivanti Endpoint Manager

~ 15 Jan 2025 ~

GoDaddy slapped with wet lettuce for years of lax security and 'several major breaches'

DJI loosens flight restrictions, decides to trust operators to follow FAA rules

China's Salt Typhoon spies spotted on US govt networks before telcos, CISA boss says

Even modest makeup can thwart facial recognition

Windows Patch Tuesday hits snag with Citrix software, workarounds published

Google Ads Users Targeted in Malvertising Scam Stealing Credentials and 2FA Codes

Lazarus Group Targets Web3 Developers with Fake LinkedIn Profiles in Operation 99

Crypto klepto North Korea stole $659M over just 5 heists last year

Innovating in line with the European Unions AI Act