Port 22

~ 16 Jan 2025 ~

Under the cloak of UEFI Secure Boot: Introducing CVE-2024-7344

Python-Based Malware Powers RansomHub Ransomware to Exploit Network Flaws

Researcher Uncovers Critical Flaws in Multiple Versions of Ivanti Endpoint Manager

~ 15 Jan 2025 ~

GoDaddy slapped with wet lettuce for years of lax security and 'several major breaches'

DJI loosens flight restrictions, decides to trust operators to follow FAA rules

China's Salt Typhoon spies spotted on US govt networks before telcos, CISA boss says

Even modest makeup can thwart facial recognition

Windows Patch Tuesday hits snag with Citrix software, workarounds published

Google Ads Users Targeted in Malvertising Scam Stealing Credentials and 2FA Codes

Lazarus Group Targets Web3 Developers with Fake LinkedIn Profiles in Operation 99

Crypto klepto North Korea stole $659M over just 5 heists last year

Innovating in line with the European Unions AI Act

North Korean IT Worker Fraud Linked to 2016 Crowdfunding Scam and Fake Domains

Google Cloud Researchers Uncover Flaws in Rsync File Synchronization Tool

Phishing False Alarm

The High-Stakes Disconnect For ICS/OT Security

Cybersecurity and AI: What does 2025 have in store?

FBI Deletes PlugX Malware from 4,250 Hacked Computers in Multi-Month Operation

3 Actively Exploited Zero-Day Flaws Patched in Microsoft's Latest Security Update

Critical SimpleHelp Flaws Allow File Theft, Privilege Escalation, and RCE Attacks

Microsoft fixes under-attack privilege-escalation holes in Hyper-V

Undercover Operations: Scraping the Cybercrime Underground

~ 14 Jan 2025 ~

Microsoft: Happy 2025. Heres 161 Security Updates

FBI wipes Chinese PlugX malware from thousands of Windows PCs in America

Upcoming Speaking Engagements

Microsoft Uncovers macOS Vulnerability CVE-2024-44243 Allowing Rootkit Installation

Google OAuth Vulnerability Exposes Millions via Failed Startup Domains

Snyk appears to deploy 'malicious' packages targeting Cursor for unknown reason

It's not just Big Tech: The UK's Online Safety Act applies across the board

The First Password on the Internet

Schneider Electric Vijeo Designer

Schneider Electric EcoStruxure

Hitachi Energy FOXMAN-UN

Belledonne Communications Linphone-Desktop

UK floats ransomware payout ban for public sector

4 Reasons Your SaaS Attack Surface Can No Longer be Ignored

Protecting children online: Where Floridas new law falls short

Illicit HuiOne Telegram Market Surpasses Hydra, Hits $24 Billion in Crypto Transactions

Zero-Day Vulnerability Suspected in Attacks on Fortinet Firewalls with Exposed Interfaces

Russian-Linked Hackers Target Kazakhstan in Espionage Campaign with HATVIBE Malware

The Largest Illicit Online Marketplace Ever Is Growing at an Alarming Rate, Report Says

CISA Adds Second BeyondTrust Flaw to KEV Catalog Amid Active Attacks

Miscreants 'mass exploited' Fortinet firewalls, 'highly probable' zero-day used

~ 13 Jan 2025 ~

Cryptojacking, backdoors abound as attackers abuse Aviatrix Controller bug

Microsoft sues 'foreign-based' cyber-crooks, seizes sites used to abuse AI

Azure, Microsoft 365 MFA outage locks out users across regions

Analyzing CVE-2024-44243, a macOS System Integrity Protection bypass through kernel extensions

NATO's newest member comes out swinging following latest Baltic Sea cable attack

3 takeaways from red teaming 100 generative AI products

Ransomware crew abuses AWS native encryption, sets data-destruct timer for 7 days

Hackers Exploit Aviatrix Controller Vulnerability to Deploy Backdoors and Crypto Miners

THN Weekly Recap: Top Cybersecurity Threats, Tools and Tips [13 January]

Microsoft Takes Legal Action Against AI Hacking as a Service Scheme

Ransomware on ESXi: The mechanization of virtualized attacks

Nominet probes network intrusion linked to Ivanti zero-day exploit

Inside the Black Box of Predictive Travel Surveillance

WordPress Skimmers Evade Detection by Injecting Themselves into Database Tables

Expired Domains Allowed Control Over 4,000 Backdoors on Compromised Systems

Europe coughs up 400 to punter after breaking its own GDPR data protection rules

~ 11 Jan 2025 ~

Microsoft Sues Hacking Group Exploiting Azure AI for Harmful Content Creation

DoJ Indicts Three Russians for Operating Crypto Mixers Used in Cybercrime Laundering

~ 10 Jan 2025 ~

Friday Squid Blogging: Cotton-and-Squid-Bone Sponge

Chinese cyber-spies peek over shoulder of officials probing real-estate deals near American military bases

Apps That Are Spying on Your Location

Drug addiction treatment service admits attackers stole sensitive patient data

Secret Phone Surveillance Tech Was Likely Deployed at 2024 DNC

Schneider Electric PowerChute Serial Shutdown

Schneider Electric PowerChute Serial Shutdown

Schneider Electric Harmony HMI and Pro-face HMI Products

Schneider Electric Harmony HMI and Pro-face HMI Products

Delta Electronics DRASimuCAD (Update A)

Delta Electronics DRASimuCAD

Taking the Pain Out of Cybersecurity Reporting: A Practical Guide for MSPs

AI-Driven Ransomware FunkSec Targets 85 Victims Using Double Extortion Tactics

Hands-On Walkthrough: Microsegmentation For all Users, Workloads and Devices by Elisity

Google Project Zero Researcher Uncovers Zero-Click Exploit Targeting Samsung Devices

RedDelta Deploys PlugX Malware to Target Mongolia and Taiwan in Espionage Campaigns

CrowdStrike Warns of Phishing Scam Targeting Job Seekers with XMRig Cryptominer

Devs sent into security panic by 'feature that was helpful until it wasn't'

~ 9 Jan 2025 ~

Look for the label: White House rolls out 'Cyber Trust Mark' for smart devices

Candy Crush, Tinder, MyFitnessPal: See the Thousands of Apps Hijacked to Spy on Your Location

Rumble Among 15 Targets of Texas Attorney Generals Child Privacy Probe

How the US TikTok Ban Would Actually Work

Major Vulnerabilities Patched in SonicWall, Palo Alto Expedition, and Aviatrix Controllers

Zero-Day Vulnerability in Ivanti VPN

Sweet QuaDreams or Nightmare before Christmas? Bill Marczak on Dissecting an iOS 0-Day

Zero-day exploits plague Ivanti Connect Secure appliances for second year running

New Banshee Stealer Variant Bypasses Antivirus with Apples XProtect-Inspired Encryption

Security pros baited with fake Windows LDAP exploit traps

Product Review: How Reco Discovers Shadow AI in SaaS

The School Shootings Were Fake. The Terror Was Real

The School Shootings Were Fake. The Terror Was Real

Webinar: Learn How to Stop Encrypted Attacks Before They Cost You Millions

MirrorFace Leverages ANEL and NOOPDOOR in Multi-Year Cyberattacks on Japan

Crypto is soaring, but so are threats: Heres how to keep your wallet safe

Critical RCE Flaw in GFI KerioControl Allows Remote Code Execution via CRLF Injection

E.U. Commission Fined for Transferring User Data to Meta in Violation of Privacy Laws

Ivanti Flaw CVE-2025-0282 Actively Exploited, Impacts Connect Secure and Policy Secure

Japanese Police claim China ran five-year cyberattack campaign targeting local orgs

Database tables of student, teacher info stolen from PowerSchool in cyberattack