Port 22

~ 4 Apr 2025 ~

Have We Reached a Distroless Tipping Point?

Critical Ivanti Flaw Actively Exploited to Deploy TRAILBLAZE and BRUSHFIRE Malware

OPSEC Failure Exposes Coquetttes Malware Campaigns on Bulletproof Hosting Servers

30 minutes to pwn town: Are speedy responses more important than backups for recovery?

Troy Hunt Gets Phished

CERT-UA Reports Cyberattacks Targeting Ukrainian State Systems with WRECKSTEEL Malware

A journey into forgotten Null Session and MS-RPC interfaces, part 2

Critical Flaw in Apache Parquet Allows Remote Attackers to Execute Arbitrary Code

Alan Turing Institute: UK can't handle a fight against AI-enabled crims

Ex-ASML, NXP staffer accused of stealing chip secrets, peddling them to Moscow

Retirement funds reportedly raided after unexplained portal probes and data theft

Signalgate: Pentagon watchdog probes Defense Sec Hegseth

~ 3 Apr 2025 ~

Microsoft Warns of Tax-Themed Email Attacks Using PDFs and QR Codes to Deliver Malware

Flux off: CISA, annexable allies warn of hot DNS threat

Suspected Chinese spies right now hijacking buggy Ivanti gear for third time in 3 years

Lazarus Group Targets Job Seekers With ClickFix Tactic to Deploy GolangGhost Malware

AI Threats Are Evolving Fast Learn Practical Defense Tactics in this Expert Webinar

AI Adoption in the Enterprise: Breaking Through the Security and Compliance Gridlock

Threat actors leverage tax season to deploy tax-themed phishing campaigns

When disaster strikes, proper preparation prevents poor performance

How Cyber Espionage Threatens Democracy in the Age of Trump (The Agenda)

The Citizen Labs Director Dissects Spyware and the Proliferating Market for It (The Record)

The United States is Putting the United States in Danger

The U.S. Wants Canada to Become A Police State

Google Patches Quick Share Vulnerability Enabling Silent File Transfers Without Consent

Triada Malware Preloaded on Counterfeit Android Phones Infects 2,600+ Devices

Why is someone mass-scanning Juniper and Palo Alto Networks products?

Hitachi Energy TRMTracker

Hitachi Energy RTU500 Series

B&R APROL

ABB Low Voltage DC Drives and Power Controllers CODESYS RTS

ABB ACS880 Drives Containing CODESYS RTS

EU: These are scary times let's backdoor encryption!

Web 3.0 Requires Data Integrity

Legacy Stripe API Exploited to Validate Stolen Payment Cards in Web Skimmer Campaign

Heterogeneous stacks, ransomware, and ITaaS: A DR nightmare

Europol Dismantles Kidflix With 72,000 CSAM Videos Seized in Major Operation

The good, the bad and the unknown of AI: A Q&A with Mria Bielikov

Customer info allegedly stolen from Royal Mail, Samsung via compromised supplier

~ 2 Apr 2025 ~

Raw Deel: Corporate spy admits role in espionage at HR software biz Rippling

Google Fixed Cloud Run Vulnerability Allowing Unauthorized Image Access via IAM Misuse

Crimelords at Hunters International told lackeys ransomware too 'risky'

Cybersecurity Professor Faced China-Funding Inquiry Before Disappearing, Sources Say

Helping Your Clients Achieve NIST Compliance: A Step by Step Guide for Service Providers

Outlaw Group Uses SSH Brute-Force to Deploy Cryptojacking Malware on Linux Servers

How SSL Misconfigurations Impact Your Attack Surface

Oracle's masterclass in breach comms: Deny, deflect, repeat

Dont let cyberattacks keep you down

FIN7 Deploys Anubis Backdoor to Hijack Windows Systems via Compromised SharePoint Sites

For healthcare orgs, disaster recovery means making sure docs can save lives during ransomware infection

New Malware Loaders Use Call Stack Spoofing, GitHub C2, and .NET Reactor for Stealth

Rational Astrologies and Security

Oracle faces Texas-sized lawsuit over alleged cloud snafu and radio silence

TookPS: DeepSeek isnt the only game in town

One of the last of Bletchley Park's quiet heroes, Betty Webb, dies at 101

Apple belatedly patches actively exploited bugs in older OSes

North Koreas fake tech workers now targeting European employers

Forget Signal. National Security Adviser Waltz now accused of using Gmail for work

~ 1 Apr 2025 ~

Over 1,500 PostgreSQL Servers Compromised in Fileless Cryptocurrency Mining Campaign

Enterprise Gmail Users Can Now Send End-to-End Encrypted Emails to Any Platform

Lucid PhaaS Hits 169 Targets in 88 Countries Using iMessage and RCS Smishing

Apple Backports Critical Fixes for 3 Live Exploits Impacting iOS and macOS Legacy Devices

Nearly 24,000 IPs Target PAN-OS GlobalProtect in Coordinated Login Scan Campaign

New Case Study: Global Retailer Overshares CSRF Tokens with Facebook

China-Linked Earth Alux Uses VARGEIT and COBEACON in Multi-Stage Cyber Intrusions

Transforming public sector security operations in the AI era

Gender-Based Digital Transnational Repression and the Authoritarian Targeting of Women in the Diaspora

Microsoft to mark five decades of Ctrl-Alt-Deleting the competition

Google makes end-to-end encrypted Gmail easy for all even Outlook users

Rockwell Automation Lifecycle Services with Veeam Backup and Replication

UK threatens 100K-a-day fines under new cyber bill

Apple Fined 150 Million by French Regulator Over Discriminatory ATT Consent Practices

Cell Phone OPSEC for Border Crossings

GCHQ intern took top secret spy tool home, now faces prison

CISA spots spawn of Spawn malware targeting Ivanti flaw

~ 31 Mar 2025 ~

Top cybersecurity boffin, wife vanish as FBI raids homes

Russian Hackers Exploit CVE-2025-26633 via MSC EvilTwin to Deploy SilentPrism and DarkWisp

Oracle Cloud security SNAFU latest: IT giant accused of pedantry as evidence vanishes

Cybersecurity Professor Mysteriously Disappears as FBI Raids His Homes

Hackers Exploit WordPress mu-Plugins to Inject Spam and Hijack Site Images

Weekly Recap: Chrome 0-Day, IngressNightmare, Solar Bugs, DNS Tactics, and More

Check Point confirms breach, but says it was 'old' data and crook made 'false' claims

5 Impactful AWS Vulnerabilities You're Responsible For

Analyzing open-source bootloaders: Finding vulnerabilities faster with AI

Russia-Linked Gamaredon Uses Troop-Related Lures to Deploy Remcos RAT in Ukraine

New innovations in Microsoft Purview for protected, AI-ready data

The Signal Chat Leak and the NSA

This month in security with Tony Anscombe March 2025 edition

Cloud security explained: Whats left exposed?

An AI Image Generators Exposed Database Reveals What People Really Used It For

Resilience in the face of ransomware: A key to business survival

How Each Pillar of the 1st Amendment is Under Attack

China cracks down on personal information collection. No, seriously

~ 30 Mar 2025 ~

Oracle Health reportedly warns of info leak from legacy server

RESURGE Malware Exploits Ivanti Flaw with Rootkit and Web Shell Features

~ 29 Mar 2025 ~

New Android Trojan Crocodilus Abuses Accessibility to Steal Banking and Crypto Credentials

Malware in Lisp? Now you're just being cruel

Top Trump Officials Passwords and Personal Phone Numbers Discovered Online

BlackLock Ransomware Exposed After Researchers Exploit Leak Site Vulnerability

~ 28 Mar 2025 ~

Friday Squid Blogging: Squid Werewolf Hacking Group