Port 22

~ 21 Mar 2025 ~

Arrests in Tap-to-Pay Scheme Powered by Phishing

Medusa Ransomware Uses Malicious Driver to Disable Anti-Malware with Stolen Certificates

My Writings Are in the LibGen AI Training Corpus

China-Linked APT Aquatic Panda: 10-Month Campaign, 7 Global Targets, 5 Malware Families

10 Critical Network Pentest Findings IT Teams Overlook

Kaspersky Links Head Mare to Twelve, Targeting Russian Entities via Shared C2 Servers

NCSC Releases Post-Quantum Cryptography Timeline

Ongoing Cyber Attacks Exploit Critical Vulnerabilities in Cisco Smart Licensing Utility

How to Avoid US-Based Digital Servicesand Why You Might Want To

Threat landscape for industrial automation systems in Q4 2024

AdTech CEO whose products detected fraud jailed for financial fraud

Paragon spyware deployed against journalists and activists, Citizen Lab claims

Capital One cracker could be sent back to prison after judges rule she got off too lightly

~ 20 Mar 2025 ~

Dept of Defense engineer took home top-secret docs, booked a fishing trip to Mexico then the FBI showed up

YouTube Game Cheats Spread Arcane Stealer Malware to Russian-Speaking Users

Veeam and IBM Release Patches for High-Risk Flaws in Backup and AIX Systems

Infoseccers criticize Veeam over critical RCE vulnerability and a failing blacklist

How to Protect Your Business from Cyber Threats: Mastering the Shared Responsibility Model

Six Governments Likely Use Israeli Paragon Spyware to Hack IM Apps and Harvest Data

Why Continuous Compliance Monitoring Is Essential For IT Managed Service Providers

Critical GitHub Attack

CISA Adds NAKIVO Vulnerability to KEV Catalog Amid Active Exploitation

Too many software supply chain defense bibles? Boffins distill advice

The post-quantum cryptography apocalypse will be televised in 10 years, says UK's NCSC

SMA Sunny Portal

Siemens Simcenter Femap

Schneider Electric EnerlinX IFE and eIFE

Schneider Electric EcoStruxure

CERT-UA Warns: Dark Crystal RAT Targets Ukrainian Defense via Malicious Signal Messages

Operation FishMedley

Low-Cost Drone Add-Ons From China Let Anyone With a Credit Card Turn Toys Into Weapons of War

DOGE to Fired CISA Staff: Email Us Your Personal Data

~ 19 Mar 2025 ~

Hackers Exploit Severe PHP Flaw to Deploy Quasar RAT and XMRig Miners

Attackers swipe data of 500k+ people from Pennsylvania teachers union

Names, bank info, and more spills from top sperm bank

Leaked Black Basta Chats Suggest Russian Officials Aided Leader's Escape from Armenia

IBM scores perfect 10 ... vulnerability in mission-critical OS AIX

Watch This Webinar to Learn How to Eliminate Identity-Based AttacksBefore They Happen

ClearFake Infects 9,300 Sites, Uses Fake reCAPTCHA and Turnstile to Spread Info-Stealers

5 Identity Threat Detection & Response Must-Haves for Super SaaS Security

Ex-US Cyber Command chief: Europe and 5 Eyes can't fully replicate US intel

Critical mySCADA myPRO Flaws Could Let Attackers Take Over Industrial Control Systems

Virt o vizio? Un primo sguardo alle operazioni in espansione dello spyware di Paragon

Virtue or Vice? A First Look at Paragons Proliferating Spyware Operations

CISA Warns of Active Exploitation in GitHub Action Supply Chain Compromise

Arcane stealer: We want all your data

Show top LLMs buggy code and they'll finish off the mistakes rather than fix them

~ 18 Mar 2025 ~

CISA fires, now rehires and immediately benches security crew on full pay

New Rules File Backdoor Attack Lets Hackers Inject Malicious Code via AI Code Editors

Unpatched Windows Zero-Day Flaw Exploited by 11 State-Sponsored Threat Groups Since 2017

Google Acquires Wiz for $32 Billion in Its Biggest Deal Ever to Boost Cloud Security

New Critical AMI BMC Vulnerability Enables Remote Server Takeover and Bricking

New Ad Fraud Campaign Exploits 331 Apps with 60M+ Downloads for Phishing and Intrusive Ads

US tech jobs outlook clouded by DOGE cuts, Trump tariffs

How to Improve Okta Security in Four Steps

AI innovation requires AI security: Hear whats new at Microsoft Secure

China-Linked MirrorFace Deploys ANEL and AsyncRAT in New Cyber Espionage Operation

MirrorFace updates toolset, expands targeting to Europe

BADBOX 2.0 Botnet Infects 1 Million Android Devices for Ad Fraud and Proxy Abuse

Microsoft isn't fixing 8-year-old shortcut exploit abused for spying

Google acquisition target Wiz links fresh supply chain attack to 23K pwned GitHub repos

Microsoft Warns of StilachiRAT: A Stealthy RAT Targeting Credentials and Crypto Wallets

Schneider Electric EcoStruxure Power Automation System User Interface (EPAS-UI)

Schneider Electric EcoStruxure Power Automation System

Schneider Electric EcoStruxure Panel Server

Schneider Electric ASCO 5310/5350 Remote Annunciator

Rockwell Automation Lifecycle Services with VMware

Is Security Human Factors Research Skewed Towards Western Ideas and Habits?

UK wants dirt on data brokers before criminals get there first

Operation AkaiRy: MirrorFace invites Europe to Expo 2025 and revives ANEL backdoor

Extortion crew threatened to inform Edward Snowden (?!) if victim didn't pay up

'Dead simple' hijacking hole in Apache Tomcat 'now actively exploited in the wild'

~ 17 Mar 2025 ~

Court filing: DOGE aide broke Treasury policy by emailing unencrypted database

Apache Tomcat Vulnerability Actively Exploited Just 30 Hours After Public Disclosure

Amazon boots local Alexa processing: All your voice requests shipped to the cloud

Unpatched Edimax Camera Flaw Exploited for Mirai Botnet Attacks Since Last Year

Cybercriminals Exploit CSS to Evade Spam Filters and Track Email Users' Actions

StilachiRAT analysis: From system reconnaissance to cryptocurrency theft

THN Weekly Recap: Router Hacks, PyPI Attacks, New Ransomware Decryptor, and More

SANS Institute Warns of Novel Cloud-Native Ransomware Attacks

GitHub Action Compromise Puts CI/CD Secrets at Risk in Over 23,000 Repositories

Improvements in Brute Force Attacks

GitHub supply chain attack spills secrets from 23,000 projects

UK government to open 16B IT services competition after 6-month delay

AI's biggest surprises of 2024 | Unlocked 403 cybersecurity podcast (S2E1)

Microsoft wouldn't look at a bug report without a video. Researcher maliciously complied

~ 16 Mar 2025 ~

FCC stands up Council on National Security to fight China in ways that CISA used to

~ 15 Mar 2025 ~

Malicious PyPI Packages Stole Cloud TokensOver 14,100 Downloads Before Removal

End-to-End Encrypted Texts Between Android and iPhone Are Coming

~ 14 Mar 2025 ~

ClickFix: How to Infect Your PC in Three Easy Steps

Friday Squid Blogging: SQUID Band

Alleged Israeli LockBit Developer Rostislav Panev Extradited to U.S. for Cybercrime Charges

GSMA Confirms End-to-End Encryption for RCS, Enabling Secure Cross-Platform Messaging

Live Ransomware Demo: See How Hackers Breach Networks and Demand a Ransom

Why Most Microsegmentation Projects FailAnd How Andelyn Biosciences Got It Right

Upcoming Speaking Engagements

Apple's alleged UK encryption battle sparks political and privacy backlash

New MassJacker Malware Targets Piracy Users, Hijacking Cryptocurrency Transactions

OBSCURE#BAT Malware Uses Fake CAPTCHA Pages to Deploy Rootkit r77 and Evade Detection

TP-Link Router Botnet