Port 22

~ 14 Apr 2025 ~

TraderTraitor: The Kings of the Crypto Heist

The Most Dangerous Hackers Youve Never Heard Of

Smishing Triad: The Scam Group Stealing the Worlds Riches

Gamaredon: The Turncoat Spies Relentlessly Hacking Ukraine

Official abuse of state security has always been bad, now it's horrifying

Attacks on the education sector are surging: How can cyber-defenders respond?

CIO and digi VP to depart UK retail giant Asda as Walmart divorce woes settle

Old Fortinet flaws under attack with new method its patch didn't prevent

China reportedly admitted directing cyberattacks on US infrastructure

PentestGPT AI-Powered Penetration Testing Assistant

~ 13 Apr 2025 ~

Hacktivism is back but don't be fooled, it's often state-backed goons in masks

Homeland Security Email Tells a US Citizen to 'Immediately' Self-Deport

~ 12 Apr 2025 ~

AI can't stop making up software dependencies and sabotaging everything

China Secretly (and Weirdly) Admits It Hacked US Infrastructure

~ 11 Apr 2025 ~

Fortinet Warns Attackers Retain FortiGate Access Post-Patching via SSL-VPN Symlink Exploit

Microsoft total recalls Recall totally to Copilot+ PCs

Paper Werewolf Deploys PowerModul Implant in Targeted Cyberattacks on Russian Sectors

Initial Access Brokers Shift Tactics, Selling More for Less

Palo Alto Networks Warns of Brute-Force Attempts Targeting PAN-OS GlobalProtect Gateways

SpyNote, BadBazaar, MOONSHINE Malware Target Android and iOS Users via Fake Apps

Friday Squid Blogging: Squid and Efficient Solar Tech

AI Vulnerability Finding

Sex-Fantasy Chatbots Are Leaking a Constant Stream of Explicit Messages

OttoKit WordPress Plugin Admin Creation Vulnerability Under Active Exploitation

Ransomware crims hammering UK more than ever as British techies complain the board just doesn't get it

Ex-Meta exec tells Senate Zuck's biz dangled US citizen data in bid to enter China

Reimagining Democracy

~ 10 Apr 2025 ~

The ultimate guide to Microsoft Security at RSAC 2025

Incomplete Patch in NVIDIA Toolkit Leaves CVE-2024-0132 Open to Container Escapes

Malicious npm Package Targets Atomic Wallet, Exodus Users by Swapping Crypto Addresses

US sensor giant Sensata admits ransomware derailed ops

PlayPraetor Reloaded: CTM360 Uncovers a Play Masquerading Party

The Identities Behind AI Agents: A Deep Dive Into AI & NHI

Gamaredon Uses Infected Removable Drives to Breach Western Military Mission in Ukraine

China-based SMS Phishing Triad Pivots to Banks

Europol Arrests Five SmokeLoader Clients Linked by Seized Database Evidence

AkiraBot Targets 420,000 Sites with OpenAI-Generated Spam, Bypassing CAPTCHA Protections

Subnet Solutions PowerSYSTEM Center

Siemens Solid Edge

Siemens SIDIS Prime

Siemens SENTRON 7KT PAC1260 Data Manager

Siemens License Server

Siemens Insights Hub Private Cloud

Siemens Industrial Edge Devices

Rockwell Automation Arena

ABB Arctic Wireless Gateways

Infosec experts fear China could retaliate against tariffs with a Typhoon attack

GOFFEE continues to attack organizations in Russia

Watch out for these traps lurking in search results

Europol: Five pay-per-infect suspects cuffed, some spill secrets to cops

<i>The Reg</i> translates the letter in which Oracle kinda-sorta tells customers it was pwned

Trump kills clearances for infosec's SentinelOne, ex-CISA boss Chris Krebs

~ 9 Apr 2025 ~

April's Patch Tuesday leaves unlucky Windows Hello users unable to login

Wyden blocks Trump's CISA boss nominee, blames cyber agency for 'actively hiding info' about telecom insecurity

Sensitive financial files feared stolen from US bank watchdog

Lovable AI Found Most Vulnerable to VibeScamming Enabling Anyone to Build Live Scam Pages

Spyware Maker NSO Group Is Paving a Path Back Into Trumps America

New TCESB Malware Found in Active Attacks Exploiting ESET Security Scanner

Stopping attacks against on-premises Exchange Server and SharePoint Server with AMSI

How cyberattackers exploit domain controllers using ransomware

Explosive Growth of Non-Human Identities Creating Massive Security Blind Spots

PipeMagic Trojan Exploits Windows Zero-Day Vulnerability to Deploy Ransomware

CISA Warns of CentreStack's Hard-Coded MachineKey Vulnerability Enabling RCE Attacks

Microsoft Patches 126 Flaws Including Actively Exploited Windows CLFS Vulnerability

Google's got a hot cloud security startup, a new unified platform and its eye on Microsoft's $20B+ security biz

How to Leak to a Journalist

So your friend has been hacked: Could you be next?

Adobe Patches 11 Critical ColdFusion Flaws Amid 30 Total Vulnerabilities Discovered

Patch Tuesday, April 2025 Edition

Pharmacist accused of using webcams to spy on women in intimate moments at work, home

~ 8 Apr 2025 ~

Bad luck, Windows 10 users. No fix yet for ransomware-exploited bug

Fortinet Urges FortiSwitch Upgrades to Patch Critical Admin Password Change Flaw

Amazon EC2 SSM Agent Flaw Patched After Privilege Escalation via Path Traversal

Cryptocurrency Miner and Clipper Malware Spread via SourceForge Cracked Software Listings

How Can Canada Tackle Foreign Interference Without a U.S. Ally?

Don't open that JPEG in WhatsApp for Windows. It might be an .EXE

Exploitation of CLFS zero-day leads to ransomware activity

Agentic AI in the SOC - Dawn of Autonomous Alert Triage

Meet the Deputy CISOs who help shape Microsofts approach to cybersecurity

UAC-0226 Deploys GIFTEDCROOK Stealer via Malicious Excel Files Targeting Ukraine

CISA Adds CrushFTP Vulnerability to KEV Catalog Following Confirmed Active Exploitation

Scattered Spider stops the Rickrolls, starts the RAT race

Arguing Against CALEA

Attackers distributing a miner and the ClipBanker Trojan via SourceForge

Google Releases Android Update to Patch Two Actively Exploited Vulnerabilities

1 billion reasons to protect your identity online

As CISA braces for more cuts, threat intel sharing takes a hit

Oracle says its cloud was in fact compromised

~ 7 Apr 2025 ~

That massive GitHub supply chain attack? It all started with a stolen SpotBugs token

CISA and FBI Warn Fast Flux is Powering Resilient Malware, C2, and Phishing Networks

Alleged Scattered Spider SIM-swapper must pay back $13.2M to 59 victims

Weekly Recap: VPN Exploits, Oracle's Silent Breach, ClickFix Comeback and More

Security Theater: Vanity Metrics Keep You Busy - and Exposed

Tech Accelerator: Azure security and AI adoption

Chrome to patch decades-old flaw that let sites peek at your history

Tribunal denies UK's attempt to keep details of Apple 'backdoor' case secret

PoisonSeed Exploits CRM Accounts to Launch Cryptocurrency Seed Phrase Poisoning Attacks

DIRNSA Fired

How ToddyCat tried to hide behind AV software

What native cloud security tools wont catch