Port 22

~ 13 Jan 2025 ~

Analyzing CVE-2024-44243, a macOS System Integrity Protection bypass through kernel extensions

NATO's newest member comes out swinging following latest Baltic Sea cable attack

3 takeaways from red teaming 100 generative AI products

Ransomware crew abuses AWS native encryption, sets data-destruct timer for 7 days

Hackers Exploit Aviatrix Controller Vulnerability to Deploy Backdoors and Crypto Miners

THN Weekly Recap: Top Cybersecurity Threats, Tools and Tips [13 January]

Microsoft Takes Legal Action Against AI Hacking as a Service Scheme

Ransomware on ESXi: The mechanization of virtualized attacks

Nominet probes network intrusion linked to Ivanti zero-day exploit

Inside the Black Box of Predictive Travel Surveillance

WordPress Skimmers Evade Detection by Injecting Themselves into Database Tables

Expired Domains Allowed Control Over 4,000 Backdoors on Compromised Systems

Europe coughs up 400 to punter after breaking its own GDPR data protection rules

~ 11 Jan 2025 ~

Microsoft Sues Hacking Group Exploiting Azure AI for Harmful Content Creation

DoJ Indicts Three Russians for Operating Crypto Mixers Used in Cybercrime Laundering

~ 10 Jan 2025 ~

Friday Squid Blogging: Cotton-and-Squid-Bone Sponge

Chinese cyber-spies peek over shoulder of officials probing real-estate deals near American military bases

Apps That Are Spying on Your Location

Drug addiction treatment service admits attackers stole sensitive patient data

Secret Phone Surveillance Tech Was Likely Deployed at 2024 DNC

Schneider Electric PowerChute Serial Shutdown

Schneider Electric PowerChute Serial Shutdown

Schneider Electric Harmony HMI and Pro-face HMI Products

Schneider Electric Harmony HMI and Pro-face HMI Products

Delta Electronics DRASimuCAD (Update A)

Delta Electronics DRASimuCAD

Taking the Pain Out of Cybersecurity Reporting: A Practical Guide for MSPs

AI-Driven Ransomware FunkSec Targets 85 Victims Using Double Extortion Tactics

Hands-On Walkthrough: Microsegmentation For all Users, Workloads and Devices by Elisity

Google Project Zero Researcher Uncovers Zero-Click Exploit Targeting Samsung Devices

RedDelta Deploys PlugX Malware to Target Mongolia and Taiwan in Espionage Campaigns

CrowdStrike Warns of Phishing Scam Targeting Job Seekers with XMRig Cryptominer

Devs sent into security panic by 'feature that was helpful until it wasn't'

~ 9 Jan 2025 ~

Look for the label: White House rolls out 'Cyber Trust Mark' for smart devices

Candy Crush, Tinder, MyFitnessPal: See the Thousands of Apps Hijacked to Spy on Your Location

Rumble Among 15 Targets of Texas Attorney Generals Child Privacy Probe

How the US TikTok Ban Would Actually Work

Major Vulnerabilities Patched in SonicWall, Palo Alto Expedition, and Aviatrix Controllers

Zero-Day Vulnerability in Ivanti VPN

Sweet QuaDreams or Nightmare before Christmas? Bill Marczak on Dissecting an iOS 0-Day

Zero-day exploits plague Ivanti Connect Secure appliances for second year running

New Banshee Stealer Variant Bypasses Antivirus with Apples XProtect-Inspired Encryption

Security pros baited with fake Windows LDAP exploit traps

Product Review: How Reco Discovers Shadow AI in SaaS

The School Shootings Were Fake. The Terror Was Real

The School Shootings Were Fake. The Terror Was Real

Webinar: Learn How to Stop Encrypted Attacks Before They Cost You Millions

MirrorFace Leverages ANEL and NOOPDOOR in Multi-Year Cyberattacks on Japan

Crypto is soaring, but so are threats: Heres how to keep your wallet safe

Critical RCE Flaw in GFI KerioControl Allows Remote Code Execution via CRLF Injection

E.U. Commission Fined for Transferring User Data to Meta in Violation of Privacy Laws

Ivanti Flaw CVE-2025-0282 Actively Exploited, Impacts Connect Secure and Policy Secure

Japanese Police claim China ran five-year cyberattack campaign targeting local orgs

Database tables of student, teacher info stolen from PowerSchool in cyberattack

Beyond Meh-trics: Examining How CTI Programs Demonstrate Value Using Metrics

~ 8 Jan 2025 ~

I tried hard, but didn't fix cybersecurity, admits outgoing US National Cyber Director

Mitel 0-day, 5-year-old Oracle RCE bug under active exploit

Neglected Domains Used in Malspam to Evade SPF and DMARC Security Protections

DNA sequencers found running ancient BIOS, posing risk to clinical research

UN's aviation agency confirms attack on recruitment database

Researchers Expose NonEuclid RAT Using UAC Bypass and AMSI Evasion Techniques

Top 5 Malware Threats to Prepare Against in 2025

Crims backdoored the backdoors they supplied to other miscreants. Then the domains lapsed

Mirai Botnet Variant Exploits Four-Faith Router Vulnerability for DDoS Attacks

FCC Launches 'Cyber Trust Mark' for IoT Devices to Certify Security Compliance

Akamai to quit its CDN in China, seemingly not due to trouble from Beijing

CISA Flags Critical Flaws in Mitel and Oracle Systems Amid Active Exploitation

FCC boss urges speedy spectrum auction to fund 'Rip'n'Replace' of Chinese kit

~ 7 Jan 2025 ~

A Day in the Life of a Prolific Voice Phishing Crew

License Plate Readers Are Leaking Real-Time Video Feeds and Vehicle Data

Turbulence at UN aviation agency as probe into potential data theft begins

DEF CON's hacker-in-chief faces fortune in medical bills after paralyzing neck injury

Researchers Uncover Major Security Flaw in Illumina iSeq 100 DNA Sequencers

US Treasury Department Sanctions Chinese Company Over Cyberattacks

Nedap Librix Ecoreader

ABB ASPECT-Enterprise, NEXUS, and MATRIX Series Products

Farewell to the Fallen: The Cybersecurity Stars We Lost Last Year

State-aligned actors are increasingly deploying ransomware and thats bad news for everyone

New EAGERBEE Variant Targets ISPs and Governments with Advanced Backdoor Capabilities

CISA: No Wider Federal Impact from Treasury Cyber Attack, Investigation Ongoing

Moxa Alerts Users to High-Severity Vulnerabilities in Cellular and Secure Routers

US adds web and gaming giant Tencent to list of Chinese military companies

~ 6 Jan 2025 ~

Charter, Consolidated, Windstream reportedly join China's Salt Typhoon victim list

Why security teams rely on Microsoft Defender Experts for XDR for managed detection and response

FireScam infostealer poses as Telegram Premium app to surveil Android devices

MediaTek rings in the new year with a parade of chipset vulns

India Proposes Digital Data Rules with Tough Penalties and Cybersecurity Requirements

Privacy of Photos.apps Enhanced Visual Search

THN Weekly Recap: Top Cybersecurity Threats, Tools and Tips [6 Jan]

From $22M in Ransom to +100M Stolen Records: 2025's All-Star SaaS Threat Actors to Watch

FireScam Android Malware Poses as Telegram Premium to Steal Data and Control Devices

AI moves to your PC with its own special hardware

After China's Salt Typhoon, the reconstruction starts now

Russian-Speaking Attackers Target Ethereum Devs with Fake Hardhat npm Packages

EAGERBEE, with updated and novel components, targets the Middle East

Taiwan reportedly claims China-linked ship damaged one of its submarine cables

Telemetry data from 800K VW Group EVs exposed online

~ 4 Jan 2025 ~

Encryption backdoor debate 'done and dusted,' former White House tech advisor says

Researchers Uncover Nuclei Vulnerability Enabling Signature Bypass and Code Execution

Apple May Owe You $20 in a Siri Privacy Lawsuit Settlement