Port 22

~ 23 May 2025 ~

SafeLine WAF: Open Source Web Application Firewall with Zero-Day Detection and Bot Protection

U.S. Dismantles DanaBot Malware Network, Charges 16 in $50M Global Cybercrime Operation

Danabot under the microscope

Signal Blocks Windows Recall

CISA Warns of Suspected Broader SaaS Attacks Exploiting App Secrets and Cloud Misconfigs

GitLab Duo Vulnerability Enabled Attackers to Hijack AI Responses with Hidden Prompts

Grandpa-conning crook jailed over sugar-coated drug scam

Suspected creeps behind DanaBot malware that hit 300K+ computers revealed

Doppler CLI Streamlined Secrets Management for DevOps

Ivanti makes dedicated fans of Chinese spies who just can't resist attacking its buggy kit

US Navy sailor charged in horrific child sextortion case

~ 22 May 2025 ~

How lean security teams can build resilient defenses

Feds finger Russian 'behind Qakbot malware' that hit 700K computers

Oops: DanaBot Malware Devs Infected Their Own PCs

Chinese Hackers Exploit Trimble Cityworks Flaw to Infiltrate U.S. Government Networks

Danabot: Analyzing a fallen empire

Feds Charge 16 Russians Allegedly Tied to Botnets Used in Ransomware, Cyberattacks, and Spying

Why 3D-Printing an Untraceable Ghost Gun Is Easier Than Ever

Chinese snoops tried to break into US city utilities, says Talos

Critical Windows Server 2025 dMSA Vulnerability Enables Active Directory Compromise

Chinese Hackers Exploit Ivanti EPMM Bugs in Global Enterprise Network Attacks

Webinar: Learn How to Build a Reasonable and Legally Defensible Cybersecurity Program

Unpatched Versa Concerto Flaws Let Attackers Escape Docker and Compromise Host

Irish privacy watchdog OKs Meta to train AI on EU folks' data

Identity Security Has an Automation ProblemAnd It's Bigger Than You Think

Lumma Stealer: Down for the count

Russia expected to pass experimental law that tracks foreigners in Moscow via smartphones

FBI and Europol Disrupt Lumma Stealer Malware Network Linked to 10 Million Infections

Signal shuts the blinds on Microsoft Recall with the power of DRM

Rockwell Automation FactoryTalk Historian ThingWorx

Lantronix Device Installer

The Voter Experience

Mysterious Database of 184 Million Records Exposes Vast Array of Login Credentials

Scottish council admits ransomware crooks stole school data

~ 21 May 2025 ~

Russian Hackers Exploit Email and VPN Vulnerabilities to Spy on Ukraine Aid Logistics

US teen to plead guilty to extortion attack against PowerSchool

Russia's Fancy Bear swipes a paw at logistics, transport orgs' email servers

FBI, Microsoft, international cops bust Lumma infostealer service

PureRAT Malware Spikes 4x in 2025, Deploying PureLogs to Target Russian Firms

Fake Kling AI Facebook Ads Deliver RAT Malware to Over 22 Million Potential Victims

Coinbase confirms insiders handed over data of 70K users

Securing CI/CD workflows with Wazuh

ESET takes part in global operation to disrupt Lumma Stealer

Lumma Stealer: Breaking down the delivery techniques and capabilities of a prolific infostealer

How to Detect Phishing Attacks Faster: Tycoon2FA Example

Authorities Carry Out Elaborate Global Takedown of Infostealer Heavily Used by Cybercriminals

Judge allows Delta's lawsuit against CrowdStrike to proceed with millions in damages on the line

Google carves out cloudy safe spaces for nations nervous about Uncle Sam's servers

Researchers Expose PWA JavaScript Attack That Redirects Users to Adult Scam Apps

Trump announces $175B for Golden Dome defense shield over America

Google Chrome Can Now Auto-Change Compromised Passwords Using Its Built-In Manager

More AIs Are Taking Polls and Surveys

Dero miner zombies biting through Docker APIs to build a cryptojacking horde

3 Teens Almost Got Away With Murder. Then Police Found Their Google Searches

M&S warns of 300M dent in profits from cyberattack

UK 'extremely dependent' on US for space security

Scattered Spider snared financial orgs before targeting shops in Britain, America

'Ongoing' Ivanti hijack bug exploitation reaches clouds

AI-Powered Malware The Next Evolution in Cyber Threats

~ 20 May 2025 ~

KrebsOnSecurity Hit With Near-Record 6.3 Tbps DDoS

Hazy Hawk Exploits DNS Records to Hijack CDC, Corporate Domains for Malware Delivery

100+ Fake Chrome Extensions Found Hijacking Sessions, Stealing Credentials, Injecting Ads

South Asian Ministries Hit by SideWinder APT Using Old Office Flaws and Custom Malware

AWS Default IAM Roles Found to Enable Lateral Movement and Cross-Service Exploitation

The Crowded Battle: Key Insights from the 2025 State of Pentesting Report

Freshly discovered bug in OpenPGP.js undermines whole point of encrypted comms

Chinese Hackers Deploy MarsSnake Backdoor in Multi-Year Attack on Saudi Organization

Go-Based Malware Deploys XMRig Miner on Linux Hosts via Redis Configuration Abuse

Ransomware attack on food distributor spells more pain for UK supermarkets

Vertiv Liebert RDU101 and UNITY

Siemens Siveillance Video

Schneider Electric PrismaSeT Active - Wireless Panel Server

Schneider Electric Modicon Controllers

Schneider Electric Galaxy VS, Galaxy VL, Galaxy VXL

National Instruments Circuit Design Suite

Mitsubishi Electric Iconics Digital Solutions and Mitsubishi Electric Products

Danfoss AK-SM 8xxA Series

AutomationDirect MB-Gateway

Assured Telematics Inc (ATI) Fleet Management System with Geotab Integration

ABUP IoT Cloud Platform

Malicious PyPI Packages Exploit Instagram and TikTok APIs to Validate User Accounts

DoorDash Hack

What to Expect When Youre Convicted

Virgin Media O2 patches hole that let callers snoop on your coordinates

~ 19 May 2025 ~

CISA has a new No. 2 - but still no official top dog

RVTools Official Site Hacked to Deliver Bumblebee Malware via Trojanized Installer

Ransomware Gangs Use Skitnet Malware for Stealthy Data Theft and Remote Access

Trump Signs Controversial Law Targeting Nonconsensual Sexual Content

SEC SIM-swapper who Googled 'signs that the FBI is after you' put behind bars

The who, where, and how of APT attacks in Q4 2024Q1 2025

A Silicon Valley VC Says He Got the IDF Starlink Access Within Days of October 7 Attack

Why CTEM is the Winning Bet for CISOs in 2025

Firefox Patches 2 Zero-Days Exploited at Pwn2Own Berlin with $100K in Rewards

Microsoft extends Zero Trust to secure the agentic workforce

Weekly Recap: Zero-Day Exploits, Insider Threats, APT Targeting, Botnets and More

Millions at risk after attackers steal UK legal aid data dating back 15 years

The NSAs Fifty Years of Mathematical Cryptanalysis (19371987)

We 3D-Printed Luigi Mangiones Ghost Gun. It Was Entirely Legal

How to Win Followers and Scamfluence People

For Tech Whistleblowers, Theres Safety in Numbers