Port 22

~ 11 Jun 2025 ~

Patch Tuesday, June 2025 Edition

~ 10 Jun 2025 ~

Adobe Releases Patch Fixing 254 Vulnerabilities, Closing High-Severity Security Gaps

Microsoft warns of 66 flaws to fix for this Patch Tuesday, and two are under active attack

Researchers Uncover 20+ Configuration Risks, Including Five CVEs, in Salesforce Industry Cloud

Apple Intelligence Is Gambling on Privacy as a Killer Feature

FIN6 Uses AWS-Hosted Fake Resumes on LinkedIn to Deliver More_eggs Malware

Rust-based Myth Stealer Malware Spread via Fake Gaming Sites Targets Chrome, Firefox Users

Texas warns 300,000 crash reports siphoned via compromised user account

The Hidden Threat in Your Stack: Why Non-Human Identity Management is the Next Cybersecurity Frontier

The Long-Term Danger of Trump Sending Troops to the LA Protests

Critical Wazuh bug exploited in growing Mirai botnet infection

Researcher Found Flaw to Discover Phone Numbers Linked to Any Google Account

Winning the war on ransomware with AI: Four real-world use cases

Rare Werewolf APT Uses Legitimate Software in Attacks on Hundreds of Russian Enterprises

Trump guts digital ID rules, claims they help 'illegal aliens' commit fraud

Airlines Dont Want You to Know They Sold Your Flight Data to DHS

Cloud brute-force attack cracks Google users' phone numbers in minutes

SinoTrack GPS Receiver

Hitachi Energy Relion 670, 650, SAM600-IO Series

CISA Adds Erlang SSH and Roundcube Flaws to Known Exploited Vulnerabilities Catalog

M&S online ordering system operational 46 days after cyber shutdown

Peep show: 40K IoT cameras worldwide stream secrets to anyone with a browser

Apple tries to contain itself with lightweight Linux VMs for macOS

~ 9 Jun 2025 ~

The Dangerous Truth About the Nonlethal Weapons Used Against LA Protesters

Over 70 Organizations Across Multiple Sectors Targeted by China-Linked Cyber Espionage Group

Two Distinct Botnets Exploit Wazuh Server Vulnerability to Launch Mirai-Based Attacks

Let them eat junk food: Major organic supplier to Whole Foods, Walmart, hit by cyberattack

Weekly Recap: Chrome 0-Day, Data Wipers, Misused Tools and Zero-Click iPhone Attacks

Think Your IdP or CASB Covers Shadow IT? These 5 Risks Prove Otherwise

A Researcher Figured Out How to Reveal Any Phone Number Linked to a Google Account

OpenAI Bans ChatGPT Accounts Used by Russian, Iranian and Chinese Hacker Groups

New Way to Track Covertly Android Users

Blocking stolen phones from the cloud can be done, should be done, won't be done

Chinese spy crew appears to be preparing for conflict by backdooring 75+ critical orgs

Sleep with one eye open: how Librarian Ghouls steal data by night

Are technologists a threat to doing business securely?

Chinas asteroid-and-comet hunter probe unfurls a solar wing

Monkey365 PowerShell Security Scanner for Microsoft365, Azure, and Entra ID

~ 8 Jun 2025 ~

US infrastructure could crumble under cyberattack, ex-NSA advisor warns

New Supply Chain Malware Operation Hits npm and PyPI Ecosystems, Targeting Millions Globally

Malicious Browser Extensions Infect 722 Users Across Latin America Since Early 2025

Enterprises are getting stuck in AI pilot hell, say Chatterbox Labs execs

~ 7 Jun 2025 ~

The Mystery of iPhone Crashes That Apple Denies Are Linked to Chinese Hacking

~ 6 Jun 2025 ~

New Atomic macOS Stealer Campaign Exploits ClickFix to Target Apple Users

Friday Squid Blogging: Squid Run in Southern New England

ChatGPT used for evil: Fake IT worker resumes, misinfo, and cyber-op assist

Empower Users and Protect Against GenAI Data Loss

Cybercriminals Are Hiding Malicious Web Traffic in Plain Sight

Microsoft Helps CBI Dismantle Indian Call Centers Behind Japanese Tech Support Scam

Hearing on the Federal Government and AI

Fresh strain of pro-Russian wiper flushes Ukrainian critical infrastructure

Inside the Mind of the Adversary: Why More Security Leaders Are Selecting AEV

Report on the Malicious Uses of AI

New PathWiper Data Wiper Malware Disrupts Ukrainian Critical Infrastructure in 2025 Attack

Uncle Sam moves to seize $7.7M laundered by North Korean IT worker ring

Your ransomware nightmare just came true now what?

Analysis of the latest Mirai wave exploiting TBK DVR devices with CVE-2024-3721

ProxyBlob SOCKS5 Over Azure Blob Storage for Covert Network Tunneling

~ 5 Jun 2025 ~

Uncle Sam puts $10M bounty on RedLine dev and Russia-backed cronies

Proxy Services Feast on Ukraines IP Address Exodus

AT&T not sure if new customer data dump is dj vu

Popular Chrome Extensions Leak API Keys, User Data via HTTP and Hardcoded Credentials

Cellebrite buys Corellium to help cops bust phone encryption

Trumps cyber czar pick grilled over CISA cuts: If we have a cyber 9/11, youre the guy

Researchers Detail Bitter APTs Evolving Tactics as Its Geographic Scope Expands

Ross Ulbricht Got a $31 Million Donation From a Dark Web Dealer, Crypto Tracers Suspect

BidenCash busted as Feds nuke stolen credit card bazaar

Connect with us at the Gartner Security & Risk Management Summit

Redefining Cyber Value: Why Business Impact Should Lead the Security Conversation

Iran-Linked BladedFeline Hits Iraqi and Kurdish Targets with Whisper and Spearal Malware

Meet the Deputy CISOs who help shape Microsofts approach to cybersecurity: Part 3

DoJ Seizes 145 Domains Tied to BidenCash Carding Marketplace in Global Takedown

Techno-Legal Internet Controls in Indonesia and Their Impact on Free Expression

More than a hundred backdoored malware repos traced to single GitHub user

Hitachi Energy Relion 670, 650 Series and SAM600-IO Product

CyberData 011209 SIP Emergency Intercom

Critical Cisco ISE Auth Bypass Flaw Impacts Cloud Deployments on AWS, Azure, and OCI

HMRC: Crooks broke into 100k accounts, stole 43M from British taxpayer in late 2024

IT threat evolution in Q1 2025. Non-mobile statistics

IT threat evolution in Q1 2025. Mobile statistics

What Really Happened in the Aftermath of the Lizard Squad Hacks

BladedFeline: Whispering in the dark

AI kept 15-year-old zombie vuln alive, but its time is drawing near

China accuses Taiwan of running five feeble APT gangs, with US help

IBM Cloud login breaks for second time this week and Big Blue isn't saying why

~ 4 Jun 2025 ~

Play ransomware crims exploit SimpleHelp flaw in double-extortion schemes

ICE Quietly Scales Back Rules for Courthouse Raids

Google Exposes Vishing Group UNC6040 Targeting Salesforce with Fake Data Loader App

Ukraine strikes Russian bomber-maker with hack attack

Ransomware scum leak patient data after disrupting chemo treatments at Kettering

Chaos RAT Malware Targets Windows and Linux via Fake Network Tool Downloads

Your SaaS Data Isn't Safe: Why Traditional DLP Solutions Fail in the Browser Era

Malicious PyPI, npm, and Ruby Packages Exposed in Ongoing Open-Source Supply Chain Attacks

Fake IT support calls hit 20 orgs, end in stolen Salesforce data and extortion, Google warns

Crims stole 40,000 people's data from our network, admits publisher Lee Enterprises

The Ramifications of Ukraines Drone Attack

HPE Issues Security Patch for StoreOnce Bug Allowing Remote Authentication Bypass

The Race to Build Trumps Golden Dome Missile Defense System Is On

Deepfake Scams Are Distorting Reality Itself

A GPS Blackout Would Shut Down the World