Port 22

~ 13 Feb 2025 ~

DOGE as a National Cyberattack

North Korea targets crypto developers via NPM supply chain attack

Siemens Teamcenter

Siemens SIPROTEC 5 Devices

Siemens SIPROTEC 5

Siemens SIPROTEC 5

Siemens SIMATIC S7-1200 CPU Family

Siemens SIMATIC PCS neo and TIA Administrator

Siemens SIMATIC IPC DiagBase and SIMATIC IPC DiagMonitor

Siemens SIMATIC

Siemens SCALANCE W700

Siemens RUGGEDCOM APE1808 Devices

Siemens Questa and ModelSim

Siemens OpenV2G

Siemens Opcenter Intelligence

Siemens APOGEE PXC and TALON TC Series

Outback Power Mojave Inverter

ORing IAP-420

mySCADA myPRO Manager

Dingtian DT-R0 Series

Hackers Exploited PAN-OS Flaw to Deploy Chinese Malware in Ransomware Attack

The Loneliness Epidemic Is a Security Crisis

AI and Security - A New Puzzle to Figure Out

Gaming or gambling? Lifting the lid on in-game loot boxes

Palo Alto Networks Patches Authentication Bypass Exploit in PAN-OS Software

FINALDRAFT Malware Exploits Microsoft Graph API for Espionage on Windows and Linux

Mysterious Palo Alto firewall reboots? You're not alone

Chinas Salt Typhoon Spies Are Still Hacking TelecomsNow by Exploiting Cisco Routers

Have I Been Pwned likely to ban resellers from buying subs, citing sh*tty behavior and onerous support requests

Feds want devs to stop coding 'unforgivable' buffer overflow vulnerabilities

Sophos sheds 6% of staff after swallowing Secureworks

~ 12 Feb 2025 ~

Trumps cyber chief pick has little experience in The Cyber

Arizona laptop farmer pleads guilty for funneling $17M to Kim Jong Un

Ransomware isn't always about the money: Government spies have objectives, too

Microsoft Uncovers Sandworm Subgroup's Global Cyber Attacks Spanning 15+ Countries

Russia's Sandworm caught snarfing credentials, data from American and Brit orgs

The BadPilot campaign: Seashell Blizzard subgroup conducts multiyear global access operation

A Hacker Group Within Russias Notorious Sandworm Unit Is Breaching Western Networks

Network Security Issues in RedNote

Researchers Find New Exploit Bypassing Patched NVIDIA Container Toolkit Vulnerability

Crimelords and spies for rogue states are working together, says Google

Delivering Malware Through Abandoned Amazon S3 Buckets

How to Steer AI Adoption: A CISO Guide

North Korean Hackers Exploit PowerShell Trick to Hijack Devices in New Cyberattack

What is penetration testing? | Unlocked 403 cybersecurity podcast (ep. 10)

Microsofts Patch Tuesday Fixes 63 Flaws, Including Two Under Active Exploitation

Ivanti Patches Critical Flaws in Connect Secure and Policy Secure Update Now

Microsoft Patch Tuesday, February 2025 Edition

This Ad-Tech Company Is Powering Surveillance of US Military Personnel

February's Patch Tuesday sees Microsoft offer just 63 fixes

~ 11 Feb 2025 ~

Probe finds US Coast Guard has left maritime cybersecurity adrift

Yup, AMD's Elba and Giglio definitely sound like they work corporate security

'Key kernel maintainers' still back Rust in the Linux kernel, despite the doubters

Triplestrength hits victims with triple trouble: Ransomware, cloud hijacks, crypto-mining

AUKUS blasts holes in LockBit's bulletproof hosting provider

Man who SIM-swapped the SEC's X account pleads guilty

Google Confirms Android SafetyCore Enables AI-Powered On-Device Content Classification

I'm a security expert, and I almost fell for a North Korea-style deepfake job applicant Twice

4 Ways to Keep MFA From Becoming too Much of a Good Thing

Trusted Encryption Environments

Progress Software Patches High-Severity LoadMaster Flaws Affecting Multiple Versions

Gcore DDoS Radar Reveals 56% YoY Increase in DDoS Attacks

Protecting Your Software Supply Chain: Assessing the Risks Before Deployment

How AI-driven identify fraud is causing havoc

Threat Actors Exploit ClickFix to Deploy NetSupport RAT in Latest Cyber Attacks

8Base Ransomware Data Leak Sites Seized in International Law Enforcement Operation

Apple Patches Actively Exploited iOS Zero-Day CVE-2025-24200 in Emergency Update

Apple warns 'extremely sophisticated attack' may be targeting iThings

~ 10 Feb 2025 ~

All your 8Base are belong to us: Ransomware crew busted in global sting

Join the Citizen Lab researchers at the 2025 RightsCon in Taipei, Taiwan.

US Funding Cuts Are Helping Criminals Get Away With Child Abuse and Human Trafficking

The TikTok ban is already dead in the water: Jon Penney writes for the Globe and Mail

Build a stronger security strategy with proactive and reactive incident response: Cyberattack Series

Hackers Exploit Google Tag Manager to Deploy Credit Card Skimmers on Magento Stores

US news org still struggling to print papers a week after 'cybersecurity event'

THN Weekly Recap: Top Cybersecurity Threats, Tools and Tips [10 February]

Pairwise Authentication of Humans

Don't Overlook These 6 Critical Okta Security Configurations

The Rise of the Drone Boats

Neil Lawrence: What makes us unique in the age of AI | Starmus highlights

DragonRank Exploits IIS Servers with BadIIS Malware for SEO Fraud and Gambling Redirects

UK armed forces fast-tracking cyber warriors to defend digital front lines

Zimbra Releases Security Updates for SQL Injection, Stored XSS, and SSRF Vulnerabilities

Judge says US Treasury more vulnerable to hacking since Trump let the DOGE out

XE Hacker Group Exploits VeraCore Zero-Day to Deploy Persistent Web Shells

India's banking on the bank.in domain cleaning up its financial services sector

DeepSeek's iOS app is a security nightmare, and that's before you consider its TikTok links

~ 9 Feb 2025 ~

Huawei revenue growing fast, suggesting China's scoffing at sanctions

~ 8 Feb 2025 ~

UK is Ordering Apple to Break its Own Encryption

UK Secret Order Demands That Apple Give Access to Users Encrypted Data

Malicious ML Models on Hugging Face Leverage Broken Pickle Format to Evade Detection

Teen on Musks DOGE Team Graduated from The Com

~ 7 Feb 2025 ~

Friday Squid Blogging: The Colossal Squid

ACLU Warns DOGEs Unchecked Access Could Violate Federal Law

UK Home Office silent on alleged Apple backdoor order

Indias RBI Introduces Exclusive "bank.in" Domain to Combat Digital Banking Fraud

Screenshot-Reading Malware

DeepSeek App Transmits Sensitive User and Device Data Without Encryption

CISA Warns of Active Exploitation in Trimble Cityworks Vulnerability Leading to IIS RCE

UK industry leaders unleash hurricane-grade scale for cyberattacks