Port 22

~ 15 Jun 2025 ~

Dems demand audit of CVE program as Federal funding remains uncertain

Upcoming Speaking Engagements

~ 14 Jun 2025 ~

RFK Jr. Orders HHS to Give Undocumented Migrants Medicaid Data to DHS

Discord Invite Link Hijacking Delivers AsyncRAT and Skuld Stealer Targeting Crypto Wallets

~ 13 Jun 2025 ~

Cyber weapons in the Israel-Iran conflict may hit the US

Friday Squid Blogging: Stubby Squid

'No Kings' Protests, Citizen-Run ICE Trackers Trigger Intelligence Warnings

Over 269,000 Websites Infected with JSFireTruck JavaScript Malware in One Month

Do you trust Xi with your 'private' browsing data? Apple, Google stores still offer China-based VPNs, report says

Ransomware Gangs Exploit Unpatched SimpleHelp Flaws to Target Victims with Double Extortion

CTEM is the New SOC: Shifting from Monitoring Alerts to Measuring Risk

CBP's Predator Drone Flights Over LA Are a Dangerous Escalation

Apple fixes zero-click exploit underpinning Paragon spyware attacks

Heres What Marines and the National Guard Can (and Cant) Do at LA Protests

Wanted: Junior cybersecurity staff with 10 years' experience and a PhD

Apple Zero-Click Flaw in Messages Exploited to Spy on Journalists Using Paragon Spyware

Paragon Spyware used to Spy on European Journalists

Slapped wrists for Financial Conduct Authority staff who emailed work data home

Envilder Secure AWS SSM CLI for Environment Variable Management

~ 12 Jun 2025 ~

Ransomware scum disrupted utility services with SimpleHelp attacks

WordPress Sites Turned Weapon: How VexTrio and Affiliates Run a Global Scam Network

Inside a Dark Adtech Empire Fed by Fake CAPTCHAs

How to Protest Safely in the Age of Surveillance

New TokenBreak Attack Bypasses AI Moderation with Single-Character Text Changes

AI Agents Run on Secret Accounts Learn How to Secure Them in This Webinar

Social Media Is Now a DIY Alert System for ICE Raids

Zero-Click AI Vulnerability Exposes Microsoft 365 Copilot Data Without User Interaction

Non-Human Identities: How to Address the Expanding Security Risk

Cyber resilience begins before the crisis

Airlines Secretly Selling Passenger Data to the Government

ConnectWise to Rotate ScreenConnect Code Signing Certificates Due to Security Risks

Siemens Tecnomatix Plant Simulation

Siemens SIMATIC S7-1500 CPU Family

Siemens SCALANCE and RUGGEDCOM

Siemens SCALANCE and RUGGEDCOM

Siemens RUGGEDCOM APE1808

Siemens Energy Services

PTZOptics and Other Pan-Tilt-Zoom Cameras

AVEVA PI Web API

AVEVA PI Data Archive

AVEVA PI Connector for CygNet

Graphite Caught: First Forensic Confirmation of Paragons iOS Mercenary Spyware Finds Journalists Targeted

Over 80,000 Microsoft Entra ID Accounts Targeted Using Open-Source TeamFiltration Tool

'Major compromise' at NHS temping arm exposed gaping security holes

~ 11 Jun 2025 ~

DeepSeek installer or just malware in disguise? Click around and find out

Former Black Basta Members Use Microsoft Teams and Python Scripts in 2025 Attacks

295 Malicious IPs Launch Coordinated Brute-Force Attacks on Apache Tomcat Manager

How Waymo Handles Footage From Events Like the LA Immigration Protests

Hire me! To drop malware on your computer

Salesforce tags 5 CVEs after SaaS security probe uncovers misconfig risks

INTERPOL Dismantles 20,000+ Malicious IPs Linked to 69 Malware Variants in Operation Secure

Why DNS Security Is Your First Defense Against Cyber Attacks?

SinoTrack GPS Devices Vulnerable to Remote Vehicle Control via Default Passwords

Asia dismantles 20,000 malicious domains in infostealer crackdown

How to Build a Lean Security Model: 5 Lessons from River Island

Analysis to action: Operationalizing your threat intelligence

Microsoft Patches 67 Vulnerabilities Including WEBDAV Zero-Day Exploited in the Wild

Microsoft slows Windows 11 24H2 Patch Tuesday due to a 'compatibility issue'

Toxic trend: Another malware threat targets DeepSeek

CISO who helped unmask Badbox warns: Version 3 is coming

Argusee and Agentic AI in Cybersecurity

Patch Tuesday, June 2025 Edition

~ 10 Jun 2025 ~

Adobe Releases Patch Fixing 254 Vulnerabilities, Closing High-Severity Security Gaps

Microsoft warns of 66 flaws to fix for this Patch Tuesday, and two are under active attack

Researchers Uncover 20+ Configuration Risks, Including Five CVEs, in Salesforce Industry Cloud

Apple Intelligence Is Gambling on Privacy as a Killer Feature

FIN6 Uses AWS-Hosted Fake Resumes on LinkedIn to Deliver More_eggs Malware

Rust-based Myth Stealer Malware Spread via Fake Gaming Sites Targets Chrome, Firefox Users

Texas warns 300,000 crash reports siphoned via compromised user account

The Hidden Threat in Your Stack: Why Non-Human Identity Management is the Next Cybersecurity Frontier

The Long-Term Danger of Trump Sending Troops to the LA Protests

Critical Wazuh bug exploited in growing Mirai botnet infection

Researcher Found Flaw to Discover Phone Numbers Linked to Any Google Account

Winning the war on ransomware with AI: Four real-world use cases

Rare Werewolf APT Uses Legitimate Software in Attacks on Hundreds of Russian Enterprises

Trump guts digital ID rules, claims they help 'illegal aliens' commit fraud

Airlines Dont Want You to Know They Sold Your Flight Data to DHS

Cloud brute-force attack cracks Google users' phone numbers in minutes

SinoTrack GPS Receiver

Hitachi Energy Relion 670, 650, SAM600-IO Series

CISA Adds Erlang SSH and Roundcube Flaws to Known Exploited Vulnerabilities Catalog

M&S online ordering system operational 46 days after cyber shutdown

Peep show: 40K IoT cameras worldwide stream secrets to anyone with a browser

Apple tries to contain itself with lightweight Linux VMs for macOS

~ 9 Jun 2025 ~

The Dangerous Truth About the Nonlethal Weapons Used Against LA Protesters

Over 70 Organizations Across Multiple Sectors Targeted by China-Linked Cyber Espionage Group

Two Distinct Botnets Exploit Wazuh Server Vulnerability to Launch Mirai-Based Attacks

Let them eat junk food: Major organic supplier to Whole Foods, Walmart, hit by cyberattack

Weekly Recap: Chrome 0-Day, Data Wipers, Misused Tools and Zero-Click iPhone Attacks

Think Your IdP or CASB Covers Shadow IT? These 5 Risks Prove Otherwise

A Researcher Figured Out How to Reveal Any Phone Number Linked to a Google Account

OpenAI Bans ChatGPT Accounts Used by Russian, Iranian and Chinese Hacker Groups

New Way to Track Covertly Android Users

Blocking stolen phones from the cloud can be done, should be done, won't be done

Chinese spy crew appears to be preparing for conflict by backdooring 75+ critical orgs

Sleep with one eye open: how Librarian Ghouls steal data by night

Are technologists a threat to doing business securely?

Chinas asteroid-and-comet hunter probe unfurls a solar wing

Monkey365 PowerShell Security Scanner for Microsoft365, Azure, and Entra ID

~ 8 Jun 2025 ~

US infrastructure could crumble under cyberattack, ex-NSA advisor warns