Port 22

~ 31 Jan 2025 ~

CISA and FDA Warn of Critical Backdoor in Contec CMS8000 Patient Monitors

Top 5 AI-Powered Social Engineering Attacks

Italy Bans Chinese DeepSeek AI Over Data Privacy and Ethical Concerns

Google Bans 158,000 Malicious Android App Developer Accounts in 2024

One policy to rule them all

Another banner year for ransomware gangs despite takedowns by the cops

Broadcom Patches VMware Aria Flaws Exploits May Lead to Credential Theft

Google to Iran: Yes, we see you using Gemini for phishing and scripting. We're onto you

~ 30 Jan 2025 ~

Data resilience and data portability

VMware plugs steal-my-credentials holes in Cloud Foundation

Trump admin's purge of US cyber advisory boards was 'foolish,' says ex-Navy admiral

Infrastructure Laundering: Blending in with the Cloud

Google: Over 57 Nation-State Threat Groups Using AI for Cyber Operations

Ransomware attack at New York blood services provider donors turned away during shortage crisis

Authorities Seize Domains of Popular Hacking Forums in Major Cybercrime Crackdown

Fake Reddit and WeTransfer Sites are Pushing Malware

Lightning AI Studio Vulnerability Allowed RCE via Hidden URL Parameter

Canvassing apps used by UK political parties riddled with privacy, security issues

Schneider Electric System Monitor Application in Harmony and Pro-face PS5000 Legacy Industrial PCs

Rockwell Automation KEPServer

Rockwell Automation FactoryTalk AssetCentre

New Rock Technologies Cloud Connected Devices

Hitachi Energy UNEM

This month in security with Tony Anscombe January 2025 edition

SOC Analysts - Reimagining Their Role Using AI

WFH with privacy? 85% of Brit bosses snoop on staff

DeepSeek AI Database Exposed: Over 1 Million Log Lines, Secret Keys Leaked

Untrustworthy AI: How to deal with data poisoning

No need to RSVP: a closer look at the Tria stealer campaign

Unpatched PHP Voyager Flaws Leave Servers Open to One-Click RCE Exploits

New Aquabot Botnet Exploits CVE-2024-41710 in Mitel Phones for DDoS Attacks

Wacom says crooks probably swiped customer credit cards from its online checkout

Guess who left a database wide open, exposing chat logs, API keys, and more? Yup, DeepSeek

~ 29 Jan 2025 ~

North Koreans clone open source projects to plant backdoors, steal credentials

Exposed DeepSeek Database Revealed Chat Prompts and Internal Data

Lazarus Group Uses React-Based Admin Panel to Control Global Cyber Attacks

Why is my Mitel phone DDoSing strangers? Oh, it was roped into a new Mirai botnet

Transform your approach to data security

'Bro delete the chat': Feel the panic shortly before cops bust major online fraud ring

ExxonMobil Lobbyist Caught Hacking Climate Activists

The Trial at the Tip of the Terrorgram Iceberg

AI in Cybersecurity: What's Effective and Whats Not Insights from 200 Experts

New SLAP & FLOP Attacks Expose Apple M-Series Chips to Speculative Execution Exploits

How Interlock Ransomware Infects Healthcare Organizations

Critical Cacti Security Flaw (CVE-2025-22604) Enables Remote Code Execution

Threat predictions for industrial enterprises 2025

Brian Greene: Until the end of time | Starmus highlights

Spending watchdog blasts UK govt over sloth-like cyber resilience progress

UAC-0063 Expands Cyber Attacks to European Embassies Using Stolen Documents

Broadcom Warns of High-Severity SQL Injection Flaw in VMware Avi Load Balancer

Zyxel CPE Devices Face Active Exploitation Due to Unpatched CVE-2024-40891 Vulnerability

The curious story of Uncle Sam's HR dept, a hastily set up email server, and fears of another cyber disaster

SLAP, Apple, and FLOP: Safari, Chrome at risk of data theft on iPhone, Mac Silicon

~ 28 Jan 2025 ~

Baguette bandits strike again with ransomware and a side of mockery

3 priorities for adopting proactive identity and access security in 2025

PureCrypter Deploys Agent Tesla and New TorNet Backdoor in Ongoing Cyberattacks

Protecting AWS environments from cyberthreats

Security pros more confident about fending off ransomware, despite being battered by attacks

OAuth Redirect Flaw in Airline Travel Integration Exposes Millions to Account Hijacking

CISA Under Trump

Schneider Electric RemoteConnect and SCADAPack x70 Utilities

Schneider Electric Power Logic

Rockwell Automation FactoryTalk

Rockwell Automation FactoryTalk

Rockwell Automation DataMosaix Private Cloud

B&R Automation Runtime

AI SOC Analysts: Propelling SecOps into the future

Ransomware Targets ESXi Systems via Stealthy SSH Tunnels for C2 Operations

How Long Does It Take Hackers to Crack Modern Hashing Algorithms?

E.U. Sanctions 3 Russian Nationals for Cyber Attacks Targeting Estonias Key Ministries

Going (for) broke: 6 common online betting scams and how to avoid them

Apple plugs security hole in its iThings that's already been exploited in iOS

Top-Rated Chinese AI App DeepSeek Limits Registrations Amid Cyberattacks

Apple Patches Actively Exploited Zero-Day Affecting iPhones, Macs, and More

A Tumultuous Week for Federal Cybersecurity Efforts

~ 27 Jan 2025 ~

US freezes foreign aid, halting cybersecurity defense and policy funds for allies

DeepSeeks Popular AI App Is Explicitly Sending US Data to China

DeepSeek suspends new registrations amid cyberattack

Google takes action after coder reports 'most sophisticated attack I've ever seen'

Fast-track generative AI security with Microsoft Purview

GitHub Desktop Vulnerability Risks Credential Leaks via Malicious Remote URLs

Sweden seizes cargo ship after another undersea cable hit in suspected sabotage

THN Weekly Recap: Top Cybersecurity Threats, Tools and Tips [27 January]

New VPN Backdoor

CDNs: Great for speeding up the internet, bad for location privacy

Scammers Are Creating Fake News Videos to Blackmail Victims

Do We Really Need The OWASP NHI Top 10?

British Museum says ex-contractor 'shut down' IT systems, wreaked havoc

GamaCopy Mimics Gamaredon Tactics in Cyber Espionage Targeting Russian Entities

MintsLoader Delivers StealC Malware and BOINC in Targeted Cyber Attacks

~ 26 Jan 2025 ~

Meta's Llama Framework Flaw Exposes AI Systems to Remote Code Execution Risks

~ 25 Jan 2025 ~

US Privacy Snags a Win as Judge Limits Warrantless FBI Searches

Someone is slipping a hidden backdoor into Juniper routers across the globe, activated by a magic packet

UK telco TalkTalk confirms probe into alleged data grab underway

~ 24 Jan 2025 ~

AI chatbot startup founder, lawyer wife accused of ripping off investors in $60M fraud

Friday Squid Blogging: Beaked Whales Feed on Squid

Senior researcher Noura Aljizawi delivers testimony before the Standing Committee on Foreign Affairs and International Development

Don't want your Kubernetes Windows nodes hijacked? Patch this hole now

North Korean dev who renamed himself 'Bane' accused of IT worker fraud scheme

RANsacked: Over 100 Security Flaws Found in LTE and 5G Network Implementations