Port 22

~ 24 Jan 2025 ~

2025 State of SaaS Backup and Recovery Report

DoJ Indicts 5 Individuals for $866K North Korean IT Worker Scheme Violations

Android's New Identity Check Feature Locks Device Settings Outside Trusted Locations

China and friends claim success in push to stamp out tech support cyber-scam slave camps

CISA Adds Five-Year-Old jQuery XSS Flaw to Exploited Vulnerabilities List

Court rules FISA Section 702 surveillance of US resident was unconstitutional

~ 23 Jan 2025 ~

One of Salt Typhoon's favorite flaws still wide open on 91% of at-risk Exchange Servers

Patch now: Cisco fixes critical 9.9-rated, make-me-admin bug

SonicWall flags critical bug likely exploited as zero-day, rolls out hotfix

Meta's pay-or-consent model under fire from EU consumer group

Palo Alto Firewalls Found Vulnerable to Secure Boot Bypass and Firmware Exploits

Beware: Fake CAPTCHA Campaign Spreads Lumma Stealer in Multi-Industry Attacks

Third Interdisciplinary Workshop on Reimagining Democracy (IWORD 2024)

Custom Backdoor Exploiting Magic Packet Vulnerability in Juniper Routers

FortiGate config leaks: Victims' email addresses published online

Experts Find Shared Codebase Linking Morpheus and HellCat Ransomware Payloads

Subaru Security Flaws Exposed Its System for Tracking Millions of Cars

Schneider Electric EVlink Home Smart and Schneider Charge

Schneider Electric EcoStruxure Power Build Rapsody

Schneider Electric Easergy Studio

mySCADA myPRO Manager

HMS Networks Ewon Flexy 202

Hitachi Energy RTU500 Series Product

How to Eliminate Identity-Based Threats

Under Trump, US Cyberdefense Loses Its Head

SonicWall Urges Immediate Patch for Critical CVE-2025-23006 Flaw Amid Likely Exploitation

Who is DDoSing you? Rivals, probably, or cheesed-off users

New Research: The State of Web Exposure 2025

The evolving landscape of data privacy: Key trends to shape 2025

QakBot-Linked BC Malware Adds Enhanced DNS Tunneling and Remote Access Features

Biz tax rises, inflation and high interest. Why fewer UK tech firms started in 2024

Asus lets processor security fix slip out early, AMD confirms patch in progress

Cisco Fixes Critical Privilege Escalation Flaw in Meeting Management (CVSS 9.9)

TRIPLESTRENGTH Hits Cloud for Cryptojacking, On-Premises Systems for Ransomware

Oracle emits 603 patches, names one it wants you to worry about soon

~ 22 Jan 2025 ~

Trump 'waved a white flag to Chinese hackers' as DHS axed cyber advisory boards

Supply chain attack hits Chrome extensions, could expose millions

Submission to the UNs call for input on the application of digital technologies in the administration of justice

Give users confidence in your digital infrastructure

Microsoft issues out-of-band fix for Windows Server 2022 NUMA glitch

Trump Terminates DHS Advisory Committee Memberships, Disrupting Cybersecurity Review

Silk Road's Dread Pirate Roberts walks free as Trump pardons dark web kingpin

MasterCard DNS Error Went Unnoticed for Years

Call for applications: Information Controls Fellowship Program 2025

Hackers Exploit Zero-Day in cnPilot Routers to Deploy AIRASHI DDoS Botnet

Infosec was literally the last item in Trump's policy plan, yet major changes are likely on his watch

AI Will Write Complex Laws

Discover Hidden Browsing Threats: Free Risk Assessment for GenAI, Identity, Web, and SaaS Risks

President Trump Pardons Silk Road Creator Ross Ulbricht After 11 Years in Prison

Ransomware scum make it personal for <i>Reg</i> readers by impersonating tech support

PlushDaemon APT Targets South Korean VPN Provider in Supply Chain Attack

Oracle Releases January 2025 Patch to Address 318 Flaws Across Major Products

Mirai Botnet Launches Record 5.6 Tbps DDoS Attack with 13,000+ IoT Device

PlushDaemon compromises supply chain of Korean VPN service

PowerSchool theft latest: Decades of Canadian student records, data from 40-plus US states feared stolen

Trump Frees Silk Road Creator Ross Ulbricht After 11 Years in Prison

~ 21 Jan 2025 ~

Patch procrastination leaves 50,000 Fortinet firewalls vulnerable to zero-day

Mirai Variant Murdoc_Botnet Exploits AVTECH IP Cameras and Huawei Routers

HPE probes IntelBroker's bold data theft boasts

13,000 MikroTik Routers Hijacked by Botnet for Malspam and Cyberattacks

AI Mistakes Are Very Different from Human Mistakes

ZF Roll Stability Support Plus (RSSPlus)

Traffic Alert and Collision Avoidance System (TCAS) II

Siemens SIMATIC S7-1200 CPUs

Ex-CIA Analyst Pleads Guilty to Sharing Top-Secret Data with Unauthorized Parties

HackGATE: Setting New Standards for Visibility and Control in Penetration Testing Projects

Under lock and key: Protecting corporate data from cyberthreats in 2025

Breaking free from reactive security

PNGPlug Loader Delivers ValleyRAT Malware Through Fake Software Installers

CERT-UA Warns of Cyber Scams Using Fake AnyDesk Requests for Fraudulent Security Audits

Banks must keep ahead of risks and reap AI rewards

~ 20 Jan 2025 ~

Hackers game out infowar against China with the US Navy

Unsecured Tunneling Protocols Expose 4.2 Million Hosts, Including VPNs and Routers

DoNot Team Linked to New Tanzeem Android Malware Targeting Intelligence Collection

How to leave the submarine cable cutters all at sea go Swedish

Biden Signs New Cybersecurity Order

Ransomware attack forces Brit high school to shut doors

THN Weekly Recap: Top Cybersecurity Threats, Tools and Tips [20 January]

Product Walkthrough: How Satori SecuresSensitive Data From Production to AI

Sage Copilot grounded briefly to fix AI misbehavior

Hackers Deploy Malicious npm Packages to Steal Solana Wallet Keys via Gmail SMTP

Datacus extractus: Harry Potter publisher breached without resorting to magic

When food delivery apps reached Indonesia, everyone put on weight

Donald Trump proposes US government acquire half of TikTok, which thanks him and restores service

~ 19 Jan 2025 ~

OpenAI's ChatGPT crawler can be tricked into DDoSing sites, answering your queries

How to Get Around the US TikTok Ban

TikTok Goes Dark in the U.S. as Federal Ban Takes Effect January 19, 2025

~ 18 Jan 2025 ~

US Names One of the Hackers Allegedly Behind Massive Salt Typhoon Breaches

U.S. Sanctions Chinese Cybersecurity Firm Over Treasury Hack Tied to Silk Typhoon

~ 17 Jan 2025 ~

FCC to telcos: Did you know you must by law secure your networks from foreign spies?

Friday Squid Blogging: Opioid Alternatives from Squid Research

Biden signs sweeping cybersecurity order, just in time for Trump to gut it

The FCCs Jessica Rosenworcel Isnt Leaving Without a Fight

Fortinet: FortiGate config leaks are genuine but misleading

Clock ticking for TikTok as US Supreme Court upholds ban

Six vulnerabilities in ubiquitous rsync tool announced and fixed in a day

Critical Flaws in WGS-804HPT Switches Enable RCE and Network Exploitation

Python-Based Bots Exploiting PHP Servers Fuel Gambling Platform Proliferation

Social Engineering to Disable iMessage Protections

Medusa ransomware group claims attack on UK's Gateshead Council