Port 22

~ 28 Feb 2025 ~

Friday Squid Blogging: Eating Bioluminescent Squid

Notorious Malware, Spam Host Prospero Moves to Kaspersky Lab

RDP: a Double-Edged Sword for IT Teams Essential Yet Exploitable

5,000 Phishing PDFs on 260 Domains Distribute Lumma Stealer via Fake CAPTCHAs

Ransomware criminals love CISA's KEV list and that's a bug, not a feature

Microsoft Exposes LLMjacking Cybercriminals Behind Azure AI Abuse Scheme

12,000+ API Keys and Passwords Found in Public Datasets Used for LLM Training

Sticky Werewolf Uses Undocumented Implant to Deploy Lumma Stealer in Russia and Belarus

Threat Report H2 2024: Infostealer shakeup, new attack vector for mobile, and Nomani

Microsoft names alleged credential-snatching 'Azure Abuse Enterprise' operators

The SOC files: Chasing the web shell

~ 27 Feb 2025 ~

Feds: Army soldier accused of AT&T heist Googled can hacking be treason, defecting to Russia

FBI officially fingers North Korea for $1.5B Bybit crypto-burglary

Silver Fox APT Uses Winos 4.0 Malware in Cyber Attacks Against Taiwanese Organizations

Space Pirates Targets Russian IT Firms With New LuckyStrike Agent Malware

89% of Enterprise GenAI Usage Is Invisible to Organizations Exposing Critical Security Risks, New Report Reveals

New TgToxic Banking Trojan Variant Evolves with Anti-Analysis Upgrades

Emergent Misalignment in LLMs

PolarEdge Botnet Exploits Cisco and Other Flaws to Hijack ASUS, QNAP, and Synology Devices

Bybit Hack Traced to Safe{Wallet} Supply Chain Attack Exploited by North Korean Hackers

Schneider Electric Communication Modules for Modicon M580 and Quantum Controllers

Elon Musks Starlink Is Keeping Modern Slavery Compounds Online

Bernhard Scholkopf: Is AI intelligent? | Starmus highlights

Does terrible code drive you mad? Wait until you see what it does to OpenAI's GPT-4o

U.S. Soldier Charged in AT&T Hack Searched Can Hacking Be Treason

Wallbleed vulnerability unearths secrets of China's Great Firewall 125 bytes at a time

~ 26 Feb 2025 ~

With millions upon millions of victims, scale of unstoppable info-stealer malware laid bare

Bybit declares war on North Korea's Lazarus crime-ring to regain $1.5B stolen from wallet

Hackers Exploited Krpano Framework Flaw to Inject Spam Ads on 350+ Websites

Leaked Black Basta Chat Logs Reveal $107M Ransom Earnings and Internal Power Struggles

Qualcomm pledges 8 years of security updates for Android kit using its chips (YMMV)

Rethinking remote assistance security in a Zero Trust world

SOC 3.0 - The Evolution of the SOC and How AI is Empowering Human Talent

New Linux Malware Auto-Color Grants Hackers Full Remote Access to Compromised Systems

Three Password Cracking Techniques and How to Defend Against Them

CERT-UA Warns of UAC-0173 Attacks Deploying DCRat to Compromise Ukrainian Notaries

Malicious PyPI Package "automslc" Enables 104K+ Unauthorized Deezer Music Downloads

Signal will withdraw from Sweden if encryption-busting laws take effect

An iCloud Backdoor Would Make Our Phones Less Safe

CISA Adds Microsoft and Zimbra Flaws to KEV Catalog Amid Active Exploitation

Exploits and vulnerabilities in Q4 2024

This month in security with Tony Anscombe February 2025 edition

200-plus impressively convincing GitHub repos are serving up malware

Incoming deputy head of Homeland Security says CISA needs to be reined in

Drug-screening biz DISA took a year to disclose security breach affecting millions

~ 25 Feb 2025 ~

Xi know what you did last summer: China was all up in Republicans' email, says book

LightSpy Expands to 100+ Commands, Increasing Control Over Windows, macOS, Linux, and Mobile

Belarus-Linked Ghostwriter Uses Macropack-Obfuscated Excel Macros to Deploy Malware

MITRE Caldera security suite scores perfect 10 for insecurity

A Team of Female Founders Is Launching Cloud Security Tech That Could Overhaul AI Protection

North Korean Hackers Steal $1.5B in Cryptocurrency

5 Active Malware Campaigns in Q1 2025

2,500+ Truesight.sys Driver Variants Exploited to Bypass EDR and Deploy HiddenGh0st RAT

GitVenom Malware Steals $456K in Bitcoin Using Fake GitHub Projects to Hijack Wallets

Harassment allegations against DEF CON veteran detailed in court filing

Data resilience and data portability

China's Silver Fox spoofs medical imaging apps to hijack patients' computers

Rockwell Automation PowerFlex 755

OpenAI Job Scam Targeted International Workers Through Telegram

FatalRAT Phishing Attacks Target APAC Industries Using Chinese Cloud Services

Malware variants that target operational tech systems are very rare but 2 were found last year

This Russian Tech Bro Helped Steal $93 Million and Landed in US Prison. Then Putin Called

Two Actively Exploited Security Flaws in Adobe and Oracle Products Flagged by CISA

Southern Water takes the fifth over alleged $750K Black Basta ransom offer

How nice that state-of-the-art LLMs reveal their reasoning ... for miscreants to exploit

Google binning SMS MFA at last and replacing it with QR codes

~ 24 Feb 2025 ~

New Malware Campaign Uses Cracked Software to Spread Lumma and ACR Stealer

US Dept of Housing screens sabotaged to show deepfake of Trump sucking Elon's toes

Inside the Telegram Groups Doxing Women for Their Facebook Posts

TVs at HUD Played an AI-Generated Video of Donald Trump Kissing Elon Musk's Feet

THN Weekly Recap: From $1.5B Crypto Heist to AI Misuse & Apples Data Dilemma

Google Cloud KMS Adds Quantum-Safe Digital Signatures to Defend Against Future Threats

Becoming Ransomware Ready: Why Continuous Validation Is Your Best Defense

Canada-U.S. Cross-Border Surveillance Negotiations Raise Constitutional and Human Rights Whirlwind under U.S. CLOUD Act

Australia Bans Kaspersky Software Over National Security and Espionage Concerns

Shifting the cybersecurity odds

The software UK techies need to protect themselves now Apple's ADP wont

More Research Showing AI Breaking the Rules

Laurie Anderson: Building an ARK | Starmus highlights

The GitVenom campaign: cryptocurrency theft using GitHub

Rather than add a backdoor, Apple decides to kill iCloud E2EE for UK peeps

~ 23 Feb 2025 ~

Trump 2.0 Brings Cuts to Cyber, Consumer Protections

~ 22 Feb 2025 ~

Bybit Confirms Record-Breaking $1.46 Billion Crypto Heist in Sophisticated Cold Wallet Attack

$1.4 Billion Stolen From ByBit in Biggest Crypto Theft Ever

OpenAI Bans Accounts Misusing ChatGPT for Surveillance and Influence Campaigns

~ 21 Feb 2025 ~

Friday Squid Blogging: New Squid Fossil

Apple Drops iCloud's Advanced Data Protection in the U.K. Amid Encryption Backdoor Demands

Data Leak Exposes TopSec's Role in Chinas Censorship-as-a-Service Operations

DOGEs USDS Purge Included the Guy Who Keeps Veterans Data Safe Online

Cybercriminals Can Now Clone Any Brands Site in Minutes Using Darcula PhaaS v3

Webinar: Learn How to Identify High-Risk Identity Gaps and Slash Security Debt in 2025

AI-Powered Deception is a Menace to Our Societies

Truth in Transition: Disinformation in Post-Assad Syria

Implementing Cryptography in AI Systems

The Hogue Report was a missed opportunity to tackle transnational repression: Op-ed for the Globe & Mail

The US Is Considering a TP-Link Router BanShould You Worry?

Cisco Confirms Salt Typhoon Exploited CVE-2018-0171 to Target U.S. Telecom Networks

Experts race to extract intel from Black Basta internal chat leaks

CISA Flags Craft CMS Vulnerability CVE-2025-23209 Amid Active Attacks

Angry Likho: Old beasts in a new forest