Port 22

~ 12 Mar 2025 ~

UK must pay cyber pros more than its Prime Minister, top civil servant says

Apple Releases Patch for WebKit Zero-Day Vulnerability Exploited in Targeted Attacks

Incident response analyst report 2024

CISA worker says 100-strong Red Team fired after DOGE cancelled contract

Choose your own Patch Tuesday adventure: Start with six zero day fixes, or six critical flaws

~ 11 Mar 2025 ~

Microsoft: 6 Zero-Days in March 2025 Patch Tuesday

Blind Eagle Hacks Colombian Institutions Using NTLM Flaw, RATs and GitHub-Based Attacks

Ballista Botnet Exploits Unpatched TP-Link Vulnerability, Infects Over 6,000 Devices

Silk Typhoon Hackers Indicted

'Uber for nurses' exposes 86k+ medical records, PII in open S3 bucket for months

Your Risk Scores Are Lying: Adversarial Exposure Validation Exposes Real Threats

Alleged Co-Founder of Garantex Arrested in India

FTCs $25.5M scam refund treats victims to $34 each

Steganography Explained: How XWorm Hides Inside Images

New XCSSET malware adds new obfuscation, persistence techniques to infect Xcode projects

What Really Happened With the DDoS Attacks That Took Down X

SideWinder APT Targets Maritime, Nuclear, and IT Sectors Across Asia, Middle East, and Africa

Moxa Issues Fix for Critical Authentication Bypass Vulnerability in PT Switches

Schneider Electric Uni-Telway Driver

Optigo Networks Visual BACnet Capture Tool/Optigo Visual Networks Capture Tool

DCRat backdoor returns

Dont let cybercriminals steal your Spotify account

CISA Adds Five Actively Exploited Vulnerabilities in Advantive VeraCore and Ivanti EPM to KEV List

MINJA sneak attack poisons AI models for other chatbot users

~ 10 Mar 2025 ~

Allstate Insurance sued for delivering personal info on a platter, in plaintext, to anyone who went looking for it

Google begs owners of crippled Chromecasts not to hit factory reset

Researchers Expose New Polymorphic Attack That Clones Browser Extensions to Steal Credentials

Desert Dexter Targets 900 Victims Using Facebook Ads and Telegram Malware Links

Why The Modern Google Workspace Needs Unified Security

Sidewinder goes nuclear, charts course for maritime mayhem in tactics shift

THN Weekly Recap: New Attacks, Old Tricks, Bigger Impact

Rhysida pwns two US healthcare orgs, extracts over 300K patients' data

Consumer Reports calls out slapdash AI voice-cloning safeguards

How NOT to f-up your security incident response

Thousands of WordPress Websites Infected with Malware

The NHS security culture problem is a crisis years in the making

SideWinder targets the maritime and nuclear sectors with an updated toolset

AI-driven deception: A new face of corporate fraud

SilentCryptoMiner Infects 2,000 Russian Users via Fake VPN and DPI Bypass Tools

Strap in, get ready for more Rust drivers in Linux kernel

Microsoft admits GitHub used to store malware that infected almost a million devices

~ 9 Mar 2025 ~

India wants backdoors into clouds, email, SaaS, for tax inspectors

~ 8 Mar 2025 ~

Kernel saunters How Apple rearranged its XNU kernel with exclaves

Cybercriminals Allegedly Used a StubHub Backdoor to Steal Taylor Swift Tickets

Feds Link $150M Cyberheist to 2022 LastPass Hacks

Developer sabotaged ex-employer with kill switch that activated when he was let go

~ 7 Mar 2025 ~

Friday Squid Blogging: Squid Loyalty Cards

FIN7, FIN8, and Others Use Ragnar Loader for Persistent Access and Ransomware Operations

Uncle Sam charges alleged Garantex admins after crypto-exchange web seizures

Microsoft Warns of Malvertising Campaign Infecting Over 1 Million Devices Worldwide

Webinar: Learn How ASPM Transforms Application Security from Reactive to Proactive

Rayhunter: Device to Detect Cellular Surveillance

What PCI DSS v4 Really Means Lessons from A&F Compliance Journey

Alleged cyber scalpers Swiftly cuffed over $635K Taylor ticket heist

This Malicious PyPI Package Stole Ethereum Private Keys via Polygon RPC Transactions

U.S. Secret Service Seizes Russian Garantex Crypto Exchange Website

A Brand New Botnet Is Delivering Record-Size DDoS Attacks

Like whitebox servers, rent-a-crew crime 'affiliates' have commoditized ransomware

Safe{Wallet} Confirms North Korean TraderTraitor Hackers Stole $1.5 Billion in Bybit Heist

PHP-CGI RCE Flaw Exploited in Attacks on Japan's Tech, Telecom, and E-Commerce Sectors

The Badbox botnet is back, powered by up to a million backdoored Androids

Who is the DOGE and X Technician Branden Spikes?

~ 6 Mar 2025 ~

Book Talks for Chasing Shadows: March Events

International cops seize ransomware crooks' favorite Russian crypto exchange

Trumps Spy Chief Urged to Declassify Details of Secret Surveillance Program

Womens History Month: Why different perspectives in cybersecurity and AI matter more than ever before

Uncle Sam mulls policing social media of would-be citizens

Pentagon Cuts Threaten Programs That Secure Loose Nukes and Weapons of Mass Destruction

Elastic Releases Urgent Fix for Critical Kibana Vulnerability Enabling Remote Code Execution

Silenced by Surveillance: The Impacts of Digital Transnational Repression on Journalists, Human Rights Defenders, and Dissidents in Exile

EncryptHub Deploys Ransomware and Stealer via Trojanized Apps, PPI Services, and Phishing

Book release: Transnational Repression and International Law co-authored by Siena Anstis

Medusa Ransomware Hits 40+ Victims in 2025, Demands $100K$15M Ransom

Malvertising campaign leads to info stealers hosted on GitHub

Outsmarting Cyber Threats with Attack Graphs

Over 1,000 WordPress Sites Infected with JavaScript Backdoors Enabling Persistent Attacker Access

Toronto Zoo ransomware crooks snatch decades of visitor data

Up to $75M needed to address rural hospital cybersecurity

The US Army Is Using CamoGPT to Purge DEI From Training Materials

U.S. Charges 12 Chinese Nationals in State-Backed Hacking Operations

The Combined Cipher Machine

Hitachi Energy Relion 670/650/SAM600-IO

Hitachi Energy PCU400

Trojans disguised as AI: Cybercriminals exploit DeepSeeks popularity

Cybereason CEO leaves after months of boardroom blowups

Feds name and charge alleged Silk Typhoon spies behind years of China-on-US attacks

~ 5 Mar 2025 ~

Ex-NSA grandee says Trump's staff cuts will 'devastate' America's national security

China-Linked Silk Typhoon Expands Cyber Attacks to IT Supply Chains for Initial Access

Defending against USB drive attacks with Wazuh

Dark Caracal Uses Poco RAT to Target Spanish-Speaking Enterprises in Latin America

Google Rolls Out AI Scam Detection for Android to Combat Conversational Fraud

China's Silk Typhoon, tied to US Treasury break-in, now hammers IT and govt targets

US Charges 12 Alleged Spies in China's Freewheeling Hacker-for-Hire Ecosystem

Chinese APT Lotus Panda Targets Governments With New Sagerunex Backdoor Variants

Identity: The New Cybersecurity Battleground

Apple takes UK government to court over 'backdoor' order

Seven Malicious Go Packages Found Deploying Malware on Linux and macOS Systems

CISA Identifies Five New Vulnerabilities Currently Being Exploited

Leeds United kick card swipers into Row Z after 5-day cyberattack

1 Million Third-Party Android Devices Have a Secret Backdoor for Scammers