Port 22

~ 9 Apr 2025 ~

How cyberattackers exploit domain controllers using ransomware

Explosive Growth of Non-Human Identities Creating Massive Security Blind Spots

PipeMagic Trojan Exploits Windows Zero-Day Vulnerability to Deploy Ransomware

CISA Warns of CentreStack's Hard-Coded MachineKey Vulnerability Enabling RCE Attacks

Microsoft Patches 126 Flaws Including Actively Exploited Windows CLFS Vulnerability

Google's got a hot cloud security startup, a new unified platform and its eye on Microsoft's $20B+ security biz

How to Leak to a Journalist

So your friend has been hacked: Could you be next?

Adobe Patches 11 Critical ColdFusion Flaws Amid 30 Total Vulnerabilities Discovered

Patch Tuesday, April 2025 Edition

Pharmacist accused of using webcams to spy on women in intimate moments at work, home

~ 8 Apr 2025 ~

Bad luck, Windows 10 users. No fix yet for ransomware-exploited bug

Fortinet Urges FortiSwitch Upgrades to Patch Critical Admin Password Change Flaw

Amazon EC2 SSM Agent Flaw Patched After Privilege Escalation via Path Traversal

Cryptocurrency Miner and Clipper Malware Spread via SourceForge Cracked Software Listings

How Can Canada Tackle Foreign Interference Without a U.S. Ally?

Don't open that JPEG in WhatsApp for Windows. It might be an .EXE

Exploitation of CLFS zero-day leads to ransomware activity

Agentic AI in the SOC - Dawn of Autonomous Alert Triage

Meet the Deputy CISOs who help shape Microsofts approach to cybersecurity

UAC-0226 Deploys GIFTEDCROOK Stealer via Malicious Excel Files Targeting Ukraine

CISA Adds CrushFTP Vulnerability to KEV Catalog Following Confirmed Active Exploitation

Scattered Spider stops the Rickrolls, starts the RAT race

Arguing Against CALEA

Attackers distributing a miner and the ClipBanker Trojan via SourceForge

Google Releases Android Update to Patch Two Actively Exploited Vulnerabilities

1 billion reasons to protect your identity online

As CISA braces for more cuts, threat intel sharing takes a hit

Oracle says its cloud was in fact compromised

~ 7 Apr 2025 ~

That massive GitHub supply chain attack? It all started with a stolen SpotBugs token

CISA and FBI Warn Fast Flux is Powering Resilient Malware, C2, and Phishing Networks

Alleged Scattered Spider SIM-swapper must pay back $13.2M to 59 victims

Weekly Recap: VPN Exploits, Oracle's Silent Breach, ClickFix Comeback and More

Security Theater: Vanity Metrics Keep You Busy - and Exposed

Tech Accelerator: Azure security and AI adoption

Chrome to patch decades-old flaw that let sites peek at your history

Tribunal denies UK's attempt to keep details of Apple 'backdoor' case secret

PoisonSeed Exploits CRM Accounts to Launch Cryptocurrency Seed Phrase Poisoning Attacks

DIRNSA Fired

How ToddyCat tried to hide behind AV software

What native cloud security tools wont catch

Asian tech players react to US tariffs with delays, doubts, deal-making

Signalgate solved? Report claims journalists phone number accidentally saved under name of Trump official

~ 5 Apr 2025 ~

Microsoft Credits EncryptHub, Hacker Behind 618+ Breaches, for Disclosing Windows Flaws

North Korean Hackers Deploy BeaverTail Malware via 11 Malicious npm Packages

Malicious Python Packages on PyPI Downloaded 39,000+ Times, Steal Sensitive Data

NSA Chief Ousted Amid Trump Loyalty Firing Spree

~ 4 Apr 2025 ~

Friday Squid Blogging: Two-Man Giant Squid

Trump fires NSA boss, deputy

SpotBugs Access Token Theft Identified as Root Cause of GitHub Supply Chain Attack

Cyber Forensic Expert in 2,000+ Cases Faces FBI Probe

Have We Reached a Distroless Tipping Point?

Critical Ivanti Flaw Actively Exploited to Deploy TRAILBLAZE and BRUSHFIRE Malware

OPSEC Failure Exposes Coquetttes Malware Campaigns on Bulletproof Hosting Servers

30 minutes to pwn town: Are speedy responses more important than backups for recovery?

Troy Hunt Gets Phished

CERT-UA Reports Cyberattacks Targeting Ukrainian State Systems with WRECKSTEEL Malware

A journey into forgotten Null Session and MS-RPC interfaces, part 2

Critical Flaw in Apache Parquet Allows Remote Attackers to Execute Arbitrary Code

Alan Turing Institute: UK can't handle a fight against AI-enabled crims

Ex-ASML, NXP staffer accused of stealing chip secrets, peddling them to Moscow

Retirement funds reportedly raided after unexplained portal probes and data theft

Signalgate: Pentagon watchdog probes Defense Sec Hegseth

~ 3 Apr 2025 ~

Microsoft Warns of Tax-Themed Email Attacks Using PDFs and QR Codes to Deliver Malware

Flux off: CISA, annexable allies warn of hot DNS threat

Suspected Chinese spies right now hijacking buggy Ivanti gear for third time in 3 years

Lazarus Group Targets Job Seekers With ClickFix Tactic to Deploy GolangGhost Malware

AI Threats Are Evolving Fast Learn Practical Defense Tactics in this Expert Webinar

AI Adoption in the Enterprise: Breaking Through the Security and Compliance Gridlock

Threat actors leverage tax season to deploy tax-themed phishing campaigns

When disaster strikes, proper preparation prevents poor performance

How Cyber Espionage Threatens Democracy in the Age of Trump (The Agenda)

The Citizen Labs Director Dissects Spyware and the Proliferating Market for It (The Record)

The United States is Putting the United States in Danger

The U.S. Wants Canada to Become A Police State

Google Patches Quick Share Vulnerability Enabling Silent File Transfers Without Consent

Triada Malware Preloaded on Counterfeit Android Phones Infects 2,600+ Devices

Why is someone mass-scanning Juniper and Palo Alto Networks products?

Hitachi Energy TRMTracker

Hitachi Energy RTU500 Series

B&R APROL

ABB Low Voltage DC Drives and Power Controllers CODESYS RTS

ABB ACS880 Drives Containing CODESYS RTS

EU: These are scary times let's backdoor encryption!

Web 3.0 Requires Data Integrity

Legacy Stripe API Exploited to Validate Stolen Payment Cards in Web Skimmer Campaign

Heterogeneous stacks, ransomware, and ITaaS: A DR nightmare

Europol Dismantles Kidflix With 72,000 CSAM Videos Seized in Major Operation

The good, the bad and the unknown of AI: A Q&A with Mria Bielikov

Customer info allegedly stolen from Royal Mail, Samsung via compromised supplier

~ 2 Apr 2025 ~

Raw Deel: Corporate spy admits role in espionage at HR software biz Rippling

Google Fixed Cloud Run Vulnerability Allowing Unauthorized Image Access via IAM Misuse

Crimelords at Hunters International told lackeys ransomware too 'risky'

Cybersecurity Professor Faced China-Funding Inquiry Before Disappearing, Sources Say

Helping Your Clients Achieve NIST Compliance: A Step by Step Guide for Service Providers

Outlaw Group Uses SSH Brute-Force to Deploy Cryptojacking Malware on Linux Servers

How SSL Misconfigurations Impact Your Attack Surface

Oracle's masterclass in breach comms: Deny, deflect, repeat

Dont let cyberattacks keep you down

FIN7 Deploys Anubis Backdoor to Hijack Windows Systems via Compromised SharePoint Sites