Port 22

~ 6 Jun 2025 ~

Hearing on the Federal Government and AI

Fresh strain of pro-Russian wiper flushes Ukrainian critical infrastructure

Inside the Mind of the Adversary: Why More Security Leaders Are Selecting AEV

Report on the Malicious Uses of AI

New PathWiper Data Wiper Malware Disrupts Ukrainian Critical Infrastructure in 2025 Attack

Uncle Sam moves to seize $7.7M laundered by North Korean IT worker ring

Your ransomware nightmare just came true now what?

Analysis of the latest Mirai wave exploiting TBK DVR devices with CVE-2024-3721

ProxyBlob SOCKS5 Over Azure Blob Storage for Covert Network Tunneling

~ 5 Jun 2025 ~

Uncle Sam puts $10M bounty on RedLine dev and Russia-backed cronies

Proxy Services Feast on Ukraines IP Address Exodus

AT&T not sure if new customer data dump is dj vu

Popular Chrome Extensions Leak API Keys, User Data via HTTP and Hardcoded Credentials

Cellebrite buys Corellium to help cops bust phone encryption

Trumps cyber czar pick grilled over CISA cuts: If we have a cyber 9/11, youre the guy

Researchers Detail Bitter APTs Evolving Tactics as Its Geographic Scope Expands

Ross Ulbricht Got a $31 Million Donation From a Dark Web Dealer, Crypto Tracers Suspect

BidenCash busted as Feds nuke stolen credit card bazaar

Connect with us at the Gartner Security & Risk Management Summit

Redefining Cyber Value: Why Business Impact Should Lead the Security Conversation

Iran-Linked BladedFeline Hits Iraqi and Kurdish Targets with Whisper and Spearal Malware

Meet the Deputy CISOs who help shape Microsofts approach to cybersecurity: Part 3

DoJ Seizes 145 Domains Tied to BidenCash Carding Marketplace in Global Takedown

Techno-Legal Internet Controls in Indonesia and Their Impact on Free Expression

More than a hundred backdoored malware repos traced to single GitHub user

Hitachi Energy Relion 670, 650 Series and SAM600-IO Product

CyberData 011209 SIP Emergency Intercom

Critical Cisco ISE Auth Bypass Flaw Impacts Cloud Deployments on AWS, Azure, and OCI

HMRC: Crooks broke into 100k accounts, stole 43M from British taxpayer in late 2024

IT threat evolution in Q1 2025. Non-mobile statistics

IT threat evolution in Q1 2025. Mobile statistics

What Really Happened in the Aftermath of the Lizard Squad Hacks

BladedFeline: Whispering in the dark

AI kept 15-year-old zombie vuln alive, but its time is drawing near

China accuses Taiwan of running five feeble APT gangs, with US help

IBM Cloud login breaks for second time this week and Big Blue isn't saying why

~ 4 Jun 2025 ~

Play ransomware crims exploit SimpleHelp flaw in double-extortion schemes

ICE Quietly Scales Back Rules for Courthouse Raids

Google Exposes Vishing Group UNC6040 Targeting Salesforce with Fake Data Loader App

Ukraine strikes Russian bomber-maker with hack attack

Ransomware scum leak patient data after disrupting chemo treatments at Kettering

Chaos RAT Malware Targets Windows and Linux via Fake Network Tool Downloads

Your SaaS Data Isn't Safe: Why Traditional DLP Solutions Fail in the Browser Era

Malicious PyPI, npm, and Ruby Packages Exposed in Ongoing Open-Source Supply Chain Attacks

Fake IT support calls hit 20 orgs, end in stolen Salesforce data and extortion, Google warns

Crims stole 40,000 people's data from our network, admits publisher Lee Enterprises

The Ramifications of Ukraines Drone Attack

HPE Issues Security Patch for StoreOnce Bug Allowing Remote Authentication Bypass

The Race to Build Trumps Golden Dome Missile Defense System Is On

You're Not Ready for Quantum Cracks

You're Not Ready

The US Grid Attack Looming on the Horizon

The Texting Network for the End of the World

The Rise of Vibe Hacking Is the Next AI Nightmare

Deepfake Scams Are Distorting Reality Itself

A GPS Blackout Would Shut Down the World

UK CyberEM Command to spearhead new era of armed conflict

Ukraine war spurred infosec vet Mikko Hyppnen to pivot to drones

Deliberate attack deletes shopping apps AWS and GitHub resources

Weaponizing Dependabot Exploiting GitHub Automation for Supply Chain Attacks

~ 3 Jun 2025 ~

Meta pauses mobile port tracking tech on Android after researchers cry foul

You say Cozy Bear, I say Midnight Blizzard, Voodoo Bear, APT29

Fake DocuSign, Gitcode Sites Spread NetSupport RAT via Multi-Stage PowerShell Attack

Google quietly pushes emergency fix for Chrome 0-day as exploit runs wild

Critical 10-Year-Old Roundcube Webmail Bug Allows Authenticated Users Run Malicious Code

X's new 'encrypted' XChat feature seems no more secure than the failure that came before it

The PRC Transnational Repression Efforts: Influence, Interference, and Legitimacy

Crooks fleece The North Face accounts with recycled logins

Scattered Spider: Understanding Help Desk Scams and How to Defend Your Organization

How the Farm Industry Spied on Animal Rights Activists and Pushed the FBI to Treat Them as Terrorists

How Microsoft Defender for Endpoint is redefining endpoint security

Android Trojan Crocodilus Now Active in 8 Countries, Targeting Banks and Crypto Wallets

Microsoft patches the patch that put Windows 11 in a coma

Google Chrome to Distrust Two Certificate Authorities Over Compliance and Conduct Issues

Microsoft and CrowdStrike Launch Shared Threat Actor Glossary to Cut Attribution Confusion

Schneider Electric Wiser Home Automation

Schneider Electric EcoStruxure Power Build Rapsody

Mitsubishi Electric MELSEC iQ-F Series

Illicit crypto-miners pouncing on lazy DevOps configs that leave clouds vulnerable

New Linux Vulnerabilities

Host-based logs, container-based threats: How to tell where an attack began

Bling slinger Cartier tells customers to be wary of phishing attacks after intrusion

New Chrome Zero-Day Actively Exploited; Google Issues Emergency Out-of-Band Patch

~ 2 Jun 2025 ~

Cryptojacking Campaign Exploits DevOps APIs Using Off-the-Shelf Tools from GitHub

Preinstalled Apps on Ulefone, Krger&Matz Phones Let Any App Reset Device, Steal PIN

Ukrainians smuggle drones hidden in cabins on trucks to strike Russian airfields

Qualcomm Fixes 3 Zero-Days Used in Targeted Android Attacks via Adreno GPU

Discover how automatic attack disruption protects critical assets while ensuring business continuity

Weekly Recap: APT Intrusions, AI Malware, Zero-Click Exploits, Browser Hijacks and More

The Secret Defense Strategy of Four Critical Industries Combating Advanced Cyber Threats

Announcing a new strategic collaboration to bring clarity to threat actor naming

US community bank says thieves drained customer data through third party hole

Fake Recruiter Emails Target CFOs Using Legit NetBird Tool Across 6 Global Regions

Australia Requires Ransomware Victims to Declare Payments

Dont let dormant accounts become a doorway for cybercriminals

Lumma infostealer takedown may have inflicted only a flesh wound as crew keeps pinching and selling data

OSSEC Open Source Host-Based Intrusion Detection for Linux, Windows and Unix Systems

~ 31 May 2025 ~

New Linux Flaws Allow Password Hash Theft via Core Dumps in Ubuntu, RHEL, Fedora

U.S. DoJ Seizes 4 Domains Supporting Cybercrime Crypting Services in Global Operation

Mysterious leaker GangExposed outs Conti kingpins in massive ransomware data dump