Port 22

~ 21 May 2025 ~

Lumma Stealer: Breaking down the delivery techniques and capabilities of a prolific infostealer

How to Detect Phishing Attacks Faster: Tycoon2FA Example

Judge allows Delta's lawsuit against CrowdStrike to proceed with millions in damages on the line

Google carves out cloudy safe spaces for nations nervous about Uncle Sam's servers

Researchers Expose PWA JavaScript Attack That Redirects Users to Adult Scam Apps

Trump announces $175B for Golden Dome defense shield over America

Google Chrome Can Now Auto-Change Compromised Passwords Using Its Built-In Manager

More AIs Are Taking Polls and Surveys

Dero miner zombies biting through Docker APIs to build a cryptojacking horde

3 Teens Almost Got Away With Murder. Then Police Found Their Google Searches

M&S warns of 300M dent in profits from cyberattack

UK 'extremely dependent' on US for space security

Scattered Spider snared financial orgs before targeting shops in Britain, America

'Ongoing' Ivanti hijack bug exploitation reaches clouds

AI-Powered Malware The Next Evolution in Cyber Threats

~ 20 May 2025 ~

KrebsOnSecurity Hit With Near-Record 6.3 Tbps DDoS

Hazy Hawk Exploits DNS Records to Hijack CDC, Corporate Domains for Malware Delivery

100+ Fake Chrome Extensions Found Hijacking Sessions, Stealing Credentials, Injecting Ads

South Asian Ministries Hit by SideWinder APT Using Old Office Flaws and Custom Malware

AWS Default IAM Roles Found to Enable Lateral Movement and Cross-Service Exploitation

The Crowded Battle: Key Insights from the 2025 State of Pentesting Report

Freshly discovered bug in OpenPGP.js undermines whole point of encrypted comms

Chinese Hackers Deploy MarsSnake Backdoor in Multi-Year Attack on Saudi Organization

Go-Based Malware Deploys XMRig Miner on Linux Hosts via Redis Configuration Abuse

Ransomware attack on food distributor spells more pain for UK supermarkets

Vertiv Liebert RDU101 and UNITY

Siemens Siveillance Video

Schneider Electric PrismaSeT Active - Wireless Panel Server

Schneider Electric Modicon Controllers

Schneider Electric Galaxy VS, Galaxy VL, Galaxy VXL

National Instruments Circuit Design Suite

Mitsubishi Electric Iconics Digital Solutions and Mitsubishi Electric Products

Danfoss AK-SM 8xxA Series

AutomationDirect MB-Gateway

Assured Telematics Inc (ATI) Fleet Management System with Geotab Integration

ABUP IoT Cloud Platform

Malicious PyPI Packages Exploit Instagram and TikTok APIs to Validate User Accounts

DoorDash Hack

What to Expect When Youre Convicted

Virgin Media O2 patches hole that let callers snoop on your coordinates

~ 19 May 2025 ~

CISA has a new No. 2 - but still no official top dog

RVTools Official Site Hacked to Deliver Bumblebee Malware via Trojanized Installer

Ransomware Gangs Use Skitnet Malware for Stealthy Data Theft and Remote Access

Trump Signs Controversial Law Targeting Nonconsensual Sexual Content

SEC SIM-swapper who Googled 'signs that the FBI is after you' put behind bars

The who, where, and how of APT attacks in Q4 2024Q1 2025

A Silicon Valley VC Says He Got the IDF Starlink Access Within Days of October 7 Attack

Why CTEM is the Winning Bet for CISOs in 2025

Firefox Patches 2 Zero-Days Exploited at Pwn2Own Berlin with $100K in Rewards

Microsoft extends Zero Trust to secure the agentic workforce

Weekly Recap: Zero-Day Exploits, Insider Threats, APT Targeting, Botnets and More

Millions at risk after attackers steal UK legal aid data dating back 15 years

The NSAs Fifty Years of Mathematical Cryptanalysis (19371987)

Who Even Is a Criminal Now?

We 3D-Printed Luigi Mangiones Ghost Gun. It Was Entirely Legal

How to Win Followers and Scamfluence People

For Tech Whistleblowers, Theres Safety in Numbers

IT chiefs of UK's massive health service urge vendors to make public security pledge

ESET APT Activity Report Q4 2024Q1 2025

Eeek! p0wned Alabama hit by unspecified 'cybersecurity event'

Falco Real-Time Threat Detection for Linux and Containers

China launches an AI cloud into orbit -12 sats for now, 2,800 in coming years

~ 18 May 2025 ~

Ex-NSA bad-guy hunter listened to Scattered Spider's fake help-desk calls: 'Those guys are good'

How the Signal Knockoff App TeleMessage Got Hacked in 20 Minutes

~ 17 May 2025 ~

Boffins devise technique that lets users prove location without giving it away

Coinbase Will Reimburse Customers Up to $400 Million After Data Breach

~ 16 May 2025 ~

Fired US govt workers, Uncle Xi wants you! to apply for this fake consulting gig

Americas consumer watchdog drops leash on proposed data broker crackdown

Friday Squid Blogging: Pet Squid Simulation

New HTTPBot Botnet Launches 200+ Precision DDoS Attacks on Gaming and Tech Sectors

Top 10 Best Practices for Effective Data Protection

Defamation case against DEF CON terminated with prejudice

Researchers Expose New Intel CPU Flaws Enabling Memory Leaks and Spectre v2 Attacks

Communications Backdoor in Chinese Power Inverters

Broadcom employee data stolen by ransomware crooks following hit on payroll provider

Fileless Remcos RAT Delivered via LNK Files and MSHTA in PowerShell-Based Attacks

[Webinar] From Code to Cloud to SOC: Learn a Smarter Way to Defend Modern Applications

Good luck to Atos' 7th CEO and its latest biz transformation

From hype to harm: 78% of CISOs see AI attacks already

Wazuh Open Source Security Platform for Threat Detection, Visibility & Compliance

Scammers are deepfaking voices of senior US government officials, warns FBI

~ 15 May 2025 ~

DoorDash scam used fake drivers, phantom deliveries to bilk $2.59M

Meta to Train AI on E.U. User Data From May 27 Without Consent; Noyb Threatens Lawsuit

Coinbase Agents Bribed, Data of ~1% Users Leaked; $20M Extortion Attempt Fails

Breachforums Boss to Pay $700k in Healthcare Breach

Cyber fiends battering UK retailers now turn to US stores

Pen Testing for Compliance Only? It's Time to Change Your Approach

Coinbase extorted for $20M. Support staff bribed. Customers scammed. One hell of a breach disclosure

How the Microsoft Secure Future Initiative brings Zero Trust to life

5 BCDR Essentials for Effective Ransomware Defense

Russia-Linked APT28 Exploited MDaemon Zero-Day to Hack Government Webmail Servers

Socket buys Coana to tell you which security alerts you can ignore

Malicious npm Package Leverages Unicode Steganography, Google Calendar as C2 Dropper

Snowflake CISO on the power of 'shared destiny' and 'yes and'

Sednit abuses XSS flaws to hit gov't entities, defense companies

Threat landscape for industrial automation systems in Q1 2025

Siemens BACnet ATEC Devices

Siemens APOGEE PXC and TALON TC Series

Schneider Electric EcoStruxure Power Build Rapsody

ECOVACS DEEBOT Vacuum and Base Station