Port 22

~ 9 May 2025 ~

VC behemoth Insight Partners fears top-secret financial info swiped by cyber-miscreants

US Customs and Border Protection Plans to Photograph Everyone Exiting the US by Car

Initial Access Brokers Target Brazil Execs via NF-e Spam and Legit RMM Trials

Deploying AI Agents? Learn to Secure Them Before Hackers Strike Your Business

Malicious npm Packages Infect 3,200+ Cursor Users With Backdoor, Steal Credentials

Beyond Vulnerability Management Can You CVE What I CVE?

Google Rolls Out On-Device AI Protections to Detect Scams in Chrome and Android

openSUSE deep sixes Deepin desktop over security stink

Chinese Hackers Exploit SAP RCE Flaw CVE-2025-31324, Deploy Golang-Based SuperShell

Catching a phish with many faces

Bantam Advanced PHP Backdoor Management Tool For Post Exploitation

~ 8 May 2025 ~

US Customs and Border Protection Quietly Revokes Protections for Pregnant Women and Infants

38,000+ FreeDrain Subdomains Found Exploiting SEO to Steal Crypto Wallet Seed Phrases

SonicWall Patches 3 Flaws in SMA 100 Devices Allowing Attackers to Run Code as Root

Qilin Leads April 2025 Ransomware Spike with 45 Breaches Using NETXLOADER Malware

Security Tools Alone Don't Protect You Control Effectiveness Does

MirrorFace Targets Japan and Taiwan with ROAMINGMOUSE and Upgraded ANEL Malware

Russian Hackers Using ClickFix Fake CAPTCHA to Deploy New LOSTKEYS Malware

Mitsubishi Electric CC-Link IE TSN

Horner Automation Cscape

Hitachi Energy RTU500 Series

Cisco Patches CVE-2025-20188 (10.0 CVSS) in IOS XE That Enables Root Exploits via JWT

Sudo-rs make me a sandwich, hold the buffer overflows

PowerSchool paid thieves to delete stolen student, teacher data. Crooks may have lied

~ 7 May 2025 ~

After that 2024 Windows fiasco, CrowdStrike has a plan jobs cuts, leaning on AI

Pakistani Firm Shipped Fentanyl Analogs, Scams to US

Customs and Border Protection Confirms Its Use of Hacked Signal Clone TeleMessage

Europol Shuts Down Six DDoS-for-Hire Services Used in Global Attacks

OttoKit WordPress Plugin with 100K+ Installs Hit by Exploits Targeting Multiple Flaws

Delta Air Lines class action cleared for takeoff over CrowdStrike chaos

The Trump Administration Sure Is Having Trouble Keeping Its Comms Private

You'll never guess which mobile browser is the worst for data collection

SysAid Patches 4 Critical Flaws Enabling Pre-Auth RCE in On-Premise Version

Reevaluating SSEs: A Technical Gap Analysis of Last-Mile Protection

Play Ransomware Exploited Windows CVE-2025-29824 as Zero-Day to Breach U.S. Organization

Meet the Deputy CISOs who help shape Microsofts approach to cybersecurity: Part 2

Researchers Uncover Malware in Fake Discord PyPI Package Downloaded 11,500+ Times

NSO Group Fined $168M for Targeting 1,400 WhatsApp Users With Pegasus Spyware

Chinese AI Submersible

Curl project founder snaps over deluge of time-sucking AI slop bug reports

State of ransomware in 2025

Beware of phone scams demanding money for missed jury duty

New Zealand kind-of moves to ban social media for under-16s, require age checks for new accounts

~ 6 May 2025 ~

Super spyware maker NSO must pay Meta $168M in WhatsApp snoop drama

Hackers Exploit Samsung MagicINFO, GeoVision IoT Flaws to Deploy Mirai Botnet

Computacenter IT guy let girlfriend into Deutsche Bank server rooms, says fired whistleblower

The Signal Clone Mike Waltz Was Caught Using Has Direct Access to User Chats

Tulsi Gabbard Reused the Same Weak Password on Multiple Accounts for Years

New Investment Scams Use Facebook Ads, RDGA Domains, and IP Checks to Filter Victims

Pentagon declares war on 'outdated' software buying, opens fire on open source

Third Parties and Machine Credentials: The Silent Drivers Behind 2025's Worst Breaches

Microsoft Warns Default Helm Charts Could Leave Kubernetes Apps Exposed to Data Leaks

Entra ID Data Protection:Essential or Overkill?

Job Opportunity: Digital Communications Specialist

Optigo Networks ONS NC600

Milesight UG65-868M-EA

BrightSign Players

Google Fixes Actively Exploited Android System Flaw in May 2025 Security Update

Fake Student Fraud in Community Colleges

Critical Langflow Flaw Added to CISA KEV List Amid Ongoing Exploitation Evidence

US Border Agents Are Asking for Help Taking Photos of Everyone Entering the Country by Car

Toll road scams are in overdrive: Heres how to protect yourself

CISA slammed for role in 'censorship industrial complex' as budget faces possible $500M cut

~ 5 May 2025 ~

Wormable AirPlay Flaws Enable Zero-Click RCE on Apple Devices via Public Wi-Fi

Commvault CVE-2025-34028 Added to CISA KEV After Active Exploitation Confirmed

Signal Clone Used by Mike Waltz Pauses Service After Reports It Got Hacked

Signal chat app clone used by Signalgate's Waltz was apparently an insecure mess

Weekly Recap: Nation-State Hacks, Spyware Alerts, Deepfake Malware, Supply Chain Backdoors

Perfection is a Myth. Leverage Isn't: How Small Teams Can Secure Their Google Workspace

Another Move in the Deepfake Creation/Detection Arms Race

Microsoft partners with Global Anti-Scam Alliance to fight cybercrime

Golden Chickens Deploy TerraStealerV2 to Steal Browser Credentials and Crypto Wallet Data

Security Researchers Warn a Widely Used Open Source Tool Poses a 'Persistent' Risk to the US

Trump promises protection for TikTok, for which he has a warm spot in my heart

Indias chipmaking ambitions hurt by Zohos no-go and Adani unease

~ 4 May 2025 ~

Microsoft tries to knife passwords once and for all - at least for consumers

RSAC wrap: AI and China on everything, everywhere, all at once

Altman's eyeball-scanning biometric blockchain orbs officially come to America

~ 3 May 2025 ~

Malicious Go Modules Deliver Disk-Wiping Linux Malware in Advanced Supply Chain Attack

Iranian Hackers Maintain 2-Year Access to Middle East CNI via VPN Flaws and Malware

U.S. Charges Yemeni Hacker Behind Black Kingdom Ransomware Targeting 1,500 Systems

Hacking Spree Hits UK Retail Giants

~ 2 May 2025 ~

Friday Squid Blogging: Pyjama Squid

Mike Waltz Has Somehow Gotten Even Worse at Using Signal

Privacy for Agentic AI

TikTok Slammed With 530 Million GDPR Fine for Sending E.U. Data to China

Disney Slack attack wasn't Russian protesters, just a Cali dude with malware

How to Automate CVE and Vulnerability Advisory Response with Tines

Generative AI makes fraud fluent from phishing lures to fake lovers

MintsLoader Drops GhostWeaver via Phishing, ClickFix Uses DGA, TLS for Stealth Attacks

RSAC 2025 wrap-up Week in security with Tony Anscombe

Three Brits charged over 'active shooter threats' swattings in US, Canada

Microsoft Sets Passkeys Default for New Accounts; 15 Billion Users Gain Passwordless Support

NCSC Guidance on Advanced Cryptography

British govt agents step in as Harrods becomes third mega retailer under cyberattack

xAI Dev Leaks API Key for Private SpaceX, Tesla LLMs

~ 1 May 2025 ~

Dems look to close the barn door after top DOGE dog has bolted

Fake Security Plugin on WordPress Enables Remote Admin Access for Attackers

Healthcare group Ascension discloses second cyberattack on patients' data

How Amazon red-teamed Alexa+ to keep your kids from ordering 50 pizzas