Port 22

~ 15 Apr 2025 ~

China names alleged US snoops over Asian Winter Games attacks

All right, you can have one: DOGE access to Treasury IT OK'd judge

Threat actors misuse Node.js to deliver malware and other malicious payloads

Majority of Browser Extensions Can Access Sensitive Enterprise Data, New Report Finds

Slopsquatting

Transforming security with Microsoft Security Exposure Management initiatives

Crypto Developers Targeted by Python Malware Disguised as Coding Challenges

Chinese snoops use stealth RAT to backdoor US orgs still active last week

ActiveX blocked by default in Microsoft 365 because remote code execution is bad, OK?

Siemens SIMOCODE, SIMATIC, SIPLUS, SIDOOR, SIWAREX

Siemens Mendix Runtime

Siemens Industrial Edge Device Kit

National Instruments LabVIEW

Mitsubishi Electric Europe B.V. smartRTU

Lantronix Xport

Growatt Cloud Applications

Delta Electronics COMMGR

ABB M2M Gateway

Where it Hertz: Customer data driven off in Cleo attacks

Gladinets Triofox and CentreStack Under Active Exploitation via Critical RCE Vulnerability

Meta Resumes E.U. AI Training Using Public User Data After Regulator Approval

EU gives staff 'burner phones, laptops' for US visits

Trump Revenge Tour Targets Cyber Leaders, Elections

~ 14 Apr 2025 ~

Don't delete that mystery empty folder. Windows put it there as a security fix

ResolverRAT Campaign Targets Healthcare, Pharma via Phishing and DLL Side-Loading

New SSL/TLS cert to live no longer than 47 days by 2029

Microsofts Recall AI Tool Is Making an Unwelcome Return

Cyber congressman demands answers before CISA gets cut down to size

Phishing Campaigns Use Real-Time Checks to Validate Victim Emails Before Credential Theft

Weekly Recap: Windows 0-Day, VPN Exploits, Weaponized AI, Hijacked Antivirus and More

Upcoming Speaking Engagements

Explore how to secure AI by attending our Learn Live Series

Cybersecurity in the AI Era: Evolve Faster Than the Threats or Get Left Behind

Pakistan-Linked Hackers Expand Targets in India with CurlBack RAT and Spark RAT

China Sort of Admits to Being Behind Volt Typhoon

TraderTraitor: The Kings of the Crypto Heist

The Most Dangerous Hackers Youve Never Heard Of

Smishing Triad: The Scam Group Stealing the Worlds Riches

Gamaredon: The Turncoat Spies Relentlessly Hacking Ukraine

CyberAv3ngers: The Iranian Saboteurs Hacking Water and Gas Systems Worldwide

Brass Typhoon: The Chinese Hacking Group Lurking in the Shadows

Black Basta: The Fallen Ransomware Gang That Lives On

Official abuse of state security has always been bad, now it's horrifying

Attacks on the education sector are surging: How can cyber-defenders respond?

CIO and digi VP to depart UK retail giant Asda as Walmart divorce woes settle

Old Fortinet flaws under attack with new method its patch didn't prevent

China reportedly admitted directing cyberattacks on US infrastructure

PentestGPT AI-Powered Penetration Testing Assistant

~ 13 Apr 2025 ~

Hacktivism is back but don't be fooled, it's often state-backed goons in masks

Homeland Security Email Tells a US Citizen to 'Immediately' Self-Deport

~ 12 Apr 2025 ~

AI can't stop making up software dependencies and sabotaging everything

China Secretly (and Weirdly) Admits It Hacked US Infrastructure

~ 11 Apr 2025 ~

Fortinet Warns Attackers Retain FortiGate Access Post-Patching via SSL-VPN Symlink Exploit

Microsoft total recalls Recall totally to Copilot+ PCs

Paper Werewolf Deploys PowerModul Implant in Targeted Cyberattacks on Russian Sectors

Initial Access Brokers Shift Tactics, Selling More for Less

Palo Alto Networks Warns of Brute-Force Attempts Targeting PAN-OS GlobalProtect Gateways

SpyNote, BadBazaar, MOONSHINE Malware Target Android and iOS Users via Fake Apps

Friday Squid Blogging: Squid and Efficient Solar Tech

AI Vulnerability Finding

Sex-Fantasy Chatbots Are Leaking a Constant Stream of Explicit Messages

OttoKit WordPress Plugin Admin Creation Vulnerability Under Active Exploitation

Ransomware crims hammering UK more than ever as British techies complain the board just doesn't get it

Ex-Meta exec tells Senate Zuck's biz dangled US citizen data in bid to enter China

Reimagining Democracy

~ 10 Apr 2025 ~

The ultimate guide to Microsoft Security at RSAC 2025

Incomplete Patch in NVIDIA Toolkit Leaves CVE-2024-0132 Open to Container Escapes

Malicious npm Package Targets Atomic Wallet, Exodus Users by Swapping Crypto Addresses

US sensor giant Sensata admits ransomware derailed ops

PlayPraetor Reloaded: CTM360 Uncovers a Play Masquerading Party

The Identities Behind AI Agents: A Deep Dive Into AI & NHI

Gamaredon Uses Infected Removable Drives to Breach Western Military Mission in Ukraine

China-based SMS Phishing Triad Pivots to Banks

Europol Arrests Five SmokeLoader Clients Linked by Seized Database Evidence

AkiraBot Targets 420,000 Sites with OpenAI-Generated Spam, Bypassing CAPTCHA Protections

Subnet Solutions PowerSYSTEM Center

Siemens Solid Edge

Siemens SIDIS Prime

Siemens SENTRON 7KT PAC1260 Data Manager

Siemens License Server

Siemens Insights Hub Private Cloud

Siemens Industrial Edge Devices

Rockwell Automation Arena

ABB Arctic Wireless Gateways

Infosec experts fear China could retaliate against tariffs with a Typhoon attack

GOFFEE continues to attack organizations in Russia

Watch out for these traps lurking in search results

Europol: Five pay-per-infect suspects cuffed, some spill secrets to cops

<i>The Reg</i> translates the letter in which Oracle kinda-sorta tells customers it was pwned

Trump kills clearances for infosec's SentinelOne, ex-CISA boss Chris Krebs

~ 9 Apr 2025 ~

April's Patch Tuesday leaves unlucky Windows Hello users unable to login

Wyden blocks Trump's CISA boss nominee, blames cyber agency for 'actively hiding info' about telecom insecurity

Sensitive financial files feared stolen from US bank watchdog

Lovable AI Found Most Vulnerable to VibeScamming Enabling Anyone to Build Live Scam Pages

Spyware Maker NSO Group Is Paving a Path Back Into Trumps America

New TCESB Malware Found in Active Attacks Exploiting ESET Security Scanner

Stopping attacks against on-premises Exchange Server and SharePoint Server with AMSI

How cyberattackers exploit domain controllers using ransomware

Explosive Growth of Non-Human Identities Creating Massive Security Blind Spots

PipeMagic Trojan Exploits Windows Zero-Day Vulnerability to Deploy Ransomware