Port 22

~ 17 Mar 2025 ~

StilachiRAT analysis: From system reconnaissance to cryptocurrency theft

THN Weekly Recap: Router Hacks, PyPI Attacks, New Ransomware Decryptor, and More

SANS Institute Warns of Novel Cloud-Native Ransomware Attacks

GitHub Action Compromise Puts CI/CD Secrets at Risk in Over 23,000 Repositories

Improvements in Brute Force Attacks

GitHub supply chain attack spills secrets from 23,000 projects

UK government to open 16B IT services competition after 6-month delay

AI's biggest surprises of 2024 | Unlocked 403 cybersecurity podcast (S2E1)

Microsoft wouldn't look at a bug report without a video. Researcher maliciously complied

~ 16 Mar 2025 ~

FCC stands up Council on National Security to fight China in ways that CISA used to

~ 15 Mar 2025 ~

Malicious PyPI Packages Stole Cloud TokensOver 14,100 Downloads Before Removal

End-to-End Encrypted Texts Between Android and iPhone Are Coming

~ 14 Mar 2025 ~

ClickFix: How to Infect Your PC in Three Easy Steps

Friday Squid Blogging: SQUID Band

Alleged Israeli LockBit Developer Rostislav Panev Extradited to U.S. for Cybercrime Charges

GSMA Confirms End-to-End Encryption for RCS, Enabling Secure Cross-Platform Messaging

Live Ransomware Demo: See How Hackers Breach Networks and Demand a Ransom

Why Most Microsegmentation Projects FailAnd How Andelyn Biosciences Got It Right

Upcoming Speaking Engagements

Apple's alleged UK encryption battle sparks political and privacy backlash

New MassJacker Malware Targets Piracy Users, Hijacking Cryptocurrency Transactions

OBSCURE#BAT Malware Uses Fake CAPTCHA Pages to Deploy Rootkit r77 and Evade Detection

TP-Link Router Botnet

New kids on the ransomware block channel Lockbit to raid Fortinet firewalls

When IT meets OT: Cybersecurity for the physical world

A New Era of Attacks on Encryption Is Starting to Heat Up

~ 13 Mar 2025 ~

Dems ask federal agencies for reassurance DOGE isn't feeding data into AI willy-nilly

Microsoft Warns of ClickFix Phishing Campaign Targeting Hospitality Sector via Fake Booking[.]com Emails

North Koreas ScarCruft Deploys KoSpy Malware, Spying on Android Users via Fake Utility Apps

Google says it's rolling out a fix for stricken Chromecasts

GitHub Uncovers New ruby-saml Vulnerabilities Allowing Account Takeover Attacks

Future-Proofing Business Continuity: BCDR Trends and Challenges for 2025

RIP Mark Klein

How MSRC coordinates vulnerability research and disclosure while building community

That 'angry guest' email from Booking.com? It's a scam, not a 1-star review

Phishing campaign impersonates Booking .com, delivers a suite of credential-stealing malware

CISA: We didn't fire our red team, we just unhired a bunch of them

DeepSeek can be gently persuaded to spit out malware code

Meta Warns of FreeType Vulnerability (CVE-2025-27363) With Active Exploitation Risk

WARNING: Expiring Root Certificate May Disable Firefox Add-Ons, Security Features, and DRM Playback

Sungrow iSolarCloud Android App WiNet Firmware

Siemens Tecnomatix Plant Simulation

Siemens Teamcenter Visualization and Tecnomatrix Plant Simulation

Siemens SiPass integrated AC5102/ACC-G2 and ACC-AP

Siemens SINEMA Remote Connect Server

Siemens SINEMA Remote Connect Client

Siemens SINAMICS S200

Siemens SIMATIC S7-1500 TM MFP

Siemens SIMATIC IPC Family, ITP1000, and Field PGs

Siemens SCALANCE M-800 and SC-600 Families

Siemens SCALANCE LPE9403

Siemens OPC UA

Head Mare and Twelve join forces to attack Russian entities

People Are Scared: Inside CISA as It Reels From Trumps Purge

Medusa ransomware affiliate tried triple extortion scam up from the usual double demand

Get off that old Firefox by Friday or you'll be sorry, says Moz

~ 12 Mar 2025 ~

Chinese Hackers Breach Juniper Networks Routers With Custom Backdoors and Rootkits

Over 400 IPs Exploiting Multiple SSRF Vulnerabilities in Coordinated Cyber Attack

The Violent Rise of No Lives Matter

Pentesters: Is AI Coming for Your Role?

URGENT: Microsoft Patches 57 Security Flaws, Including 6 Actively Exploited Zero-Days

Expired Juniper routers find new life as Chinese spy hubs

This is the FBI, open up. China's Volt Typhoon is on your network

China, Russia, Iran, and North Korea Intelligence Sharing

UK must pay cyber pros more than its Prime Minister, top civil servant says

Apple Releases Patch for WebKit Zero-Day Vulnerability Exploited in Targeted Attacks

Incident response analyst report 2024

CISA worker says 100-strong Red Team fired after DOGE cancelled contract

Choose your own Patch Tuesday adventure: Start with six zero day fixes, or six critical flaws

~ 11 Mar 2025 ~

Microsoft: 6 Zero-Days in March 2025 Patch Tuesday

Blind Eagle Hacks Colombian Institutions Using NTLM Flaw, RATs and GitHub-Based Attacks

Ballista Botnet Exploits Unpatched TP-Link Vulnerability, Infects Over 6,000 Devices

Silk Typhoon Hackers Indicted

'Uber for nurses' exposes 86k+ medical records, PII in open S3 bucket for months

Your Risk Scores Are Lying: Adversarial Exposure Validation Exposes Real Threats

Alleged Co-Founder of Garantex Arrested in India

FTCs $25.5M scam refund treats victims to $34 each

Steganography Explained: How XWorm Hides Inside Images

New XCSSET malware adds new obfuscation, persistence techniques to infect Xcode projects

What Really Happened With the DDoS Attacks That Took Down X

SideWinder APT Targets Maritime, Nuclear, and IT Sectors Across Asia, Middle East, and Africa

Moxa Issues Fix for Critical Authentication Bypass Vulnerability in PT Switches

Schneider Electric Uni-Telway Driver

Optigo Networks Visual BACnet Capture Tool/Optigo Visual Networks Capture Tool

DCRat backdoor returns

Dont let cybercriminals steal your Spotify account

CISA Adds Five Actively Exploited Vulnerabilities in Advantive VeraCore and Ivanti EPM to KEV List

MINJA sneak attack poisons AI models for other chatbot users

~ 10 Mar 2025 ~

Allstate Insurance sued for delivering personal info on a platter, in plaintext, to anyone who went looking for it

Google begs owners of crippled Chromecasts not to hit factory reset

Researchers Expose New Polymorphic Attack That Clones Browser Extensions to Steal Credentials

Desert Dexter Targets 900 Victims Using Facebook Ads and Telegram Malware Links

Why The Modern Google Workspace Needs Unified Security

Sidewinder goes nuclear, charts course for maritime mayhem in tactics shift

THN Weekly Recap: New Attacks, Old Tricks, Bigger Impact

Rhysida pwns two US healthcare orgs, extracts over 300K patients' data

Consumer Reports calls out slapdash AI voice-cloning safeguards

How NOT to f-up your security incident response

Thousands of WordPress Websites Infected with Malware

The NHS security culture problem is a crisis years in the making