Port 22

~ 29 Jan 2025 ~

SLAP, Apple, and FLOP: Safari, Chrome at risk of data theft on iPhone, Mac Silicon

~ 28 Jan 2025 ~

Baguette bandits strike again with ransomware and a side of mockery

3 priorities for adopting proactive identity and access security in 2025

PureCrypter Deploys Agent Tesla and New TorNet Backdoor in Ongoing Cyberattacks

Protecting AWS environments from cyberthreats

Security pros more confident about fending off ransomware, despite being battered by attacks

OAuth Redirect Flaw in Airline Travel Integration Exposes Millions to Account Hijacking

CISA Under Trump

Schneider Electric RemoteConnect and SCADAPack x70 Utilities

Schneider Electric Power Logic

Rockwell Automation FactoryTalk

Rockwell Automation FactoryTalk

Rockwell Automation DataMosaix Private Cloud

B&R Automation Runtime

AI SOC Analysts: Propelling SecOps into the future

Ransomware Targets ESXi Systems via Stealthy SSH Tunnels for C2 Operations

How Long Does It Take Hackers to Crack Modern Hashing Algorithms?

E.U. Sanctions 3 Russian Nationals for Cyber Attacks Targeting Estonias Key Ministries

Going (for) broke: 6 common online betting scams and how to avoid them

Apple plugs security hole in its iThings that's already been exploited in iOS

Top-Rated Chinese AI App DeepSeek Limits Registrations Amid Cyberattacks

Apple Patches Actively Exploited Zero-Day Affecting iPhones, Macs, and More

A Tumultuous Week for Federal Cybersecurity Efforts

~ 27 Jan 2025 ~

US freezes foreign aid, halting cybersecurity defense and policy funds for allies

DeepSeeks Popular AI App Is Explicitly Sending US Data to China

DeepSeek suspends new registrations amid cyberattack

Google takes action after coder reports 'most sophisticated attack I've ever seen'

Fast-track generative AI security with Microsoft Purview

GitHub Desktop Vulnerability Risks Credential Leaks via Malicious Remote URLs

Sweden seizes cargo ship after another undersea cable hit in suspected sabotage

THN Weekly Recap: Top Cybersecurity Threats, Tools and Tips [27 January]

New VPN Backdoor

CDNs: Great for speeding up the internet, bad for location privacy

Scammers Are Creating Fake News Videos to Blackmail Victims

Do We Really Need The OWASP NHI Top 10?

British Museum says ex-contractor 'shut down' IT systems, wreaked havoc

GamaCopy Mimics Gamaredon Tactics in Cyber Espionage Targeting Russian Entities

MintsLoader Delivers StealC Malware and BOINC in Targeted Cyber Attacks

~ 26 Jan 2025 ~

Meta's Llama Framework Flaw Exposes AI Systems to Remote Code Execution Risks

~ 25 Jan 2025 ~

US Privacy Snags a Win as Judge Limits Warrantless FBI Searches

Someone is slipping a hidden backdoor into Juniper routers across the globe, activated by a magic packet

UK telco TalkTalk confirms probe into alleged data grab underway

~ 24 Jan 2025 ~

AI chatbot startup founder, lawyer wife accused of ripping off investors in $60M fraud

Friday Squid Blogging: Beaked Whales Feed on Squid

Senior researcher Noura Aljizawi delivers testimony before the Standing Committee on Foreign Affairs and International Development

Don't want your Kubernetes Windows nodes hijacked? Patch this hole now

North Korean dev who renamed himself 'Bane' accused of IT worker fraud scheme

RANsacked: Over 100 Security Flaws Found in LTE and 5G Network Implementations

2025 State of SaaS Backup and Recovery Report

DoJ Indicts 5 Individuals for $866K North Korean IT Worker Scheme Violations

Android's New Identity Check Feature Locks Device Settings Outside Trusted Locations

China and friends claim success in push to stamp out tech support cyber-scam slave camps

CISA Adds Five-Year-Old jQuery XSS Flaw to Exploited Vulnerabilities List

Court rules FISA Section 702 surveillance of US resident was unconstitutional

~ 23 Jan 2025 ~

One of Salt Typhoon's favorite flaws still wide open on 91% of at-risk Exchange Servers

Patch now: Cisco fixes critical 9.9-rated, make-me-admin bug

SonicWall flags critical bug likely exploited as zero-day, rolls out hotfix

Meta's pay-or-consent model under fire from EU consumer group

Palo Alto Firewalls Found Vulnerable to Secure Boot Bypass and Firmware Exploits

Beware: Fake CAPTCHA Campaign Spreads Lumma Stealer in Multi-Industry Attacks

Third Interdisciplinary Workshop on Reimagining Democracy (IWORD 2024)

Custom Backdoor Exploiting Magic Packet Vulnerability in Juniper Routers

FortiGate config leaks: Victims' email addresses published online

Experts Find Shared Codebase Linking Morpheus and HellCat Ransomware Payloads

Subaru Security Flaws Exposed Its System for Tracking Millions of Cars

Schneider Electric EVlink Home Smart and Schneider Charge

Schneider Electric EcoStruxure Power Build Rapsody

Schneider Electric Easergy Studio

mySCADA myPRO Manager

HMS Networks Ewon Flexy 202

Hitachi Energy RTU500 Series Product

How to Eliminate Identity-Based Threats

Under Trump, US Cyberdefense Loses Its Head

SonicWall Urges Immediate Patch for Critical CVE-2025-23006 Flaw Amid Likely Exploitation

Who is DDoSing you? Rivals, probably, or cheesed-off users

New Research: The State of Web Exposure 2025

The evolving landscape of data privacy: Key trends to shape 2025

QakBot-Linked BC Malware Adds Enhanced DNS Tunneling and Remote Access Features

Biz tax rises, inflation and high interest. Why fewer UK tech firms started in 2024

Asus lets processor security fix slip out early, AMD confirms patch in progress

Cisco Fixes Critical Privilege Escalation Flaw in Meeting Management (CVSS 9.9)

TRIPLESTRENGTH Hits Cloud for Cryptojacking, On-Premises Systems for Ransomware

Oracle emits 603 patches, names one it wants you to worry about soon

~ 22 Jan 2025 ~

Trump 'waved a white flag to Chinese hackers' as DHS axed cyber advisory boards

Supply chain attack hits Chrome extensions, could expose millions

Submission to the UNs call for input on the application of digital technologies in the administration of justice

Give users confidence in your digital infrastructure

Microsoft issues out-of-band fix for Windows Server 2022 NUMA glitch

Trump Terminates DHS Advisory Committee Memberships, Disrupting Cybersecurity Review

Silk Road's Dread Pirate Roberts walks free as Trump pardons dark web kingpin

MasterCard DNS Error Went Unnoticed for Years

Call for applications: Information Controls Fellowship Program 2025

Hackers Exploit Zero-Day in cnPilot Routers to Deploy AIRASHI DDoS Botnet

Infosec was literally the last item in Trump's policy plan, yet major changes are likely on his watch

AI Will Write Complex Laws

Discover Hidden Browsing Threats: Free Risk Assessment for GenAI, Identity, Web, and SaaS Risks

President Trump Pardons Silk Road Creator Ross Ulbricht After 11 Years in Prison

Ransomware scum make it personal for <i>Reg</i> readers by impersonating tech support

PlushDaemon APT Targets South Korean VPN Provider in Supply Chain Attack

Oracle Releases January 2025 Patch to Address 318 Flaws Across Major Products