Port 22

~ 17 Apr 2025 ~

Microsofts Secure by Design journey: One year of success

New Jersey Sues Discord for Allegedly Failing to Protect Children

Critical Erlang/OTP SSH Vulnerability (CVSS 10.0) Allows Unauthenticated Code Execution

Node.js Malware Campaign Targets Crypto Users with Fake Binance and TradingView Installers

Yokogawa Recorder Products

Schneider Electric Trio Q Licensed Data Radio

Schneider Electric Sage Series

Schneider Electric ConneXium Network Manager

CISA Flags Actively Exploited Vulnerability in SonicWall SMA Devices

Brit soldiers tune radio waves to fry drone swarms for pennies

This College Protester Isnt Real. Its an AI-Powered Undercover Bot for Cops

Apple Patches Two Actively Exploited iOS Flaws Used in Sophisticated Targeted Attacks

CapCut copycats are on the prowl

IronHusky updates the forgotten MysterySnail RAT to target Russia and Mongolia

Whistleblower describes DOGE IT dept rampage at America's labor watchdog

~ 16 Apr 2025 ~

Experts Uncover Four New Privilege Escalation Flaws in Windows Task Scheduler

Free Blue Screens of Death for Windows 11 24H2 users

Signalgate chats vanish from CIA chief phone

Stupid and Dangerous: CISA Funding Chaos Threatens Essential Cybersecurity Program

Identifying the cyber risks that matter

Google Blocked 5.1B Harmful Ads and Suspended 39.2M Advertiser Accounts in 2024

Gamma AI Platform Abused in Phishing Chain to Spoof Microsoft SharePoint Logins

From Third-Party Vendors to U.S. Tariffs: The New Cyber Risks Facing Supply Chains

CVE program gets last-minute funding from CISA and maybe a new home

New BPFDoor Controller Enables Stealthy Lateral Movement in Linux Server Attacks

Product Walkthrough: A Look Inside Wing Security's Layered SaaS Identity Defense

CVE Program Almost Unfunded

Law firm 'didn't think' data theft was a breach, says ICO. Now it's nursing a 60K fine

Chinese Android Phones Shipped with Fake WhatsApp, Telegram Apps Targeting Crypto Users

Russians lure European diplomats into malware trap with wine-tasting invite

JUICYJAM:

JUICYJAM: How Thai Authorities Use Online Doxxing to Suppress Dissent

Cyber Signals Issue 9 | AI-powered deception: Emerging fraud threats and countermeasures

U.S. Govt. Funding for MITRE's CVE Ends April 16, Cybersecurity Community on Alert

Streamlining detection engineering in security operation centers

Theyre coming for your data: What are infostealers and how do I stay safe?

Guess what happens when ransomware fiends find 'insurance' 'policy' in your files

Funding Expires for Key Cyber Vulnerability Database

Super Bowl 2025- Behind the Scenes of the Cybersecurity Blitz

Uncle Sam abruptly turns off funding for CVE program. Yes, that CVE program

~ 15 Apr 2025 ~

Heres What Happened to Those SignalGate Messages

Now 1.6M people had SSNs, life chapter and verse stolen from insurance IT biz

Chinese Hackers Target Linux Systems Using SNOWLIGHT Malware and VShell Tool

Suspected 4chan Hack Could Expose Longtime, Anonymous Admins

Critical Apache Roller Vulnerability (CVSS 10.0) Enables Unauthorized Session Persistence

4chan, the 'internets litter box,' appears to have been pillaged by rival forum

Malicious PyPI Package Targets MEXC Trading API to Steal Credentials and Redirect Orders

China names alleged US snoops over Asian Winter Games attacks

All right, you can have one: DOGE access to Treasury IT OK'd judge

Threat actors misuse Node.js to deliver malware and other malicious payloads

Majority of Browser Extensions Can Access Sensitive Enterprise Data, New Report Finds

Slopsquatting

Transforming security with Microsoft Security Exposure Management initiatives

Crypto Developers Targeted by Python Malware Disguised as Coding Challenges

Chinese snoops use stealth RAT to backdoor US orgs still active last week

ActiveX blocked by default in Microsoft 365 because remote code execution is bad, OK?

Siemens SIMOCODE, SIMATIC, SIPLUS, SIDOOR, SIWAREX

Siemens Mendix Runtime

Siemens Industrial Edge Device Kit

National Instruments LabVIEW

Mitsubishi Electric Europe B.V. smartRTU

Lantronix Xport

Growatt Cloud Applications

Delta Electronics COMMGR

ABB M2M Gateway

Where it Hertz: Customer data driven off in Cleo attacks

Gladinets Triofox and CentreStack Under Active Exploitation via Critical RCE Vulnerability

Meta Resumes E.U. AI Training Using Public User Data After Regulator Approval

EU gives staff 'burner phones, laptops' for US visits

Trump Revenge Tour Targets Cyber Leaders, Elections

~ 14 Apr 2025 ~

Don't delete that mystery empty folder. Windows put it there as a security fix

ResolverRAT Campaign Targets Healthcare, Pharma via Phishing and DLL Side-Loading

New SSL/TLS cert to live no longer than 47 days by 2029

Microsofts Recall AI Tool Is Making an Unwelcome Return

Cyber congressman demands answers before CISA gets cut down to size

Phishing Campaigns Use Real-Time Checks to Validate Victim Emails Before Credential Theft

Weekly Recap: Windows 0-Day, VPN Exploits, Weaponized AI, Hijacked Antivirus and More

Upcoming Speaking Engagements

Explore how to secure AI by attending our Learn Live Series

Cybersecurity in the AI Era: Evolve Faster Than the Threats or Get Left Behind

Pakistan-Linked Hackers Expand Targets in India with CurlBack RAT and Spark RAT

China Sort of Admits to Being Behind Volt Typhoon

TraderTraitor: The Kings of the Crypto Heist

The Most Dangerous Hackers Youve Never Heard Of

Smishing Triad: The Scam Group Stealing the Worlds Riches

Gamaredon: The Turncoat Spies Relentlessly Hacking Ukraine

CyberAv3ngers: The Iranian Saboteurs Hacking Water and Gas Systems Worldwide

Brass Typhoon: The Chinese Hacking Group Lurking in the Shadows

Black Basta: The Fallen Ransomware Gang That Lives On

Official abuse of state security has always been bad, now it's horrifying

Attacks on the education sector are surging: How can cyber-defenders respond?

CIO and digi VP to depart UK retail giant Asda as Walmart divorce woes settle

Old Fortinet flaws under attack with new method its patch didn't prevent

China reportedly admitted directing cyberattacks on US infrastructure

PentestGPT AI-Powered Penetration Testing Assistant

~ 13 Apr 2025 ~

Hacktivism is back but don't be fooled, it's often state-backed goons in masks

Homeland Security Email Tells a US Citizen to 'Immediately' Self-Deport

~ 12 Apr 2025 ~

AI can't stop making up software dependencies and sabotaging everything

China Secretly (and Weirdly) Admits It Hacked US Infrastructure

~ 11 Apr 2025 ~

Fortinet Warns Attackers Retain FortiGate Access Post-Patching via SSL-VPN Symlink Exploit