Port 22

~ 18 Mar 2025 ~

China-Linked MirrorFace Deploys ANEL and AsyncRAT in New Cyber Espionage Operation

MirrorFace updates toolset, expands targeting to Europe

BADBOX 2.0 Botnet Infects 1 Million Android Devices for Ad Fraud and Proxy Abuse

Microsoft isn't fixing 8-year-old shortcut exploit abused for spying

Google acquisition target Wiz links fresh supply chain attack to 23K pwned GitHub repos

Microsoft Warns of StilachiRAT: A Stealthy RAT Targeting Credentials and Crypto Wallets

Schneider Electric EcoStruxure Power Automation System User Interface (EPAS-UI)

Schneider Electric EcoStruxure Power Automation System

Schneider Electric EcoStruxure Panel Server

Schneider Electric ASCO 5310/5350 Remote Annunciator

Rockwell Automation Lifecycle Services with VMware

Is Security Human Factors Research Skewed Towards Western Ideas and Habits?

UK wants dirt on data brokers before criminals get there first

Operation AkaiRy: MirrorFace invites Europe to Expo 2025 and revives ANEL backdoor

Extortion crew threatened to inform Edward Snowden (?!) if victim didn't pay up

'Dead simple' hijacking hole in Apache Tomcat 'now actively exploited in the wild'

~ 17 Mar 2025 ~

Court filing: DOGE aide broke Treasury policy by emailing unencrypted database

Apache Tomcat Vulnerability Actively Exploited Just 30 Hours After Public Disclosure

Amazon boots local Alexa processing: All your voice requests shipped to the cloud

Unpatched Edimax Camera Flaw Exploited for Mirai Botnet Attacks Since Last Year

Cybercriminals Exploit CSS to Evade Spam Filters and Track Email Users' Actions

StilachiRAT analysis: From system reconnaissance to cryptocurrency theft

THN Weekly Recap: Router Hacks, PyPI Attacks, New Ransomware Decryptor, and More

SANS Institute Warns of Novel Cloud-Native Ransomware Attacks

GitHub Action Compromise Puts CI/CD Secrets at Risk in Over 23,000 Repositories

Improvements in Brute Force Attacks

GitHub supply chain attack spills secrets from 23,000 projects

UK government to open 16B IT services competition after 6-month delay

AI's biggest surprises of 2024 | Unlocked 403 cybersecurity podcast (S2E1)

Microsoft wouldn't look at a bug report without a video. Researcher maliciously complied

~ 16 Mar 2025 ~

FCC stands up Council on National Security to fight China in ways that CISA used to

~ 15 Mar 2025 ~

Malicious PyPI Packages Stole Cloud TokensOver 14,100 Downloads Before Removal

End-to-End Encrypted Texts Between Android and iPhone Are Coming

~ 14 Mar 2025 ~

ClickFix: How to Infect Your PC in Three Easy Steps

Friday Squid Blogging: SQUID Band

Alleged Israeli LockBit Developer Rostislav Panev Extradited to U.S. for Cybercrime Charges

GSMA Confirms End-to-End Encryption for RCS, Enabling Secure Cross-Platform Messaging

Live Ransomware Demo: See How Hackers Breach Networks and Demand a Ransom

Why Most Microsegmentation Projects FailAnd How Andelyn Biosciences Got It Right

Upcoming Speaking Engagements

Apple's alleged UK encryption battle sparks political and privacy backlash

New MassJacker Malware Targets Piracy Users, Hijacking Cryptocurrency Transactions

OBSCURE#BAT Malware Uses Fake CAPTCHA Pages to Deploy Rootkit r77 and Evade Detection

TP-Link Router Botnet

New kids on the ransomware block channel Lockbit to raid Fortinet firewalls

When IT meets OT: Cybersecurity for the physical world

A New Era of Attacks on Encryption Is Starting to Heat Up

~ 13 Mar 2025 ~

Dems ask federal agencies for reassurance DOGE isn't feeding data into AI willy-nilly

Microsoft Warns of ClickFix Phishing Campaign Targeting Hospitality Sector via Fake Booking[.]com Emails

North Koreas ScarCruft Deploys KoSpy Malware, Spying on Android Users via Fake Utility Apps

Google says it's rolling out a fix for stricken Chromecasts

GitHub Uncovers New ruby-saml Vulnerabilities Allowing Account Takeover Attacks

Future-Proofing Business Continuity: BCDR Trends and Challenges for 2025

RIP Mark Klein

How MSRC coordinates vulnerability research and disclosure while building community

That 'angry guest' email from Booking.com? It's a scam, not a 1-star review

Phishing campaign impersonates Booking .com, delivers a suite of credential-stealing malware

CISA: We didn't fire our red team, we just unhired a bunch of them

DeepSeek can be gently persuaded to spit out malware code

Meta Warns of FreeType Vulnerability (CVE-2025-27363) With Active Exploitation Risk

WARNING: Expiring Root Certificate May Disable Firefox Add-Ons, Security Features, and DRM Playback

Sungrow iSolarCloud Android App WiNet Firmware

Siemens Tecnomatix Plant Simulation

Siemens Teamcenter Visualization and Tecnomatrix Plant Simulation

Siemens SiPass integrated AC5102/ACC-G2 and ACC-AP

Siemens SINEMA Remote Connect Server

Siemens SINEMA Remote Connect Client

Siemens SINAMICS S200

Siemens SIMATIC S7-1500 TM MFP

Siemens SIMATIC IPC Family, ITP1000, and Field PGs

Siemens SCALANCE M-800 and SC-600 Families

Siemens SCALANCE LPE9403

Siemens OPC UA

Head Mare and Twelve join forces to attack Russian entities

People Are Scared: Inside CISA as It Reels From Trumps Purge

Medusa ransomware affiliate tried triple extortion scam up from the usual double demand

Get off that old Firefox by Friday or you'll be sorry, says Moz

~ 12 Mar 2025 ~

Chinese Hackers Breach Juniper Networks Routers With Custom Backdoors and Rootkits

Over 400 IPs Exploiting Multiple SSRF Vulnerabilities in Coordinated Cyber Attack

The Violent Rise of No Lives Matter

Pentesters: Is AI Coming for Your Role?

URGENT: Microsoft Patches 57 Security Flaws, Including 6 Actively Exploited Zero-Days

Expired Juniper routers find new life as Chinese spy hubs

This is the FBI, open up. China's Volt Typhoon is on your network

China, Russia, Iran, and North Korea Intelligence Sharing

UK must pay cyber pros more than its Prime Minister, top civil servant says

Apple Releases Patch for WebKit Zero-Day Vulnerability Exploited in Targeted Attacks

Incident response analyst report 2024

CISA worker says 100-strong Red Team fired after DOGE cancelled contract

Choose your own Patch Tuesday adventure: Start with six zero day fixes, or six critical flaws

~ 11 Mar 2025 ~

Microsoft: 6 Zero-Days in March 2025 Patch Tuesday

Blind Eagle Hacks Colombian Institutions Using NTLM Flaw, RATs and GitHub-Based Attacks

Ballista Botnet Exploits Unpatched TP-Link Vulnerability, Infects Over 6,000 Devices

Silk Typhoon Hackers Indicted

'Uber for nurses' exposes 86k+ medical records, PII in open S3 bucket for months

Your Risk Scores Are Lying: Adversarial Exposure Validation Exposes Real Threats

Alleged Co-Founder of Garantex Arrested in India

FTCs $25.5M scam refund treats victims to $34 each

Steganography Explained: How XWorm Hides Inside Images

New XCSSET malware adds new obfuscation, persistence techniques to infect Xcode projects