Port 22

~ 26 Mar 2025 ~

US defense contractor cops to sloppy security, settles after infosec lead blows whistle

EncryptHub Exploits Windows Zero-Day to Deploy Rhadamanthys and StealC Malware

RedCurl Shifts from Espionage to Ransomware with First-Ever QWCrypt Deployment

SignalGate Isn't About Signal

Malicious npm Package Modifies Local 'ethers' Library to Launch Reverse Shell Attacks

Files stolen from NSW court system, including restraining orders for violence

Sparring in the Cyber Ring: Using Automated Pentesting to Build Resilience

How PAM Mitigates Insider Threats: Preventing Data Breaches, Privilege Misuse, and More

Credible nerd says stop using atop, doesn't say why, everyone panics

Shifting the sands of RansomHubs EDRKillShifter

You will always remember this as the day you finally caught FamousSparrow

Hackers Using E-Crime Tool Atlantis AIO for Credential Stuffing on 140+ Platforms

AI Data Poisoning

NCSC taps influencers to make 2FA go viral

Zero-Day Alert: Google Releases Chrome Patch for Exploit Used in Russian Espionage Attacks

New Security Flaws Found in VMware Tools and CrushFTP High Risk, No Workaround

~ 25 Mar 2025 ~

Operation ForumTroll: APT attack with Google Chrome zero-day exploit chain

Job Opportunity Systems and Security Administrator

Researchers Uncover ~200 Unique C2 Domains Linked to Raspberry Robin Access Broker

There are perhaps 10,000 reasons to doubt Oracle Cloud's security breach denial

Chinese Hackers Breach Asian Telecom, Remain Undetected for Over 4 Years

AI-Powered SaaS Security: Keeping Pace with an Expanding Attack Surface

Hackers Use .NET MAUI to Target Indian and Chinese Users with Fake Banking, Social Apps

Infosec pro Troy Hunt HasBeenPwned in Mailchimp phish

INTERPOL Arrests 306 Suspects, Seizes 1,842 Devices in Cross-Border Cybercrime Bust

Rockwell Automation Verve Asset Manager

Rockwell Automation 440G TLS-Z

Inaba Denki Sangyo CHOCO TEI WATCHER Mini

ABB RMC-100

Report on Paragon Spyware

You know that generative AI browser assistant extension is probably beaming everything to the cloud, right?

Financial cyberthreats in 2024

VanHelsing ransomware emerges to put a stake through your Windows heart

Hm, why are so many DrayTek routers stuck in a bootloop?

Public-facing Kubernetes clusters at risk of takeover thanks to Ingress-Nginx flaw

OTF, which backs Tor, Let's Encrypt and more, sues to save funding from Trump cuts

Critical Ingress NGINX Controller Vulnerability Allows RCE Without Authentication

~ 24 Mar 2025 ~

Top Trump officials text secret Yemen airstrike plans to journo in Signal SNAFU

Top Trump officials text classified Yemen airstrike plans to journo in Signal SNAFU

Microsoft Adds Inline Data Protection to Edge for Business to Block GenAI Data Leaks

FCC on the prowl for Huawei and other blocked Chinese makers in America

How to Delete Your Data From 23andMe

As nation-state hacking becomes 'more in your face,' are supply chains secure?

VanHelsing RaaS Launch: 3 Victims, $5K Entry Fee, Multi-OS, and Double Extortion Tactics

How to Enter the US With Your Digital Privacy Intact

Using Starlink Wi-Fi in the White House Is a Slippery Slope for US Federal IT

THN Weekly Recap: GitHub Supply Chain Attack, AI Malware, BYOVD Tactics, and More

VSCode Marketplace Removes Two Extensions Deploying Early-Stage Ransomware

How to Balance Password Security Against User Experience

AI agents swarm Microsoft Security Copilot

Microsoft unveils Microsoft Security Copilot agents and new protections for AI

Critical Next.js Vulnerability Allows Attackers to Bypass Middleware Authorization Checks

23andMe's genes not strong enough to avoid Chapter 11

Is Washington losing its grip on crypto, or is it a calculated pivot to digital dominance?

More Countries are Demanding Back-Doors to Encrypted Apps

Microsoft tastes the unexpected consequences of tariffs on time

Trumps Aggression Sours Europe on US Cloud Giants

Mobsters now overlap with cybercrime gangs and use AI for evil, Europol warns

~ 23 Mar 2025 ~

China bans compulsory facial recognition and its use in private spaces like hotel rooms

Oracle Cloud says it's not true someone broke into its login servers and stole data

Ex-NSA boss: Good news. Election security focus helped dissuade increase in Russian meddling with US

GitHub Supply Chain Breach: Coinbase Attack Exposes 218 Repositories, Leaks CI/CD Secrets

~ 22 Mar 2025 ~

U.S. Treasury Lifts Tornado Cash Sanctions Amid North Korea Money Laundering Probe

~ 21 Mar 2025 ~

Friday Squid Blogging: A New Explanation of Squid Camouflage

UAT-5918 Targets Taiwan's Critical Infrastructure Using Web Shells and Open-Source Tools

Arrests in Tap-to-Pay Scheme Powered by Phishing

Medusa Ransomware Uses Malicious Driver to Disable Anti-Malware with Stolen Certificates

My Writings Are in the LibGen AI Training Corpus

China-Linked APT Aquatic Panda: 10-Month Campaign, 7 Global Targets, 5 Malware Families

10 Critical Network Pentest Findings IT Teams Overlook

Kaspersky Links Head Mare to Twelve, Targeting Russian Entities via Shared C2 Servers

NCSC Releases Post-Quantum Cryptography Timeline

Ongoing Cyber Attacks Exploit Critical Vulnerabilities in Cisco Smart Licensing Utility

How to Avoid US-Based Digital Servicesand Why You Might Want To

Threat landscape for industrial automation systems in Q4 2024

AdTech CEO whose products detected fraud jailed for financial fraud

Paragon spyware deployed against journalists and activists, Citizen Lab claims

Capital One cracker could be sent back to prison after judges rule she got off too lightly

~ 20 Mar 2025 ~

Dept of Defense engineer took home top-secret docs, booked a fishing trip to Mexico then the FBI showed up

YouTube Game Cheats Spread Arcane Stealer Malware to Russian-Speaking Users

Veeam and IBM Release Patches for High-Risk Flaws in Backup and AIX Systems

Infoseccers criticize Veeam over critical RCE vulnerability and a failing blacklist

How to Protect Your Business from Cyber Threats: Mastering the Shared Responsibility Model

Six Governments Likely Use Israeli Paragon Spyware to Hack IM Apps and Harvest Data

Why Continuous Compliance Monitoring Is Essential For IT Managed Service Providers

Critical GitHub Attack

CISA Adds NAKIVO Vulnerability to KEV Catalog Amid Active Exploitation

Too many software supply chain defense bibles? Boffins distill advice

The post-quantum cryptography apocalypse will be televised in 10 years, says UK's NCSC

SMA Sunny Portal

Siemens Simcenter Femap

Schneider Electric EnerlinX IFE and eIFE

Schneider Electric EcoStruxure

CERT-UA Warns: Dark Crystal RAT Targets Ukrainian Defense via Malicious Signal Messages

Operation FishMedley

Low-Cost Drone Add-Ons From China Let Anyone With a Credit Card Turn Toys Into Weapons of War

DOGE to Fired CISA Staff: Email Us Your Personal Data

~ 19 Mar 2025 ~

Hackers Exploit Severe PHP Flaw to Deploy Quasar RAT and XMRig Miners

Attackers swipe data of 500k+ people from Pennsylvania teachers union

Names, bank info, and more spills from top sperm bank