Port 22

~ 6 Feb 2025 ~

Ransomware Extortion Drops to $813.5M in 2024, Down from $1.25B in 2023

AIs and Robots Should Sound Robotic

Trimble Cityworks

Schneider Electric EcoStruxure Power Monitoring Expert (PME)

Schneider Electric EcoStruxure

ABB Drive Composer

SparkCat Malware Uses OCR to Extract Crypto Wallet Recovery Phrases from Images

The Evolving Role of PAM in Cybersecurity Leadership Agendas for 2025

North Korean APT Kimsuky Uses forceCopy Malware to Steal Browser-Stored Credentials

Top 3 Ransomware Threats Active in 2025

Cisco Patches Critical ISE Vulnerabilities Enabling Root CmdExec and PrivEsc

DOGE Teen Owns Tesla.Sexy LLC and Worked at Startup That Has Hired Convicted Hackers

Democrats demand to know WTF is up with that DOGE server on OPM's network

Robocallers who called the FCC pretending to be from the FCC land telco in trouble

~ 5 Feb 2025 ~

Mixing Rust and C in Linux likened to cancer by kernel maintainer

Musky minion granted 'read-only' access to federal payment systems

DOGE latest: Citrix supremo has 'read-only' access to US Treasury payment system

The Collapse of USAID Is Already Fueling Human Trafficking and Slavery at Scammer Compounds

Netgear fixes critical bugs as Five Eyes warn about break-ins at the edge

Cross-Platform JavaScript Stealer Targets Crypto Wallets in New Lazarus Group Campaign

US cranks up espionage charges against ex-Googler accused of trade secrets heist

Cybercriminals Use Go Resty and Node Fetch in 13 Million Password Spraying Attempts

Despite Catastrophic Hacks, Ransomware Payments Dropped Dramatically Last Year

Silent Lynx Using PowerShell, Golang, and C++ Loaders in Multi-Stage Cyberattacks

New Veeam Flaw Allows Arbitrary Code Execution via Man-in-the-Middle Attack

On Generative AI Security

Investors, Trump and the Illuminati: What the Nigerian prince scams became in 2024

Navigating the Future: Key IT Vulnerability Management Trends

Patch or perish: How organizations can master vulnerability management

AsyncRAT Campaign Uses Python Payloads and TryCloudflare Tunnels for Stealth Attacks

Take my money: OCR crypto stealers in Google Play and App Store

Take my money: OCR crypto stealers in Google Play and App Store

CISA Adds Four Actively Exploited Vulnerabilities to KEV Catalog, Urges Fixes by Feb 25

~ 4 Feb 2025 ~

Google: How to make any AMD Zen CPU always generate 4 as a random number

Poisoned Go programming language package lay undetected for 3 years

Whos Behind the Seized Forums Cracked & Nulled?

Grubhub serves up security incident with a side of needing to change your password

US accuses Canadian math prodigy of $65M crypto scheme

Malicious Go Package Exploits Module Mirror Caching for Persistent Remote Access

Roeland Nusselder: AI will eat all our energy, unless we make it tiny | Starmus highlights

Russian Cybercrime Groups Exploiting 7-Zip Flaw to Bypass Windows MotW Protections

North Korean Hackers Deploy FERRET Malware via Fake Job Interviews on macOS

Deepfakes and the 2024 US Election

Western Telematic Inc NPS Series, DSM Series, CPM Series

Schneider Electric Web Designer for Modicon

Schneider Electric Pro-face GP-Pro EX and Remote HMI

Schneider Electric Modicon M580 PLCs, BMENOR2200H and EVLink Pro AC

Schneider Electric Modicon M340 and BMXNOE0100/0110, BMXNOR0200H

Rockwell Automation 1756-L8zS3 and 1756-L3 and 1756-L3

Elber Communications Equipment

AutomationDirect C-more EA9 HMI

Cyberattack on NHS causes hospitals to miss cancer care targets

Abandoned AWS S3 buckets can be reused in supply-chain attacks that would make SolarWinds look 'insignificant'

Watch Out For These 8 Cloud Security Shifts in 2025

Taiwan Bans DeepSeek AI Over National Security Concerns, Citing Data Leakage Risks

UK govt must learn fast and let failing projects die young

Meet the Hired Guns Who Make Sure School Cyberattacks Stay Hidden

AMD SEV-SNP Vulnerability Allows Malicious Microcode Injection with Admin Access

Google patches odd Android kernel security bug amid signs of targeted exploitation

Microsoft Patches Critical Azure AI Face Service Vulnerability with CVSS 9.9 Score

Google Patches 47 Android Security Flaws, Including Actively Exploited CVE-2024-53104

Microsoft SharePoint Connector Flaw Could've Enabled Credential Theft Across Power Platform

Why digital resilience is critical to banks

~ 3 Feb 2025 ~

TSAs airport facial-recog tech faces audit probe

Hear from Microsoft Security experts at these top cybersecurity events in 2025

768 CVEs Exploited in 2024, Reflecting a 20% Increase from 639 in 2023

PyPI Introduces Archival Status to Alert Users About Unmaintained Python Packages

Journalists and Civil Society Members Using WhatsApp Targeted by Paragon Spyware

THN Weekly Recap: Top Cybersecurity Threats, Tools and Tips [27 February]

2 officers bailed as anti-corruption unit probes data payouts to N Irish cops

Coyote Malware Expands Reach: Now Targets 1,030 Sites and 73 Financial Institutions

What Is Attack Surface Management?

Privacy Commissioner warns the John Smiths of the world can acquire digital doppelgangers

Crazy Evil Gang Targets Crypto with StealC, AMOS, and Angel Drainer Malware

Medical monitoring machines spotted stealing patient data, users warned to pull the plug ASAP

~ 2 Feb 2025 ~

What does it mean to build in security from the ground up?

Gilmore Girls fans nabbed as Eurocops dismantle two major cybercrime forums

~ 1 Feb 2025 ~

Foreign Hackers Are Using Googles Gemini in Attacks on the US

U.S. and Dutch Authorities Dismantle 39 Domains Linked to BEC Fraud Network

BeyondTrust Zero-Day Breach Exposes 17 SaaS Customers via Compromised API Key

Meta Confirms Zero-Click WhatsApp Spyware Attack Targeting 90 Journalists, Activists

Malvertising Scam Uses Fake Google Ads to Hijack Microsoft Advertising Accounts

~ 31 Jan 2025 ~

Friday Squid Blogging: On Squid Brains

Job posting: Systems & Sec Tech Lead

FBI, Dutch Police Disrupt Manipulaters Phishing Gang

DeepSeeks Safety Guardrails Failed Every Test Researchers Threw at Its AI Chatbot

The Big Short on Cybersecurity

How scammers are exploiting DeepSeek's rise

CISA and FDA Warn of Critical Backdoor in Contec CMS8000 Patient Monitors

Top 5 AI-Powered Social Engineering Attacks

Italy Bans Chinese DeepSeek AI Over Data Privacy and Ethical Concerns

Google Bans 158,000 Malicious Android App Developer Accounts in 2024

One policy to rule them all

Another banner year for ransomware gangs despite takedowns by the cops

Broadcom Patches VMware Aria Flaws Exploits May Lead to Credential Theft

Google to Iran: Yes, we see you using Gemini for phishing and scripting. We're onto you

~ 30 Jan 2025 ~

Data resilience and data portability

VMware plugs steal-my-credentials holes in Cloud Foundation

Trump admin's purge of US cyber advisory boards was 'foolish,' says ex-Navy admiral

Infrastructure Laundering: Blending in with the Cloud