Port 22

~ 5 Mar 2025 ~

Google Rolls Out AI Scam Detection for Android to Combat Conversational Fraud

China's Silk Typhoon, tied to US Treasury break-in, now hammers IT and govt targets

US Charges 12 Alleged Spies in China's Freewheeling Hacker-for-Hire Ecosystem

Chinese APT Lotus Panda Targets Governments With New Sagerunex Backdoor Variants

Identity: The New Cybersecurity Battleground

Apple takes UK government to court over 'backdoor' order

Seven Malicious Go Packages Found Deploying Malware on Linux and macOS Systems

CISA Identifies Five New Vulnerabilities Currently Being Exploited

Leeds United kick card swipers into Row Z after 5-day cyberattack

Silk Typhoon targeting IT supply chain

1 Million Third-Party Android Devices Have a Secret Backdoor for Scammers

Qilin ransomware gang claims attacks on cancer clinic, OB-GYN facility

Undercover miner: how YouTubers get pressed into distributing SilentCryptoMiner as a restriction bypass tool

Kids behaving badly online? Here's what parents can do

How prevention is better than cure

Ransomware thugs threaten Tata Technologies with leak if demands not met

~ 4 Mar 2025 ~

Researchers Link CACTUS Ransomware Tactics to Former Black Basta Affiliates

VMware Security Flaws Exploited in the WildBroadcom Releases Urgent Patches

VMware splats guest-to-hypervisor escape bugs already exploited in wild

Online Presentation of No Escape Tackling Gender-Based Digital Transnational Repression: March 24, 10 am ET

Securing generative AI models on Azure AI Foundry

How New AI Agents Will Transform Credential Stuffing Attacks

Suspected Iranian Hackers Used Compromised Indian Firm's Email to Target U.A.E. Aviation Sector

Over 4,000 ISP IPs Targeted in Brute-Force Attacks to Deploy Info Stealers and Cryptominers

Trojaned AI Tool Leads to Disney Hack

Keysight Ixia Vision Product Family

Hitachi Energy XMC20

Hitachi Energy UNEM/ECST

Hitachi Energy MACH PS700

GMOD Apollo

Edimax IC-7100 IP Camera

Delta Electronics CNCSoft-G2

Carrier Block Load

How Google tracks Android device users before they've even opened an app

Cisco, Hitachi, Microsoft, and Progress Flaws Actively ExploitedCISA Sounds Alarm

Google's March 2025 Android Security Update Fixes Two Actively Exploited Vulnerabilities

It's bad enough we have to turn on cams for meetings, now the person staring at you may be an AI deepfake

Plugging the holes in open banking

So Russia no longer a cyber threat to America?

~ 3 Mar 2025 ~

Hackers Exploit AWS Misconfigurations to Launch Phishing Attacks via SES and WorkMail

Hackers Use ClickFix Trick to Deploy PowerShell-Based Havoc C2 via SharePoint Sites

U.K. ICO Investigates TikTok, Reddit, and Imgur Over Children's Data Protection Practices

Hackers Exploit Paragon Partition Manager Driver Vulnerability in Ransomware Attacks

THN Weekly Recap: Alerts on Zero-Day Exploits, AI Breaches, and Crypto Heists

The New Ransomware Groups Shaking Up 2025

Cybersecurity not the hiring-'em-like-hotcakes role it once was

Microsoft unveils finalized EU Data Boundary as European doubt over US grows

Polish space agency confirms cyberattack

UK watchdog investigates TikTok and Reddit over child data privacy concerns

Vo1d Botnet's Peak Surpasses 1.59M Infected Android TVs, Spanning 226 Countries

Mobile malware evolution in 2024

Martin Rees: Post-human intelligence a cosmic perspective | Starmus highlights

Governments can't seem to stop asking for secret backdoors

Cyber Forensic Expert in 2,000+ Cases Faces FBI Probe

US Cyber Command reportedly pauses cyberattacks on Russia

~ 2 Mar 2025 ~

C++ creator calls for help to defend programming language from 'serious attacks'

~ 1 Mar 2025 ~

Mozilla Updates Firefox Terms Again After Backlash Over Broad Data License Language

The Trump Administration Is Deprioritizing Russia as a Cyber Threat

~ 28 Feb 2025 ~

Amnesty Finds Cellebrites Zero-Day Used to Unlock Serbian Activists Android Phone

Friday Squid Blogging: Eating Bioluminescent Squid

Notorious Malware, Spam Host Prospero Moves to Kaspersky Lab

RDP: a Double-Edged Sword for IT Teams Essential Yet Exploitable

5,000 Phishing PDFs on 260 Domains Distribute Lumma Stealer via Fake CAPTCHAs

Ransomware criminals love CISA's KEV list and that's a bug, not a feature

Microsoft Exposes LLMjacking Cybercriminals Behind Azure AI Abuse Scheme

12,000+ API Keys and Passwords Found in Public Datasets Used for LLM Training

Sticky Werewolf Uses Undocumented Implant to Deploy Lumma Stealer in Russia and Belarus

Threat Report H2 2024: Infostealer shakeup, new attack vector for mobile, and Nomani

Microsoft names alleged credential-snatching 'Azure Abuse Enterprise' operators

The SOC files: Chasing the web shell

~ 27 Feb 2025 ~

Feds: Army soldier accused of AT&T heist Googled can hacking be treason, defecting to Russia

FBI officially fingers North Korea for $1.5B Bybit crypto-burglary

Silver Fox APT Uses Winos 4.0 Malware in Cyber Attacks Against Taiwanese Organizations

Space Pirates Targets Russian IT Firms With New LuckyStrike Agent Malware

89% of Enterprise GenAI Usage Is Invisible to Organizations Exposing Critical Security Risks, New Report Reveals

New TgToxic Banking Trojan Variant Evolves with Anti-Analysis Upgrades

Emergent Misalignment in LLMs

PolarEdge Botnet Exploits Cisco and Other Flaws to Hijack ASUS, QNAP, and Synology Devices

Bybit Hack Traced to Safe{Wallet} Supply Chain Attack Exploited by North Korean Hackers

Schneider Electric Communication Modules for Modicon M580 and Quantum Controllers

Elon Musks Starlink Is Keeping Modern Slavery Compounds Online

Bernhard Scholkopf: Is AI intelligent? | Starmus highlights

Does terrible code drive you mad? Wait until you see what it does to OpenAI's GPT-4o

U.S. Soldier Charged in AT&T Hack Searched Can Hacking Be Treason

Wallbleed vulnerability unearths secrets of China's Great Firewall 125 bytes at a time

~ 26 Feb 2025 ~

With millions upon millions of victims, scale of unstoppable info-stealer malware laid bare

Bybit declares war on North Korea's Lazarus crime-ring to regain $1.5B stolen from wallet

Hackers Exploited Krpano Framework Flaw to Inject Spam Ads on 350+ Websites

Leaked Black Basta Chat Logs Reveal $107M Ransom Earnings and Internal Power Struggles

Qualcomm pledges 8 years of security updates for Android kit using its chips (YMMV)

Rethinking remote assistance security in a Zero Trust world

SOC 3.0 - The Evolution of the SOC and How AI is Empowering Human Talent

New Linux Malware Auto-Color Grants Hackers Full Remote Access to Compromised Systems

Three Password Cracking Techniques and How to Defend Against Them

CERT-UA Warns of UAC-0173 Attacks Deploying DCRat to Compromise Ukrainian Notaries

Malicious PyPI Package "automslc" Enables 104K+ Unauthorized Deezer Music Downloads

Signal will withdraw from Sweden if encryption-busting laws take effect

An iCloud Backdoor Would Make Our Phones Less Safe

CISA Adds Microsoft and Zimbra Flaws to KEV Catalog Amid Active Exploitation

Exploits and vulnerabilities in Q4 2024