Port 22

~ 6 May 2025 ~

US Border Agents Are Asking for Help Taking Photos of Everyone Entering the Country by Car

CISA slammed for role in 'censorship industrial complex' as budget faces possible $500M cut

~ 5 May 2025 ~

Wormable AirPlay Flaws Enable Zero-Click RCE on Apple Devices via Public Wi-Fi

Commvault CVE-2025-34028 Added to CISA KEV After Active Exploitation Confirmed

Signal Clone Used by Mike Waltz Pauses Service After Reports It Got Hacked

Signal chat app clone used by Signalgate's Waltz was apparently an insecure mess

Weekly Recap: Nation-State Hacks, Spyware Alerts, Deepfake Malware, Supply Chain Backdoors

Perfection is a Myth. Leverage Isn't: How Small Teams Can Secure Their Google Workspace

Another Move in the Deepfake Creation/Detection Arms Race

Microsoft partners with Global Anti-Scam Alliance to fight cybercrime

Golden Chickens Deploy TerraStealerV2 to Steal Browser Credentials and Crypto Wallet Data

Security Researchers Warn a Widely Used Open Source Tool Poses a 'Persistent' Risk to the US

Trump promises protection for TikTok, for which he has a warm spot in my heart

Indias chipmaking ambitions hurt by Zohos no-go and Adani unease

~ 4 May 2025 ~

Microsoft tries to knife passwords once and for all - at least for consumers

RSAC wrap: AI and China on everything, everywhere, all at once

Altman's eyeball-scanning biometric blockchain orbs officially come to America

~ 3 May 2025 ~

Malicious Go Modules Deliver Disk-Wiping Linux Malware in Advanced Supply Chain Attack

Iranian Hackers Maintain 2-Year Access to Middle East CNI via VPN Flaws and Malware

U.S. Charges Yemeni Hacker Behind Black Kingdom Ransomware Targeting 1,500 Systems

Hacking Spree Hits UK Retail Giants

~ 2 May 2025 ~

Friday Squid Blogging: Pyjama Squid

Mike Waltz Has Somehow Gotten Even Worse at Using Signal

Privacy for Agentic AI

TikTok Slammed With 530 Million GDPR Fine for Sending E.U. Data to China

Disney Slack attack wasn't Russian protesters, just a Cali dude with malware

How to Automate CVE and Vulnerability Advisory Response with Tines

Generative AI makes fraud fluent from phishing lures to fake lovers

MintsLoader Drops GhostWeaver via Phishing, ClickFix Uses DGA, TLS for Stealth Attacks

RSAC 2025 wrap-up Week in security with Tony Anscombe

Three Brits charged over 'active shooter threats' swattings in US, Canada

Microsoft Sets Passkeys Default for New Accounts; 15 Billion Users Gain Passwordless Support

NCSC Guidance on Advanced Cryptography

British govt agents step in as Harrods becomes third mega retailer under cyberattack

xAI Dev Leaks API Key for Private SpaceX, Tesla LLMs

~ 1 May 2025 ~

Dems look to close the barn door after top DOGE dog has bolted

Fake Security Plugin on WordPress Enables Remote Admin Access for Attackers

Healthcare group Ascension discloses second cyberattack on patients' data

How Amazon red-teamed Alexa+ to keep your kids from ordering 50 pizzas

How Amazon red-teamed Alexa+ to keep your kids from ordering 50 pizzas

Analyzing CVE-2025-31191: A macOS security-scoped bookmarks-based sandbox escape

Why top SOC teams are shifting to Network Detection and Response

Claude AI Exploited to Operate 100+ Fake Political Personas in Global Influence Campaign

US as a Surveillance State

Pushing passkeys forward: Microsofts latest updates for simpler, safer sign-ins

New Research Reveals: 95% of AppSec Fixes Dont Reduce Risk

DarkWatchman, Sheriff Malware Hit Russia and Ukraine with Stealth and Nation-Grade Tactics

Think Twice Before Creating That ChatGPT Action Figure

Commvault Confirms Hackers Exploited CVE-2025-3928 as Zero-Day in Azure Breach

Chris Krebs loses Global Entry membership amid Trump feud

KUNBUS GmbH Revolution Pi

SonicWall Confirms Active Exploitation of Flaws Affecting Multiple Appliance Models

Data watchdog will leave British Library alone further probes 'not worth our time'

North Korea Stole Your Job

~ 30 Apr 2025 ~

Ex-NSA cyber-boss: AI will soon be a great exploit coder

Alleged Scattered Spider Member Extradited to U.S.

Researchers Demonstrate How MCP Prompt Injection Can Be Used for Both Attack and Defense

AI Code Hallucinations Increase the Risk of Package Confusion Attacks

Ex-CISA chief decries cuts as Trump demands loyalty above all else

Maryland man pleads guilty to outsourcing US gov work to North Korean dev in China

14 secure coding tips: Learn from the experts at Microsoft Build

[Free Webinar] Guide to Securing Your Entire Identity Lifecycle Against AI-Powered Threats

Chinese Hackers Abuse IPv6 SLAAC for AitM Attacks via Spellbinder Lateral Movement Tool

Customer Account Takeovers: The Multi-Billion Dollar Problem You Dont Know About

Nebulous Mantis Targets NATO-Linked Entities with Multi-Stage Malware Attacks

RansomHub Went Dark April 1; Affiliates Fled to Qilin, DragonForce Claimed Control

FBI steps in amid rash of politically charged swattings

Meta Launches LlamaFirewall Framework to Stop AI Jailbreaks, Injections, and Insecure Code

WhatsApp Case Against NSO Group Progressing

Indian Court Orders Action to Block Proton Mail Over AI Deepfake Abuse Allegations

Ghost in the shell script: Boffins reckon they can catch bugs before programs run

TheWizards APT group uses SLAAC spoofing to perform adversary-in-the-middle attacks

Cloud doesnt mean secure: How Intruder finds what others miss

~ 29 Apr 2025 ~

WhatsApp Launches Private Processing to Enable AI Features While Protecting Message Privacy

New Reports Uncover Jailbreaks, Unsafe Code, and Data Theft Risks in Leading AI Systems

Watch out for any Linux malware sneakily evading syscall-watching antivirus

SentinelOne Uncovers Chinese Espionage Campaign Targeting Its Infrastructure and Clients

WhatsApp Is Walking a Tightrope Between AI Features and Privacy

Enterprise tech dominates zero-day exploits with no signs of slowdown

Product Walkthrough: Securing Microsoft Copilot with Reco

Google Reports 75 Zero-Days Exploited in 2024 44% Targeted Enterprise Security Products

China now America's number one cyber threat US must get up to speed

Microsoft announces the 2025 Security Excellence Awards winners

Infosec pros tell Trump to quit bullying Chris Krebs it's undermining security

Millions of Apple Airplay-Enabled Devices Can Be Hacked via Wi-Fi

Rockwell Automation ThinManager

Delta Electronics ISPSoft

This month in security with Tony Anscombe April 2025 edition

China is using AI to sharpen every link in its attack chain, FBI warns

Malware Attack Targets World Uyghur Congress Leaders via Trojanized UyghurEdit++ Tool

Applying Security Engineering to Prompt Injection Security

Outlaw cybergang attacking targets worldwide

CISA Adds Actively Exploited Broadcom and Commvault Flaws to KEV Database

The one interview question that will protect you from North Korean fake workers

Swiss boffins admit to secretly posting AI-penned posts to Reddit in the name of science

Open source text editor poisoned with malware to target Uyghur users

Ex-Disney employee gets 3 years in the clink for goofy attacks on mousey menus

~ 28 Apr 2025 ~

Cybersecurity CEO accused of running malware on hospital PC blabs about it on LinkedIn

How to survive as a CISO aka 'chief scapegoat officer'

Admission impossible: NSA, CISA brass absent from RSA Conf