Top Security News for Today

LockBit Ransomware Gang Breached, Secrets Exposed
https://www.tripwire.com/state-of-security/lockbit-ransomware-gang-breached-secrets-exposed

Tripwire Patch Priority Index for April 2025
https://www.tripwire.com/state-of-security/tripwire-patch-priority-index-april-2025

ASURA-FDPS-ML: Star-by-star Galaxy Simulations Accelerated by Surrogate Modeling for Supernova Feedback
https://arxiv.org/abs/2410.23346

An Approximate-Master-Equation Formulation of the Watts Threshold Model on Hypergraphs
https://arxiv.org/abs/2503.04020

Investigating Popularity Bias Amplification in Recommender Systems Employed in the Entertainment Domain
https://arxiv.org/abs/2504.04752

Breaking the Sound Barrier Part I: Fuzzing CoreAudio with Mach Messages
https://googleprojectzero.blogspot.com/2025/05/breaking-sound-barrier-part-i-fuzzing.html

Before You Red Team: Fix These 5 Common Mistakes
https://bishopfox.com/blog/before-red-team-fix-these-5-common-mistakes

Friday Squid Blogging: Japanese Divers Video Giant Squid
https://www.schneier.com/blog/archives/2025/05/friday-squid-blogging-japanese-divers-video-giant-squid.html

XG-NID: Dual-Modality Network Intrusion Detection using a Heterogeneous Graph Neural Network and Large Language Model
https://arxiv.org/abs/2408.16021

Stealthy .NET Malware: Hiding Malicious Payloads as Bitmap Resources
https://www.reddit.com/r/netsec/comments/1kivxei/stealthy_net_malware_hiding_malicious_payloads_as/

Follow Top Cyber News at https://t.me/TopCyberTechNews Feel free to DM me at https://twitter.com/ShayaFeedman

Top Security News for Today

The Honeynet Workshop Conference 2025 is in June in Prague.
https://www.reddit.com/r/netsec/comments/1kjjueq/the_honeynet_workshop_conference_2025_is_in_june/

When Bad Data Leads to Good Models
https://arxiv.org/abs/2505.04741

Advancing Conversational Diagnostic AI with Multimodal Reasoning
https://arxiv.org/abs/2505.04653

Putting the Value Back in RL: Better Test-Time Scaling by Unifying LLM Reasoners With Verifiers
https://arxiv.org/abs/2505.04842

Help use and invite opl who might be interested
https://0x00sec.org/t/help-use-and-invite-opl-who-might-be-interested/43890

Follow Top Cyber News at https://t.me/TopCyberTechNews Feel free to DM me at https://twitter.com/ShayaFeedman

Top Security News for Today

One-Click RCE in ASUS’s Preinstalled Driver Software
https://www.reddit.com/r/netsec/comments/1kjwfuh/oneclick_rce_in_asuss_preinstalled_driver_software/

Perception, Reason, Think, and Plan: A Survey on Large Multimodal Reasoning Models
https://arxiv.org/abs/2505.04921

Fair Uncertainty Quantification for Depression Prediction
https://arxiv.org/abs/2505.04931

Large Language Models are Autonomous Cyber Defenders
https://arxiv.org/abs/2505.04843

Imagining and building wise machines: The centrality of AI metacognition
https://arxiv.org/abs/2411.02478

XG-NID: Dual-Modality Network Intrusion Detection using a Heterogeneous Graph Neural Network and Large Language Model
https://arxiv.org/abs/2408.16021

Assessment Frameworks for NIS Directive Compliance
https://www.tripwire.com/state-of-security/assessment-frameworks-nis-directive-compliance

A Subtle Form of Siege: DDoS Smokescreens as a Cover for Quiet Data Breaches
https://www.tripwire.com/state-of-security/subtle-form-siege-ddos-smokescreens-cover-quiet-data-breaches

Follow Top Cyber News at https://t.me/TopCyberTechNews Feel free to DM me at https://twitter.com/ShayaFeedman

Top Security News for Today

How I ruined my vacation by reverse engineering WSC
https://www.reddit.com/r/netsec/comments/1kkpyuu/how_i_ruined_my_vacation_by_reverse_engineering/

Alt Syscalls for Windows 11
https://www.reddit.com/r/lowlevel/comments/1kknjre/alt_syscalls_for_windows_11/

12th May – Threat Intelligence Report
https://research.checkpoint.com/2025/12th-may-threat-intelligence-report/

SUDO_KILLER – Auditing Sudo Configurations for Privilege Escalation Paths
https://www.darknet.org.uk/2025/05/sudo_killer-auditing-sudo-configurations-for-privilege-escalation-paths/

Statistical Analysis to Detect Uncommon Code
https://www.reddit.com/r/netsec/comments/1kktwfv/statistical_analysis_to_detect_uncommon_code/

Marbled Dust leverages zero-day in Output Messenger for regional espionage
https://www.microsoft.com/en-us/security/blog/2025/05/12/marbled-dust-leverages-zero-day-in-output-messenger-for-regional-espionage/

I built Mithra: a security scanner for LLM-integrated APIs (detects prompt injection, DAN..)
https://www.reddit.com/r/netsec/comments/1kkydpv/i_built_mithra_a_security_scanner_for/

LiteLMGuard: Seamless and Lightweight On-Device Prompt Filtering for Safeguarding Small Language Models against Quantization-induced Risks and Vulnerabilities
https://arxiv.org/abs/2505.05485

Bringing Forensic Readiness to Modern Computer Firmware
https://arxiv.org/abs/2505.05486

Invariant-Based Cryptography
https://arxiv.org/abs/2505.05487

Follow Top Cyber News at https://t.me/TopCyberTechNews Feel free to DM me at https://twitter.com/ShayaFeedman

Top Security News for Today

Using a Mythic agent to optimize penetration testing
https://securelist.com/agent-for-mythic-c2-with-beacon-object-files/115259/

Court Rules Against NSO Group
https://www.schneier.com/blog/archives/2025/05/court-rules-against-nso-group.html

Azure Managed Identities Abuse: Security Research - Defense strategies
https://www.reddit.com/r/netsec/comments/1kll5as/azure_managed_identities_abuse_security_research/

Microsoft Patch Tuesday, May 2025 Security Update Review
https://blog.qualys.com/vulnerabilities-threat-research/2025/05/13/microsoft-patch-tuesday-may-2025-security-update-review

May 2025 Patch Tuesday Analysis
https://www.tripwire.com/state-of-security/may-2025-patch-tuesday-analysis

Trend Micro Puts a Spotlight on AI at Pwn2Own Berlin
https://www.trendmicro.com/en_us/research/25/e/pwn2own-berlin-2025.html

Best Open Source HIDS Tools for Linux in 2025 (Compared & Ranked)
https://www.darknet.org.uk/2025/05/best-open-source-hids-tools-for-linux-in-2025-compared-ranked/

Follow Top Cyber News at https://t.me/TopCyberTechNews Feel free to DM me at https://twitter.com/ShayaFeedman

Top Security News for Today

The Forgotten Threat: How Supply Chain Attacks Are Targeting Small Businesses
https://www.tripwire.com/state-of-security/forgotten-threat-how-supply-chain-attacks-are-targeting-small-businesses

Google’s Advanced Protection Now on Android
https://www.schneier.com/blog/archives/2025/05/googles-advanced-protection-now-on-android.html

Maritime Cybersecurity: Threats & Regulations Loom
https://www.trendmicro.com/en_us/research/25/e/maritime-cybersecurity-threats-regulations.html

Patch Tuesday, May 2025 Edition
https://krebsonsecurity.com/2025/05/patch-tuesday-may-2025-edition/

[CVE-2025-47916] Invision Community <= 5.0.6 (customCss) Remote Code Execution
https://www.reddit.com/r/netsec/comments/1kme1li/cve202547916_invision_community_506_customcss/

How to Stay Compliant with the New HIPAA Security Rule Updates
https://www.tripwire.com/state-of-security/how-stay-compliant-new-hipaa-security-rule-updates

Integrate LDAP into Keycloak to modernize rather than delete it
https://www.reddit.com/r/netsec/comments/1kmg680/integrate_ldap_into_keycloak_to_modernize_rather/

Upcoming Speaking Engagements
https://www.schneier.com/blog/archives/2025/05/upcoming-speaking-engagements-46.html

Follow Top Cyber News at https://t.me/TopCyberTechNews Feel free to DM me at https://twitter.com/ShayaFeedman

Top Security News for Today

AI-Generated Law
https://www.schneier.com/blog/archives/2025/05/ai-generated-law.html

Threat Landscape for Industrial Automation Systems in Q1 2025
https://securelist.com/industrial-threat-report-q1-2025/116505/

Expression Payloads Meet Mayhem - Ivanti EPMM Unauth RCE Chain (CVE-2025-4427 and CVE-2025-4428) - watchTowr Labs
https://www.reddit.com/r/netsec/comments/1kna9px/expression_payloads_meet_mayhem_ivanti_epmm/

How the Microsoft Secure Future Initiative Brings Zero Trust to Life
https://www.microsoft.com/en-us/security/blog/2025/05/15/how-the-microsoft-secure-future-initiative-brings-zero-trust-to-life/

Fileless Execution: PowerShell Based Shellcode Loader Executes Remcos RAT
https://blog.qualys.com/vulnerabilities-threat-research/2025/05/15/fileless-execution-powershell-based-shellcode-loader-executes-remcos-rat

Breachforums Boss to Pay $700k in Healthcare Breach
https://krebsonsecurity.com/2025/05/breachforums-boss-to-pay-700k-in-healthcare-breach/

Commit Stomping - Manipulating Git Histories to Obscure the Truth
https://www.reddit.com/r/netsec/comments/1knl6j5/commit_stomping_manipulating_git_histories_to/

Wazuh – Open Source Security Platform for Threat Detection, Visibility & Compliance
https://www.darknet.org.uk/2025/05/wazuh-open-source-security-platform-for-threat-detection-visibility-compliance/

Follow Top Cyber News at https://t.me/TopCyberTechNews Feel free to DM me at https://twitter.com/ShayaFeedman

Top Security News for Today

Self Rewarding Self Improving
https://arxiv.org/abs/2505.08827

Communications Backdoor in Chinese Power Inverters
https://www.schneier.com/blog/archives/2025/05/communications-backdoor-in-chinese-power-inverters.html

Announcing the Official Parity Release of Volatility 3!
https://www.reddit.com/r/netsec/comments/1ko3uye/announcing_the_official_parity_release_of/

Skitnet(Bossnet) Malware Analysis
https://www.reddit.com/r/netsec/comments/1ko59nn/skitnetbossnet_malware_analysis/

Automated Alert Classification and Triage (AACT): An Intelligent System for the Prioritisation of Cybersecurity Alerts
https://arxiv.org/abs/2505.09616

Guardian Positioning System (GPS) for Location Based Services
https://arxiv.org/abs/2505.09628

Correlating Account on Ethereum Mixing Service via Domain-Invariant feature learning
https://arxiv.org/abs/2505.09743

PIG: Privacy Jailbreak Attack on LLMs via Gradient-based Iterative In-Context Optimization
https://arxiv.org/abs/2505.09639

Follow Top Cyber News at https://t.me/TopCyberTechNews Feel free to DM me at https://twitter.com/ShayaFeedman

Top Security News for Today

Large Language Models Are More Persuasive Than Incentivized Human Persuaders
https://arxiv.org/abs/2505.09662

$XX^{t}$ Can Be Faster
https://arxiv.org/abs/2505.09814

Analog Foundation Models
https://arxiv.org/abs/2505.09663

Frame by Frame, Kernel Streaming Keeps Giving Vulnerabilities
https://devco.re/blog/2025/05/17/frame-by-frame-kernel-streaming-keeps-giving-vulnerabilities-en/

Stateful Connection With Spoofed Source IP — NetImpostor
https://www.reddit.com/r/netsec/comments/1kp4n2r/stateful_connection_with_spoofed_source_ip/

Translating Electrocardiograms to Cardiac Magnetic Resonance Imaging Useful for Cardiac Assessment and Disease Screening: A Multi-Center Study AI for ECG to CMR Translation Study
https://arxiv.org/abs/2411.13602

Follow Top Cyber News at https://t.me/TopCyberTechNews Feel free to DM me at https://twitter.com/ShayaFeedman

Top Security News for Today

Frida 17 is out
https://www.reddit.com/r/netsec/comments/1kpide4/frida_17_is_out/

Apple downplays framework vuln
https://www.reddit.com/r/netsec/comments/1kpwauf/apple_downplays_framework_vuln/

O2 VoLTE: locating any customer with a phone call
https://www.reddit.com/r/netsec/comments/1kptt5x/o2_volte_locating_any_customer_with_a_phone_call/

Falco – Real-Time Threat Detection for Linux and Containers
https://www.darknet.org.uk/2025/05/falco-real-time-threat-detection-for-linux-and-containers/

Introducing EntraFalcon – A Tool to Enumerate Entra ID Objects and Assignments
https://www.reddit.com/r/netsec/comments/1kq4oie/introducing_entrafalcon_a_tool_to_enumerate_entra/

Cache poisoning via race-condition in Next.js
https://www.reddit.com/r/netsec/comments/1kq64ta/cache_poisoning_via_racecondition_in_nextjs/

Preparing for the Quantum Future: Insights from the NCSC’s PQC Migration Roadmap
https://www.tripwire.com/state-of-security/preparing-quantum-future-insights-ncscs-pqc-migration-roadmap/

Follow Top Cyber News at https://t.me/TopCyberTechNews Feel free to DM me at https://twitter.com/ShayaFeedman

Top Security News for Today

The NSA’s “Fifty Years of Mathematical Cryptanalysis (1937–1987)”
https://www.schneier.com/blog/archives/2025/05/the-nsas-fifty-years-of-mathematical-cryptanalysis-1937-1987.html

Introducing EntraFalcon – A Tool to Enumerate Entra ID Objects and Assignments
https://www.reddit.com/r/netsec/comments/1kq4oie/introducing_entrafalcon_a_tool_to_enumerate_entra/

Cache poisoning via race-condition in Next.js
https://www.reddit.com/r/netsec/comments/1kq64ta/cache_poisoning_via_racecondition_in_nextjs/

19th May – Threat Intelligence Report
https://research.checkpoint.com/2025/19th-may-threat-intelligence-report/

Microsoft extends Zero Trust to secure the agentic workforce
https://www.microsoft.com/en-us/security/blog/2025/05/19/microsoft-extends-zero-trust-to-secure-the-agentic-workforce/

SafeTrans: LLM-assisted Transpilation from C to Rust
https://arxiv.org/abs/2505.10708

Agent Name Service (ANS): A Universal Directory for Secure AI Agent Discovery and Interoperability
https://arxiv.org/abs/2505.10609

Neural-Inspired Advances in Integral Cryptanalysis
https://arxiv.org/abs/2505.10790

RAN Tester UE: An Automated Declarative UE Centric Security Testing Platform
https://arxiv.org/abs/2505.10812

Automating Security Audit Using Large Language Model based Agent: An Exploration Experiment
https://arxiv.org/abs/2505.10732

Follow Top Cyber News at https://t.me/TopCyberTechNews Feel free to DM me at https://twitter.com/ShayaFeedman

Top Security News for Today

Government Organizations Lose Nearly a Month in Downtime for Every Ransomware Attack
https://www.tripwire.com/state-of-security/government-organizations-lose-nearly-month-downtime-every-ransomware-attack

How IoT Security Cameras Are Susceptible to Cyber Attacks
https://www.tripwire.com/state-of-security/how-iot-security-cameras-are-susceptible-cyber-attacks

DoorDash Hack
https://www.schneier.com/blog/archives/2025/05/doordash-hack.html

New Vulnerabilities in Foscam X5
https://www.reddit.com/r/netsec/comments/1kr32cs/new_vulnerabilities_in_foscam_x5/

The Sting of Fake Kling: Facebook Malvertising Lures Victims to Fake AI Generation Website
https://research.checkpoint.com/2025/impersonated-kling-ai-site-installs-malware/

How to Extract Useful Info from Microsoft Deployment Toolkit (MDT) Shares on Red Teams
https://www.reddit.com/r/netsec/comments/1kr5uiu/how_to_extract_useful_info_from_microsoft/

Varonis' Data Security Report Reveals 99% of Orgs Have Sensitive Information Exposed to AI
https://www.reddit.com/r/netsec/comments/1kr5uee/varonis_data_security_report_reveals_99_of_orgs/

Malvertising's New Threat: Exploiting Trusted Google Domains
https://www.reddit.com/r/netsec/comments/1krgc39/malvertisings_new_threat_exploiting_trusted/

KrebsOnSecurity Hit With Near-Record 6.3 Tbps DDoS
https://krebsonsecurity.com/2025/05/krebsonsecurity-hit-with-near-record-6-3-tbps-ddos/

Follow Top Cyber News at https://t.me/TopCyberTechNews Feel free to DM me at https://twitter.com/ShayaFeedman

Top Security News for Today

Dero miner zombies biting through Docker APIs to build a cryptojacking horde
https://securelist.com/dero-miner-infects-containers-through-docker-api/116546/

EvilWorker: a new AiTM attack framework leveraging service workers — much more effective, autonomous, and adaptable than Evilginx2? 🎣
https://www.reddit.com/r/netsec/comments/1krtrht/evilworker_a_new_aitm_attack_framework_leveraging/

Humans are Insecure Password Generators
https://www.reddit.com/r/netsec/comments/1krqom1/humans_are_insecure_password_generators/

BadSuccessor: Abusing dMSA to Escalate Privileges in Active Directory
https://www.reddit.com/r/netsec/comments/1ks1i9g/badsuccessor_abusing_dmsa_to_escalate_privileges/

Lumma Stealer: Breaking down the delivery techniques and capabilities of a prolific infostealer
https://www.microsoft.com/en-us/security/blog/2025/05/21/lumma-stealer-breaking-down-the-delivery-techniques-and-capabilities-of-a-prolific-infostealer/

AI-Powered Malware – The Next Evolution in Cyber Threats
https://www.darknet.org.uk/2025/05/ai-powered-malware-the-next-evolution-in-cyber-threats/

CVE-2024-45332 brings back branch target injection attacks on Intel
https://www.reddit.com/r/netsec/comments/1ksc31c/cve202445332_brings_back_branch_target_injection/

ZathuraDbg: Open-Source GUI tool for learning assembly
https://www.reddit.com/r/lowlevel/comments/1ks4em6/zathuradbg_opensource_gui_tool_for_learning/

Follow Top Cyber News at https://t.me/TopCyberTechNews Feel free to DM me at https://twitter.com/ShayaFeedman

Top Security News for Today

Authenticated Remote Code Execution in Netwrix Password Secure (CVE-2025-26817)
https://www.reddit.com/r/netsec/comments/1kslcpa/authenticated_remote_code_execution_in_netwrix/

EXP-401 (OSEE)：用五天課程訓練通透十年的知識體
https://devco.re/blog/2025/05/22/exp-401-osee-five-days-to-master-a-decade-of-knowledge/

The Voter Experience
https://www.schneier.com/blog/archives/2025/05/the-voter-experience.html

How to Enumerate and Exploit CefSharp Thick Clients Using CefEnum
https://www.reddit.com/r/netsec/comments/1kskq0k/how_to_enumerate_and_exploit_cefsharp_thick/

Automating MS-RPC vulnerability research
https://www.reddit.com/r/netsec/comments/1ksp4m2/automating_msrpc_vulnerability_research/

Live Forensic Collection from Ivanti EPMM Appliances (CVE-2025-4427 & CVE-2025-4428)
https://www.reddit.com/r/netsec/comments/1ksufxv/live_forensic_collection_from_ivanti_epmm/

Oops: DanaBot Malware Devs Infected Their Own PCs
https://krebsonsecurity.com/2025/05/oops-danabot-malware-devs-infected-their-own-pcs/

CVE-2025-32756: Write-Up of a Buffer Overflow in Various Fortinet Products
https://www.reddit.com/r/netsec/comments/1kszzx6/cve202532756_writeup_of_a_buffer_overflow_in/

Follow Top Cyber News at https://t.me/TopCyberTechNews Feel free to DM me at https://twitter.com/ShayaFeedman

Top Security News for Today

Signal Blocks Windows Recall
https://www.schneier.com/blog/archives/2025/05/signal-blocks-windows-recall.html

3AM Ransomware Attackers Pose as IT Support to Compromise Networks
https://www.tripwire.com/state-of-security/3am-ransomware-attackers-pose-it-support-compromise-networks

Don't Call That "Protected" Method: Dissecting an N-Day vBulletin RCE
https://www.reddit.com/r/netsec/comments/1ktjoa8/dont_call_that_protected_method_dissecting_an/

Prime Path Coverage in the GNU Compiler Collection
https://arxiv.org/abs/2505.14694

RoboCulture: A Robotics Platform for Automated Biological Experimentation
https://arxiv.org/abs/2505.14941

Diffusion vs. Autoregressive Language Models: A Text Embedding Perspective
https://arxiv.org/abs/2505.15045

Text Generation Beyond Discrete Token Sampling
https://arxiv.org/abs/2505.14827

One-Layer Transformers are Provably Optimal for In-context Reasoning and Distributional Association Learning in Next-Token Prediction Tasks
https://arxiv.org/abs/2505.15009

Follow Top Cyber News at https://t.me/TopCyberTechNews Feel free to DM me at https://twitter.com/ShayaFeedman

Top Security News for Today

BadUSB Attack Explained: From Principles to Practice and Defense
https://www.reddit.com/r/netsec/comments/1kuuvzz/badusb_attack_explained_from_principles_to/

Follow Top Cyber News at https://t.me/TopCyberTechNews Feel free to DM me at https://twitter.com/ShayaFeedman

Top Security News for Today

BadUSB Attack Explained: From Principles to Practice and Defense
https://www.reddit.com/r/netsec/comments/1kuuvzz/badusb_attack_explained_from_principles_to/

AIDE – Lightweight Linux Host Intrusion Detection
https://www.darknet.org.uk/2025/05/aide-lightweight-linux-host-intrusion-detection/

What the UK’s New Cyber Resilience Bill Means for Businesses—and How to Stay Ahead
https://www.tripwire.com/state-of-security/what-uks-new-cyber-resilience-bill-means-businesses-and-how-stay-ahead

Follow Top Cyber News at https://t.me/TopCyberTechNews Feel free to DM me at https://twitter.com/ShayaFeedman

Top Security News for Today

Threat of TCC Bypasses on macOS
https://www.reddit.com/r/netsec/comments/1kvr057/threat_of_tcc_bypasses_on_macos/

26th May – Threat Intelligence Report
https://research.checkpoint.com/2025/26th-may-threat-intelligence-report/

Unauthenticated RCE on Smartbedded MeteoBridge (CVE-2025-4008)
https://www.reddit.com/r/netsec/comments/1kvtr2i/unauthenticated_rce_on_smartbedded_meteobridge/

Windows namespace traversal
https://www.reddit.com/r/lowlevel/comments/1kvtv22/windows_namespace_traversal/

Preparing for the Post Quantum Era: Quantum Ready Architecture for Security and Risk Management (QUASAR) -- A Strategic Framework for Cybersecurity
https://arxiv.org/abs/2505.17084

Improving LLM Outputs Against Jailbreak Attacks with Expert Model Integration
https://arxiv.org/abs/2505.17066

Follow Top Cyber News at https://t.me/TopCyberTechNews Feel free to DM me at https://twitter.com/ShayaFeedman

Top Security News for Today

New graph capabilities and MCP server for CTI / OSINT analysis
https://www.reddit.com/r/netsec/comments/1kwjc7w/new_graph_capabilities_and_mcp_server_for_cti/

New Russia-affiliated actor Void Blizzard targets critical sectors for espionage
https://www.microsoft.com/en-us/security/blog/2025/05/27/new-russia-affiliated-actor-void-blizzard-targets-critical-sectors-for-espionage/

Chinese-Owned VPNs
https://www.schneier.com/blog/archives/2025/05/chinese-owned-vpns.html

OSEE Exam Uncovered: Cracking OSEE in Taipei
https://devco.re/blog/2025/05/27/osee-exam-uncovered-cracking-osee-in-taipei/

GitHub MCP Exploited: Accessing private repositories via MCP
https://www.reddit.com/r/netsec/comments/1kwhjaz/github_mcp_exploited_accessing_private/

Firefox Security Response to pwn2own 2025
https://www.reddit.com/r/netsec/comments/1kwgp8p/firefox_security_response_to_pwn2own_2025/

Have I Been Squatted — Analyze (open beta, free)
https://www.reddit.com/r/netsec/comments/1kwm3nv/have_i_been_squatted_analyze_open_beta_free/

Trend Micro Leading the Fight to Secure AI
https://www.trendmicro.com/en_us/research/25/e/mitre-atlas-secure-ai.html

Follow Top Cyber News at https://t.me/TopCyberTechNews Feel free to DM me at https://twitter.com/ShayaFeedman

Top Security News for Today

Remote Code Execution on Evertz SDVN (CVE-2025-4009 - Full Disclosure)
https://www.reddit.com/r/netsec/comments/1kxcit3/remote_code_execution_on_evertz_sdvn_cve20254009/

Zanubis in motion: Tracing the active evolution of the Android banking malware
https://securelist.com/evolution-of-zanubis-banking-trojan-for-android/116588/

Proposed HIPAA Update Makes Yearly Pen Testing Mandatory
https://www.tripwire.com/state-of-security/proposed-hipaa-update-makes-yearly-pen-testing-mandatory

Location Tracking App for Foreigners in Moscow
https://www.schneier.com/blog/archives/2025/05/location-tracking-app-for-foreigners-in-moscow.html

Pakistan Arrests 21 in ‘Heartsender’ Malware Service
https://krebsonsecurity.com/2025/05/pakistan-arrests-21-in-heartsender-malware-service/

Decoding TCP SYN for Stronger Network Security
https://www.reddit.com/r/netsec/comments/1kxhgwo/decoding_tcp_syn_for_stronger_network_security/

Follow Top Cyber News at https://t.me/TopCyberTechNews Feel free to DM me at https://twitter.com/ShayaFeedman

Top Security News for Today

Meet Burp Suite DAST: Your questions answered
https://portswigger.net/blog/meet-burp-suite-dast-your-questions-answered

Deguard: turning a T480 into a coreboot laptop (10-min talk + live demo)
https://www.reddit.com/r/netsec/comments/1ky7bng/deguard_turning_a_t480_into_a_coreboot_laptop/

Surveillance Via Smart Toothbrush
https://www.schneier.com/blog/archives/2025/05/surveillance-via-smart-toothbrush.html

Learning AMD Zen 3 (Family 19h) microarchitecture
https://www.reddit.com/r/lowlevel/comments/1ky4e2u/learning_amd_zen_3_family_19h_microarchitecture/

How to deploy AI safely
https://www.microsoft.com/en-us/security/blog/2025/05/29/how-to-deploy-ai-safely/

U.S. Sanctions Cloud Provider ‘Funnull’ as Top Source of ‘Pig Butchering’ Scams
https://krebsonsecurity.com/2025/05/u-s-sanctions-cloud-provider-funnull-as-top-source-of-pig-butchering-scams/

Follow Top Cyber News at https://t.me/TopCyberTechNews Feel free to DM me at https://twitter.com/ShayaFeedman