Justi autem in perpetuum vivent et apud Dominum est merces eorum — Wisdom 5:16

"It is evening in the soul... when the light of this world fades and a man is indrawn and rests" — Meister Eckhart, Sermon 38

🚨Patch up your Kubernetes installs. ⚠️ Affected @kubernetesio versions: < v1.11.0 v1.11.0 - 1.11.4 v1.12.0 🦠Vulnerabilities  CVE-2025-1974 CVE-2025-1097  CVE-2025-1098  CVE-2025-24514 CVE-2025-24513

Rare urgent advisory from @Meta 🚨⚠️ CVE-2025-27363: FreeType flaw risks millions. Remote code execution possible on major platforms. Patch urged as exploitation rises. Severity: 8.2/10. Affects versions pre-2.13.3. Update now! 

RIP $TSLA... 💥🚗📉

Snack makers are shifting away from artificial colors in processed foods. PepsiCo's new Simply Ruffles product uses natural ingredients like tomato powder. This change aligns with a trend following the FDA's ban on Red No. 3 due to health concerns.

The iPhone 16e: the priciest budget phone! 💸 It boasts a solid display, performance, and battery life but ditches fun features like MagSafe and Dynamic Island. 🏖️ Apple’s strategy? Hike prices while streamlining production. Great for profits📱😬 @arstechnica

🚨Medusa #ransomware claims 40+ victims in 2025, including a US healthcare org hit in Jan. @Symantec reports nearly 400 victims since 2023, with ransom demands up to $15M. True victim count likely higher. From @InfosecurityMag 👉

🚨Akira ransomware gang used an unsecured webcam to deploy a Linux encryptor, bypassing EDR and encrypting network shares via SMB 🤯. Highlights need for broader device monitoring beyond Windows endpoints. From @BleepinComputer

🚨@BleepinComputer: @Ethereum key stealer hits PyPI as "set-utils", downloaded 1K+ times! @billtoulas  warns blockchain devs to stay vigilant. #crypto

🚨 Akira ransomware exploited an unsecured webcam (yes this is an initial security vector and one reason why #Pwn2Own has IoT cameras as a target category) to encrypt a network, bypassing EDR. @BleepinComputer reports rapid attack from initial access to encryption in hours. 🤯 #Ransomware

@Microsoft takes down massive malvertising campaign hit ~1M PCs via GitHub repos. Malware stole system data & dropped payloads. Tracked as Storm-0408.💽🛡️ via @BleepingComputer

@jenkinsci releases Jenkins Security Advisory 2025-03-05

🩹SMR-MAR-2025: @SamsungMobile releases patches for flagship model phones 📱 make sure to apply the latest patch in order to secure your @Samsung devices. https://security.samsungmobile.com/securityUpdate.smsb?year=2025&month=03

Over 37,000 VMware ESXi servers are vulnerable to a critical flaw (CVE-2025-22224) that is being actively exploited, prompting urgent updates and mitigation efforts from affected organizations. From @BleepinComputer @billtoulas

A sophisticated cyber-intrusion campaign 🥷 has been reported, targeting various Japanese sectors 🇯🇵🎯 by exploiting a remote code execution flaw to gain access, deploying Cobalt Strike 🦠for persistent control, while engaging in credential theft and lateral movement

🚨@BleepinComputer: BadBox malware 🦠 disrupted on 500K Android devices! @billtoulas reports.

🔬🚀@NVIDIA & @Broadcom are testing chips with @Intel's 18A process, showing confidence in Intel's manufacturing comeback. Details from @Reuters 👉

So many security advisories going out! 🤯 Including VMWare, HUAWEI, Paragon, and Mozilla. Here is what the vulnerability landscape looks like. Lots of Injection and Memory Corruption issues across all of these advisories.

Microsoft finalizes EU Data Boundary, keeping EU customer data local per regulations. Some still wary of US vendor ties. @TheRegister reports. 🔒🇪🇺

Polish Space Agency (@POLSA_GOV_PL) hit by cyberattack, systems secured. Officials probe culprits amid tensions with Moscow. @TheRegister reports. 🚀🔒

Hackers exploit ClickFix to deploy NetSupport RAT via fake CAPTCHAs, tricking users into running malicious PowerShell. @TheHackersNews 🐀🚨💻 https://thehackernews.com/2025/03/hackers-use-clickfix-trick-to-deploy.html

🔎@Unit42_Intel dives into malware obfuscation tricks & automating unpacking. Static analysis in sandboxes can extract key configs from samples. See how at

Help! I can't reach this advisory 🤯 My CISO says if I can't this patched I'm out 🚨

FBI 🇺🇸 blames North Korea’s “TraderTraitor” 🇰🇵 for @Bybit_Official ’s $1.5B crypto heist! Hackers hit Safe{Wallet} dev machine, stole ETH on Feb 21. Only 3% frozen. 👇 details:

#DragonForce ransomware is hitting Saudi Arabia hard! 🇸🇦 Check out @securityaffairs  for the details on this cybercrime spree 👇https://t.co/UgqKiamGUI #CyberAttack #RansomwareRumble

@Unit42_Intel uncovers Squidoor, a stealthy threat by suspected Chinese hackers hitting global orgs. Multi-platform mayhem on Windows & Linux! 👇 https://unit42.paloaltonetworks.com/advanced-backdoor-squidoor/

🚨 Hackers exploited an XSS flaw in @krpano's virtual tour framework, injecting spam ads on 350+ sites, including gov & uni pages. 👇 https://thehackernews.com/2025/02/hackers-exploited-krpano-framework-flaw.html

📱@Qualcomm doubles Android support to 8 yrs with Snapdragon 8 Elite! 🤝@Google boosts device longevity with kernel upgrades. Good news for @SamsungMobile & @OnePlus fans! 🛡️via @TheRegister 

🚨 Microsoft yanks 2 VSCode extensions—Material Theme & Icons (9M installs)—from Marketplace due to sneaky malicious code. 😱 @BleepinComputer reports: https://www.bleepingcomputer.com/news/security/vscode-extensions-with-9-million-installs-pulled-over-security-risks/ 🛡️💻

Microsoft quietly rolls out ad-supported Office apps for Windows users, offering free access with limits. No subscription needed, but ads stay on-screen. @BleepinComputer reports. 🖥️📝💸

There are two things we can rely on to be in the news: Ukraine and planes crashing.

RIP... I just spotted the guy I hired off LinkedIn for a DevOps role in the news. He just resigned today, says he's crypto-rich, bought a Lambo, and is retiring early, all thanks to Ethereum. Who knew DevOps could be so lucrative?

MAESTRO: New CSA threat modeling framework for Agentic AI. Helps security engineers, AI researchers, and developers  identify risks, secure AI systems layer-by-layer. (Feb 6, 2025)

🇦🇺 bans @Kaspersky software on gov devices, citing security risks. @InnovationAus reports the move follows US lead, targeting Russian cyber threats. 🛡️💻 Effective April 1, 2025.

Data leak reveals @TopSec aids China's censorship, offering monitoring services to gov & state firms. @SentinelOne  analysis uncovers logs tying the cybersecurity co to content control efforts. @TheHackersNews 👉

Massive data breach at @MarsHydro exposes 2.7B records, including Wi-Fi & device info, due to an unsecured database. @ZoneAlarm 👉

Hackers exploited a critical Confluence flaw (CVE-2023-22527) to deploy LockBit ransomware in just 2 hours, using RDP, AnyDesk, and PDQ Deploy. @TheDFIRReport details the rapid attack and data exfil via Rclone. 👉

Google Cloud intros quantum-safe digital signatures in KMS, using NIST-approved ML-DSA-65 & SLH-DSA-SHA2-128S to protect against future quantum threats. Now in preview! @GoogleCloud @BleepingComputer 👉

SpyLend Android malware, downloaded 100K+ times from Google Play, poses as a finance tool but enables predatory lending & extortion in India. @securityaffairs @CyfirmaR report highlights its threat to user privacy & security. 👇

Kaspersky uncovers GitVenom campaign targeting crypto via fake GitHub projects. Stealers & backdoors hit users in Egypt, Russia, more. 🇷🇺 🇪🇬 @KasperskyLab @Securelist 👉 

@Malwarebytes warns SecTopRAT malware is bundled in a fake Chrome installer spread via @GoogleAds . Stay safe and download Chrome only from official sources like @GoogleChrome 

Microsoft ups Copilot bug bounty payouts to $5k for moderate flaws, expands scope to more AI services. @TheRegister reports Redmond's security push. Bug hunters, catch those bands 💸

China-linked hackers hit European health orgs, exploiting Check Point flaws to deploy ShadowPad & ransomware, per @therecordmedia. @checkpointsw warns of rising threats. Stay vigilant and stay patched up bro.

Chinese APT tools, like PlugX, found in RA World ransomware attack on a South Asian firm, per SecurityWeek. Blurs espionage & crime lines— times are tough, state hacker making bank on the side? $2M ransom demanded.

he Web GUI configuration panel of Hirsch (formerly Identiv and Viscount) Enterphone MESH through 2024 ships with default credentials (username freedom, password viscount). The administrator is not prompted to change these credentials on initial configuration.

A free game on Steam named PirateFi was caught distributing Vidar infostealing malware.  @BleepinComputer advises anyone who downloaded it to scan their PC for potential threats. @Steam

Storm-2372 has been using device code phishing since August 2024 to target governments, NGOs, and industries. This technique tricks users into providing login tokens, enabling account takeovers.  @securityaffairs @MsftSecIntel @Microsoft