Maxwell Schultz, a former IT contractor for an American waste disposal company, pleaded guilty to hacking his former employer after he was fired to reset passwords and delete logs
 
Australia's eSafety Commission has expanded the country's kids social media ban to video streaming service Twitch. Australia's kids social media ban will be enforced on 10 platforms: -Facebook -Instagram -Snapchat -Threads -TikTok -X -Reddit -Kick -YouTube https://www.esafety.gov.au/newsroom/media-releases/twitch-assessed-as-age-restricted-social-media-platform
Cisco has announced Resilient Infrastructure, a project to improve the security of its products. This includes: -increase default protections -remove legacy insecure features -reduce the attack surface -enable better detection and response
Cisco Blogs
Doubling down on resilient infrastructure
As global networks face escalating threats, Cisco is strengthening resilient infrastructure by setting secure defaults, eliminating legacy risks, a...
Blockchain investigator ZachXBT has published a report on how the APT38 (Bluenoroff) group laundered $200 million worth of crypto from 25+ hacks to fiat between 2020 and 2023. https://paragraph.com/@investigations/how-lazarus-group-laundered-200m-from-25-crypto-hacks-to-fiat-from-2020-2023
There's an unpatched admin auth bypass in the Twonky Server
Rapid7
CVE-2025-13315, CVE-2025-13316: Critical Twonky Server Authentication Bypass (NOT FIXED)
Rapid7 has identified two vulnerabilities that facilitate administrator authentication bypass in Twonky Server, a media solution.
Cybersecurity agencies from the Five Eyes have released joint guidance on how to deal with bulletproof hosting providers
Cybersecurity and Infrastructure Security Agency CISA
Bulletproof Defense: Mitigating Risks From Bulletproof Hosting Providers | CISA
CISA and its partners urge ISPs and network defenders to implement these recommendations to mitigate risks posed by BPH providers.
Some drama in the tech world. TP-Link has sued Netgear over an alleged smear campaign. The Chinese company claims its American competitor is behind rumors and accusations over its connections to the CCP.
The Business Times
Netgear accused by rival of China smear to fan security fear
The suit comes as TP-Link faces growing scrutiny in Washington over national-security issues Read more at The Business Times.
US lawmakers want to extend CISA 2015 by another 10 years
Nextgov.com
Senators expect 10-year extension of cyber data-sharing law in future budget package
The Cybersecurity Information Sharing Act of 2015 got a temporary reprieve after the government reopened this month, but it risks lapsing again at ...
The npm portal has revamped its user access tokens. New tokens will have a default life of seven days (instead of 30), which can be updated to a maximum lifespan of 90 days (previously unlimited). The changes are going live this month.
The GitHub Blog
Strengthening npm security: Important changes to authentication and token management - GitHub Changelog
As part of our ongoing commitment to securing the npm ecosystem, we’re implementing the first phase of security improvements outlined in our ...
The European Court of Human Rights has dismissed a case brought by Catalan opposition figures over the CatalanGate 2022 spyware scandal due to a lack of evidence
Catalan opposition regroups after spyware case thrown out by human rights court – POLITICO