sfba.social is one of the many independent Mastodon servers you can use to participate in the fediverse.
A Mastodon instance for the San Francisco Bay Area. Come on in and join us!

Server stats:

2.3K
active users

#cyberattacks

17 posts16 participants6 posts today

Surge in cyberattacks tied to Russian bulletproof host Proton66 since Jan 8, 2025.

New research links it to brute-force, malware, ransomware—even traffic routed via Kaspersky Lab’s network path.

Attackers exploit 2024–25 zero-days, deploy SuperBlack & WeaXor ransomware, and run phishing via hacked WordPress sites.
#CyberAlerts #CyberAttacks
thehackernews.com/2025/04/hack

The Hacker NewsHackers Abuse Russian Bulletproof Host Proton66 for Global Attacks and Malware DeliveryProton66-hosted IPs launched global cyberattacks since Jan 8, 2025, exploiting critical CVEs to deploy malware.

📨 Latest issue of my curated #cybersecurity and #infosec list of resources for week #16/2025 is out!

It includes the following and much more:

🇪🇺 🇺🇸 The European Commission is providing staff with burner phones and laptops for trips to the U.S.;

🇨🇳 🇺🇸 China is pursuing three alleged U.S. operatives for #cyberattacks on its infrastructure;

🇺🇸 A whistleblower revealed that DOGE may have accessed sensitive labor data from the National Labor Relations Board (NLRB);

💰 A new #ransomware called "DOGE BIG BALLS";

🇺🇸 💸 The U.S. government is ending funding for the Common Vulnerabilities and Exposures (CVE) program... and reverses course, extends MITRE CVE contract;

Subscribe to the #infosecMASHUP newsletter to have it piping hot in your inbox every week-end ⬇️

infosec-mashup.santolaria.net/

The European Commission is providing staff with burner phones and laptops for trips to the US; China is pursuing three alleged U.S. operatives for cyberattacks on its infrastructure; A whistleblower revealed that DOGE may have accessed sensitive labor data from the National Labor Relations Board (NLRB); A new ransomware called "DOGE BIG BALLS"; The U.S. government is ending funding for the Common Vulnerabilities and Exposures (CVE) program... and reverses course, extends MITRE CVE contract;
X’s InfoSec Newsletter🕵🏻‍♂️ [InfoSec MASHUP] 16/2025The European Commission is providing staff with burner phones and laptops for trips to the US; China is pursuing three alleged U.S. operatives for cyberattacks on its infrastructure; A whistleblower revealed that DOGE may have accessed sensitive labor data from the National Labor Relations Board (NLRB); A new ransomware called "DOGE BIG BALLS"; The U.S. government is ending funding for the Common Vulnerabilities and Exposures (CVE) program... and reverses course, extends MITRE CVE contract;

China releases names of U.S. 'secret agents' in cyberattacks

youtube.com/watch?v=Blh3per8lt

Police in northeast China's Harbin, the host city of the Winter Games, on Tuesday announced names of three "secret agents" employed by U.S. National Security Agency conducted cyberattacks against the information systems for competition, critical network infrastructure and Chinese companies.

DATE: April 16, 2025 at 08:45AM
SOURCE: HEALTHCARE INFO SECURITY

Direct article link at end of text block below.

Is any #healthcare organization immune from #cyberattacks? t.co/8b9QP70w9D

Here are any URLs found in the article text:

t.co/8b9QP70w9D

Articles can be found by scrolling down the page at healthcareinfosecurity.com/ under the title "Latest"

-------------------------------------------------

Private, vetted email list for mental health professionals: clinicians-exchange.org

Healthcare security & privacy posts not related to IT or infosec are at @HIPAABot . Even so, they mix in some infosec with the legal & regulatory information.

-------------------------------------------------

#security #healthcare #doctors #itsecurity #hacking #doxxing #psychotherapy #securitynews #psychotherapist #mentalhealth #psychiatry #hospital #socialwork #datasecurity #webbeacons #cookies #HIPAA #privacy #datanalytics #healthcaresecurity #healthitsecurity #patientrecords @infosec #telehealth #netneutrality #socialengineering

🚨 Hired by Hackers?

Devs on LinkedIn targeted in stealth malware attacks disguised as job offers.

Slow Pisces, linked to North Korea’s Bybit hack (Feb 2025), is now luring coders with fake challenges to drop RN Stealer—a macOS info-stealer pulling iCloud, SSH, and cloud config files.
#CyberAttacks
thehackernews.com/2025/04/cryp

The Hacker NewsCrypto Developers Targeted by Python Malware Disguised as Coding ChallengesNorth Korea’s Slow Pisces used LinkedIn lures in 2025 to drop RN Stealer malware on crypto developers.

#US Charges 12 Alleged #Spies in #China’s Freewheeling Hacker-for-Hire Ecosystem
The Justice Department claims 10 alleged hackers and two Chinese government officials took part in a wave of #cyberattacks around the globe that included breaching the US Treasury Department and more.
wired.com/story/us-charges-12-
archive.ph/LBGVz

WIRED · US Charges 12 Alleged Spies in China’s Freewheeling Hacker-for-Hire EcosystemBy Andy Greenberg