Port 22

~ 7 Aug 2025 ~

SocGholish Malware Spread via Ad Tools; Delivers Access to LockBit, Evil Corp, and Others

Why blow up satellites when you can just hack them?

Leak Reveals the Workaday Lives of North Korean IT Scammers

German security researchers say 'Windows Hell No' to Microsoft biometrics for biz

Malicious Go, npm Packages Deliver Cross-Platform Malware, Trigger Remote Data Wipes

Mysterious Crime Spree Targeted National Guard Equipment Stashes

Encryption Made for Police and Military Radios May Be Easily Cracked

Microsoft, CISA warn yet another Exchange server bug can lead to 'total domain compromise'

Microsoft Discloses Exchange Server Flaw Enabling Silent Cloud Access in Hybrid Setups

6,500 Axis Servers Expose Remoting Protocol, 4,000 in U.S. Vulnerable to Exploits

The AI-Powered Security Shift: What 2025 Is Teaching Us About Cloud Defense

SonicWall Confirms Patched Vulnerability Behind Recent VPN Attacks, Not a Zero-Day

Announcing public preview: Phishing triage agent in Microsoft Defender

Black Hat's network ops center brings rivals together for a common cause

CISA releases malware analysis for Sharepoint Server attack

KLM, Air France latest major organizations looted for customer data

Webinar: How to Stop Python Supply Chain Attacksand the Expert Tools You Need

Meta training AI on social media posts? Only 7% in Europe think it's OK

Yealink IP Phones and RPS (Redirect and Provisioning Service)

Rockwell Automation Arena

Packet Power EMX and EG

Johnson Controls FX80 and FX90

EG4 Electronics EG4 Inverters

Dreame Technology iOS and Android Mobile Applications

Delta Electronics DIAView

Burk Technology ARC Solo

China Accuses Nvidia of Putting Backdoors into Their Chips

Amnesty slams Elon Musk's X for 'central role' in fueling 2024 UK riots

Could agentic AI save us from the cybercrisis?

Researchers Uncover ECScape Flaw in Amazon ECS Enabling Cross-Task Credential Theft

Fake VPN and Spam Blocker Apps Tied to VexTrio Used in Ad Fraud, Subscription Scams

~ 6 Aug 2025 ~

A Single Poisoned Document Could Leak Secret Data Via ChatGPT

Microsoft researchers bullish on AI security agent even though it let 74% of malware slip through

Google says the group behind last year's Snowflake attack slurped data from one of its Salesforce instances

AI Slashes Workloads for vCISOs by 68% as SMBs Demand More New Report Reveals

Microsoft Launches Project Ire to Autonomously Classify Malware Using AI Tools

Sharing practical guidance: Launching Microsoft Secure Future Initiative (SFI) patterns and practices

Trend Micro Confirms Active Exploitation of Critical Apex One Flaws in On-Premise Systems

What to Know About Traveling to China for Business

Hackers Hijacked Googles Gemini AI With a Poisoned Calendar Invite to Take Over a Smart Home

CERT-UA Warns of HTA-Delivered C# Malware Attacks Using Court Summons Lures

Who Got Arrested in the Raid on the XSS Crime Forum?

AI Is Transforming Cybersecurity Adversarial Testing - Pentera Founders Vision

Nuclear Experts Say Mixing AI and Nuclear Weapons Is Inevitable

CISA Adds 3 D-Link Router Flaws to KEV Catalog After Active Exploitation Reports

Driver of destruction: How a legitimate driver is being used to take down AV processes

The Semiconductor Industry and Regulatory Compliance

Ransomware-as-a-Service Economy Trends, Targets & Takedowns

~ 5 Aug 2025 ~

Vibe coding tool Cursor's MCP implementation allows persistent code execution

ClickFix Malware Campaign Exploits CAPTCHAs to Spread Cross-Platform Infections

Googles August Patch Fixes Two Qualcomm Vulnerabilities Exploited in the Wild

Cursor AI Code Editor Vulnerability Enables RCE via Malicious MCP File Swaps Post Approval

Patch now: Millions of Dell PCs with Broadcom chips vulnerable to attack

Study finds humans not completely useless at malware detection

Misconfigurations Are Not Vulnerabilities: The Costly Confusion Behind Security Risks

Elevate your protection with expanded Microsoft Defender Experts coverage

How Top CISOs Save Their SOCs from Alert Chaos to Never Miss Real Incidents

Chained bugs in Nvidia's Triton Inference Server lead to full system compromise

15,000 Fake TikTok Shop Domains Deliver Malware, Steal Crypto via AI-Driven Scam Campaign

Tigo Energy Cloud Connect Advanced

Mitsubishi Electric Iconics Digital Solutions Multiple Products

Surveilling Your Children with AirTags

SonicWall Investigating Potential SSL VPN Zero-Day After 20+ Targeted Attacks Reported

Hacker summer camp: What to expect from BSides, Black Hat, and DEF CON

ESET Threat Report H1 2025: ClickFix, infostealer disruptions, and ransomware deathmatch

Antivirus vendors fail to spot persistent, nasty, stealthy Linux backdoor

~ 4 Aug 2025 ~

SonicWall investigates 'cyber incidents,' including ransomware targeting suspected 0-day

NVIDIA Triton Bugs Let Unauthenticated Attackers Execute Code and Hijack AI Servers

Vietnamese Hackers Use PXA Stealer, Hit 4,000 IPs and Steal 200,000 Passwords Globally

Python-powered malware snags hundreds of credit cards, 200K passwords, and 4M cookies

Weekly Recap: VPN 0-Day, Encryption Backdoor, AI Malware, macOS Flaw, ATM Hack & More

Man-in-the-Middle Attack Prevention Guide

The Wild West of Shadow IT

Microsoft Entra Suite delivers 131% ROI by unifying identity and network access

Mozilla flags phishing wave aimed at hijacking trusted Firefox add-ons

PlayPraetor Android Trojan Infects 11,000+ Devices via Fake Google Play Pages and Meta Ads

First Sentencing in Scheme to Help North Koreans Infiltrate US Companies

German phone repair biz collapses following 2023 ransomware attack

The US Military Is Raking in Millions From On-Base Slot Machines

When hyperscalers cant safeguard one nations data from another, dark clouds are ahead

Millions of age checks performed as UK Online Safey Act gets rolling

Chinas botched Great Firewall upgrade invites attacks on its censorship infrastructure

PyRIT AI-Powered Reconnaissance for Cloud Red Teaming

PyRIT AI-Powered Reconnaissance for Cloud Red Teaming

Lazarus Group rises again, this time with malware-laden fake FOSS

~ 3 Aug 2025 ~

Silent Push CEO on cybercrime takedowns: 'It's an ongoing cat-and-mouse game'

~ 2 Aug 2025 ~

CL-STA-0969 Installs Covert Malware in Telecom Networks During 10-Month Espionage Campaign

New Plague PAM Backdoor Exposes Critical Linux Systems to Silent Credential Theft

Akira Ransomware Exploits SonicWall VPNs in Likely Zero-Day Attack on Fully-Patched Devices

Google Will Use AI to Guess Peoples Ages Based on Search History

CISA roasts unnamed critical national infrastructure body for shoddy security hygiene

~ 1 Aug 2025 ~

Friday Squid Blogging: A Case of Squid Fossil Misidentification

Cursor AI Code Editor Fixed Flaw Allowing Attackers to Run Commands via Prompt Injection

OpenAI removes ChatGPT self-doxing option

Tested: Microsoft Recall can still capture credit cards and passwords, a treasure trove for crooks

China says US spies exploited Microsoft Exchange zero-day to steal military info

Attackers Use Fake OAuth Apps with Tycoon Kit to Breach Microsoft 365 Accounts

AI-Generated Malicious npm Package Drains Solana Funds from 1,500+ Before Takedown

You Are What You Eat: Why Your AI Security Tools Are Only as Strong as the Data You Feed Them

Storm-2603 Deploys DNS-Controlled Backdoor in Warlock and LockBit Ransomware Attacks