Port 22

~ 4 Jan 2026 ~

Trump admin sends heart emoji to commercial spyware makers with lifted Predator sanctions

8 WhatsApp Features to Boost Your Security and Privacy

Palo Alto Networks security-intel boss calls AI agents 2026's biggest insider threat

~ 3 Jan 2026 ~

How to Protect Your iPhone or Android Device From Spyware

~ 2 Jan 2026 ~

Friday Squid Blogging: Squid Found in Light Fixture

Bitfinex crypto thief who was serving five years thanks Trump for early release

Transparent Tribe Launches New RAT Attacks Against Indian Government and Academia

Cybercrook claims to be selling infrastructure info about three major US utilities

The ROI Problem in Attack Surface Management

Brit lands invite-only Aussie visa after uncovering vuln in government systems

Cybercriminals Abuse Google Cloud Email Feature in Multi-Stage Phishing Campaign

The Kimwolf Botnet is Stalking Your Local Network

LockBit takedown architect gets New Year award from King Charles

Flock Exposes Its AI-Enabled Surveillance Cameras

How Protesters Became Content for the Cops

Cisco XDR in 30: Turning Security Signals Into Confident Action

~ 1 Jan 2026 ~

ThreatsDay Bulletin: GhostAd Drain, macOS Attacks, Proxy Botnets, Cloud Exploits, and 12+ Stories

RondoDox Botnet Exploits Critical React2Shell Flaw to Hijack IoT Devices and Web Servers

How To Browse Faster and Get More Done Using Adapt Browser

~ 31 Dec 2025 ~

Trust Wallet Chrome Extension Hack Drains $8.5M via Shai-Hulud Supply Chain Attack

DarkSpectre Browser Extension Campaigns Exposed After Impacting 8.8 Million Users Worldwide

IBM Warns of Critical API Connect Bug Allowing Remote Authentication Bypass

Researchers Spot Modified Shai-Hulud Worm Testing Payload on npm Registry

European Space Agency hit again as cybercrims claim 200 GB data up for sale

LinkedIn Job Scams

Fears Mount That US Federal Cybersecurity Is Stagnatingor Worse

U.S. Treasury Lifts Sanctions on Three Individuals Linked to Intellexa and Predator Spyware

Discovering the Dimensions of a New Cold War

Hong Kongs newest anti-scam technology is over-the-counter banking

Cybersecurity pros admit to moonlighting as ransomware scum

New Yorks incoming mayor bans Raspberry Pi at his inauguration party

~ 30 Dec 2025 ~

CSA Issues Alert on Critical SmarterMail Bug Allowing Remote Code Execution

An early end to the holidays: 'Heartbleed of MongoDB' is now under active exploit

Silver Fox Targets Indian Users With Tax-Themed Emails Delivering ValleyRAT Malware

How to Integrate AI into Modern SOC Workflows

Mustang Panda Uses Signed Kernel-Mode Rootkit to Load TONESHELL Backdoor

Using AI-Generated Images to Get Refunds

Korean telco failed at femtocell security, exposed customers to snooping and fraud

~ 29 Dec 2025 ~

Indian cops cuff ex-Coinbase rep over selling customer info to crims

Happy 16th Birthday, KrebsOnSecurity.com!

Crims disconnect Wired subscribers from their privacy, publish deets online

Weekly Recap: MongoDB Attacks, Wallet Breaches, Android Spyware, Insider Crime & More

27 Malicious npm Packages Used as Phishing Infrastructure to Steal Login Credentials

MongoDB Vulnerability CVE-2025-14847 Under Active Exploitation Worldwide

Are We Ready to Be Governed by Artificial Intelligence?

Traditional Security Frameworks Leave Organizations Exposed to AI-Specific Attack Vectors

The Worst Hacks of 2025

The New Surveillance State Is You

The Most Dangerous People on the Internet in 2025

The HoneyMyte APT evolves with a kernel-mode rootkit and a ToneShell backdoor

This month in security with Tony Anscombe December 2025 edition

Europe's cloud challenge: Building an Airbus for the digital age

Accused data thief threw MacBook into a river to destroy evidence

~ 28 Dec 2025 ~

Death, torture, and amputation: How cybercrime shook the world in 2025

~ 27 Dec 2025 ~

New MongoDB Flaw Lets Unauthenticated Attackers Read Uninitialized Memory

The US Must Stop Underestimating Drone Warfare

~ 26 Dec 2025 ~

Friday Squid Blogging: Squid Camouflage

Trust Wallet Chrome Extension Breach Caused $7 Million Crypto Loss via Malicious Code

China-Linked Evasive Panda Ran DNS Poisoning Campaign to Deliver MgBot Malware

From AI to analog, cybersecurity tabletop exercises look a little different this year

From video games to cyber defense: If you don't think like a hacker, you won't win

Critical LangChain Core Vulnerability Exposes Secrets via Serialization Injection

IoT Hack

~ 25 Dec 2025 ~

ThreatsDay Bulletin: Stealth Loaders, AI Chatbot Flaws AI Exploits, Docker Hack, and 15 More Stories

LastPass 2022 Breach Led to Years-Long Cryptocurrency Thefts, TRM Labs Finds

Fortinet Warns of Active Exploitation of FortiOS SSL VPN 2FA Bypass Vulnerability

CISA Flags Actively Exploited Digiever NVR Vulnerability Allowing Remote Code Execution

Threat landscape for industrial automation systems in Q3 2025

~ 24 Dec 2025 ~

New MacSync macOS Stealer Uses Signed App to Bypass Apple Gatekeeper

Nomani Investment Scam Surges 62% Using AI Deepfake Ads on Social Media

Pen testers accused of 'blackmail' after reporting Eurostar chatbot flaws

Attacks are Evolving: 3 Ways to Protect Your Business in 2026

US shuts down phisherfolks $14.6M password-hoarding platform

SEC Files Charges Over $14 Million Crypto Scam Using Fake AI-Themed Investment Tips

Urban VPN Proxy Surreptitiously Intercepts AI Chats

Italy Fines Apple 98.6 Million Over ATT Rules Limiting App Store Competition

The Age of the All-Access AI Agent Is Here

Evasive Panda APT poisons DNS requests to deliver MgBot

Microsoft wants to replace its entire C and C++ codebase, perhaps by 2030

~ 23 Dec 2025 ~

ServiceNow opens $7.7B ticket titled 'Buy security company, make it Armis'

Two Chrome Extensions Caught Secretly Stealing Credentials from Over 170 Sites

NYPD Sued Over Possible Records Collected Through Muslim Spying Program

21K Nissan customers' data stolen in Red Hat raid

INTERPOL Arrests 574 in Africa; Ukrainian Ransomware Affiliate Pleads Guilty

Passwd: A walkthrough of the Google Workspace Password Manager

Microsoft rushes an out-of-band update for Message Queuing bug

U.S. DoJ Seizes Fraud Domain Behind $14.6 Million Bank Account Takeover Scheme

Critical n8n Flaw (CVSS 9.9) Enables Arbitrary Code Execution Across Thousands of Instances

FCC Bans Foreign-Made Drones and Key Parts Over U.S. National Security Risks

Denmark Accuses Russia of Conducting Two Cyberattacks

Assessing SIEM effectiveness

Chinese Crypto Scammers on Telegram Are Fueling the Biggest Darknet Markets Ever

A brush with online fraud: What are brushing scams and how do I stay safe?

From cheats to exploits: Webrat spreading via GitHub

~ 22 Dec 2025 ~

The Epsteins Suicide Video in the Latest DOJ Release Isnt What It Seems

Poisoned WhatsApp API package steals messages and accounts

Fake WhatsApp API Package on npm Steals Messages, Contacts, and Login Tokens

Palo Alto's new Google Cloud deal boosts AI integration, could save on cloud costs

The Justice Department Just Released More Epstein Files

Spy turned startup CEO: 'The WannaCry of AI will happen'