Port 22

~ 27 Dec 2025 ~

New MongoDB Flaw Lets Unauthenticated Attackers Read Uninitialized Memory

The US Must Stop Underestimating Drone Warfare

~ 26 Dec 2025 ~

Friday Squid Blogging: Squid Camouflage

Trust Wallet Chrome Extension Breach Caused $7 Million Crypto Loss via Malicious Code

China-Linked Evasive Panda Ran DNS Poisoning Campaign to Deliver MgBot Malware

From AI to analog, cybersecurity tabletop exercises look a little different this year

From video games to cyber defense: If you don't think like a hacker, you won't win

Critical LangChain Core Vulnerability Exposes Secrets via Serialization Injection

IoT Hack

~ 25 Dec 2025 ~

ThreatsDay Bulletin: Stealth Loaders, AI Chatbot Flaws AI Exploits, Docker Hack, and 15 More Stories

LastPass 2022 Breach Led to Years-Long Cryptocurrency Thefts, TRM Labs Finds

Fortinet Warns of Active Exploitation of FortiOS SSL VPN 2FA Bypass Vulnerability

CISA Flags Actively Exploited Digiever NVR Vulnerability Allowing Remote Code Execution

Threat landscape for industrial automation systems in Q3 2025

~ 24 Dec 2025 ~

New MacSync macOS Stealer Uses Signed App to Bypass Apple Gatekeeper

Nomani Investment Scam Surges 62% Using AI Deepfake Ads on Social Media

Pen testers accused of 'blackmail' after reporting Eurostar chatbot flaws

Attacks are Evolving: 3 Ways to Protect Your Business in 2026

US shuts down phisherfolks $14.6M password-hoarding platform

SEC Files Charges Over $14 Million Crypto Scam Using Fake AI-Themed Investment Tips

Urban VPN Proxy Surreptitiously Intercepts AI Chats

Italy Fines Apple 98.6 Million Over ATT Rules Limiting App Store Competition

The Age of the All-Access AI Agent Is Here

Evasive Panda APT poisons DNS requests to deliver MgBot

Microsoft wants to replace its entire C and C++ codebase, perhaps by 2030

~ 23 Dec 2025 ~

ServiceNow opens $7.7B ticket titled 'Buy security company, make it Armis'

Two Chrome Extensions Caught Secretly Stealing Credentials from Over 170 Sites

NYPD Sued Over Possible Records Collected Through Muslim Spying Program

21K Nissan customers' data stolen in Red Hat raid

INTERPOL Arrests 574 in Africa; Ukrainian Ransomware Affiliate Pleads Guilty

Passwd: A walkthrough of the Google Workspace Password Manager

Microsoft rushes an out-of-band update for Message Queuing bug

U.S. DoJ Seizes Fraud Domain Behind $14.6 Million Bank Account Takeover Scheme

Critical n8n Flaw (CVSS 9.9) Enables Arbitrary Code Execution Across Thousands of Instances

FCC Bans Foreign-Made Drones and Key Parts Over U.S. National Security Risks

Denmark Accuses Russia of Conducting Two Cyberattacks

Assessing SIEM effectiveness

Chinese Crypto Scammers on Telegram Are Fueling the Biggest Darknet Markets Ever

A brush with online fraud: What are brushing scams and how do I stay safe?

From cheats to exploits: Webrat spreading via GitHub

~ 22 Dec 2025 ~

The Epsteins Suicide Video in the Latest DOJ Release Isnt What It Seems

Poisoned WhatsApp API package steals messages and accounts

Fake WhatsApp API Package on npm Steals Messages, Contacts, and Login Tokens

Palo Alto's new Google Cloud deal boosts AI integration, could save on cloud costs

The Justice Department Just Released More Epstein Files

Spy turned startup CEO: 'The WannaCry of AI will happen'

Weekly Recap: Firewall Exploits, AI Data Theft, Android Hacks, APT Attacks, Insider Leaks & More

How to Browse the Web More Sustainably With a Green Browser

Hacktivists scrape 86M Spotify tracks, claim their aim is to preserve culture

Microsoft Is Finally Killing RC4

Conman and wannabe MI6 agent must repay 125k to romance scam victim

Around 1,000 systems compromised in ransomware attack on Romanian water agency

Android Malware Operations Merge Droppers, SMS Theft, and RAT Capabilities at Scale

Revisiting CVE-2025-50165: A critical flaw in Windows Imaging Component

Theres so much stolen data in the world, South Korea will require face scans to buy a SIM

Through gritted teeth, Apple and Google allow alternative app stores in Japan

~ 21 Dec 2025 ~

Google sends Dark Web Report to its dead services graveyard

Iranian Infy APT Resurfaces with New Malware Activity After Years of Silence

NIST tried to pull the pin on NTP servers after blackout caused atomic clock drift

~ 20 Dec 2025 ~

U.S. DOJ Charges 54 in ATM Jackpotting Scheme Using Ploutus Malware

Hackers Stole Millions of PornHub Users Data for Extortion

Heres Whats in the DOJs Epstein File Releaseand Whats Missing

~ 19 Dec 2025 ~

Russia-Linked Hackers Use Microsoft 365 Device Code Phishing for Account Takeovers

Friday Squid Blogging: Petting a Squid

Cracked Software and YouTube Videos Spread CountLoader and GachiLoader Malware

ATM jackpotting gang accused of unleashing Ploutus malware across US

WatchGuard sounds alarm as critical Firebox flaw comes under active attack

Sydney Uni data goes walkabout after criminals raid code repo

WatchGuard Warns of Active Exploitation of Critical Fireware OS VPN Vulnerability

Nigeria Arrests RaccoonO365 Phishing Developer Linked to Microsoft 365 Attacks

Dismantling Defenses: Trump 2.0 Cyber Year in Review

New UEFI Flaw Enables Early-Boot DMA Attacks on ASRock, ASUS, GIGABYTE, MSI Motherboards

HPE tells customers to patch fast as OneView RCE bug scores a perfect 10

AI Advertising Company Hacked

Ministers confirm breach at UK Foreign Office but details remain murky

Faith in the internet is fading among young Brits

Cloud Atlas activity in the first half of 2025: what changed

AI and cybersecurity: Two sides of the same coin

Yet another DCOM object for lateral movement

China turns on a vast experimental network it says is an heir to ARPANET

~ 18 Dec 2025 ~

Amazon blocked 1,800 suspected North Korean scammers seeking jobs

China-Aligned Threat Group Uses Windows Group Policy to Deploy Espionage Malware

Your cars web browser may be on the road to cyber ruin

HPE OneView Flaw Rated CVSS 10.0 Allows Unauthenticated Remote Code Execution

ICE Seeks Cyber Upgrade to Better Surveil and Investigate Its Employees

Crypto crooks co-opt stolen AWS creds to mine coins

ThreatsDay Bulletin: WhatsApp Hijacks, MCP Leaks, AI Recon, React2Shell Exploit and 15 More Stories

Kim's crypto thieving reached a record $2B in 2025

The Ultra-Realistic AI Face Swapping Platform Driving Romance Scams

The Case for Dynamic AI-SaaS Security as Copilots Scale

New Microsoft e-book: 3 reasons point solutions are holding you back

Someone Boarded a Plane at Heathrow Without a Ticket or Passport

Another bad week for SonicWall as SMA 1000 zero-day under active exploit

FBI dismantles alleged $70M crypto laundering operation

Kimsuky Spreads DocSwap Android Malware via QR Phishing Posing as Delivery App

NHS tech supplier probes cyberattack on internal systems

React2Shell exploitation spreads as Microsoft counts hundreds of hacked machines

CISA Flags Critical ASUS Live Update Flaw After Evidence of Active Exploitation

LongNosedGoblin tries to sniff out governmental affairs in Southeast Asia and Japan

Cisco Warns of Active Attacks Exploiting Unpatched 0-Day in AsyncOS Email Security Appliances