Port 22

~ 12 Dec 2025 ~

Securing GenAI in the Browser: Policy, Isolation, and Data Controls That Actually Work

New React RSC Vulnerabilities Enable DoS and Source Code Exposure

React2Shell Exploitation Escalates into Large-Scale Global Attacks, Forcing Emergency Mitigation

Microsoft promises more bug payouts, with or without a bounty program

Uncle Sam sues ex-Accenture manager over Army cloud security claims

UK watchdog urged to probe GDPR failures in Home Office eVisa rollout

Building Trustworthy AI Agents

Half of exposed React servers remain unpatched amid active exploitation

CISA Flags Actively Exploited GeoServer XXE Flaw in Updated KEV Catalog

Following the digital trail: what happens to data stolen in a phishing attack

Turn me on, turn me off: Zigbee assessment in industrial environments

Crypto-crasher Do Kwon jailed for 15 years over $40bn UST bust

~ 11 Dec 2025 ~

Warnings Mount in Congress Over Expanded US Wiretap Powers

Russian hackers debut simple ransomware service, but store keys in plain text

ThreatsDay Bulletin: Spyware Alerts, Mirai Strikes, Docker Leaks, ValleyRAT Rootkit and 20 More Stories

Doxers Posing as Cops Are Tricking Big Tech Firms Into Sharing People's Private Data

NANOREMOTE Malware Uses Google Drive API for Hidden Control on Windows Systems

Google fixes super-secret 8th Chrome 0-day

AIs Exploiting Smart Contracts

The Impact of Robotic Process Automation (RPA) on Identity and Access Management

Imposter for hire: How fake people can gain very real access

LastPass hammered with 1.2M fine for 2022 breach fiasco

WIRTE Leverages AshenLoader Sideloading to Install the AshTag Espionage Backdoor

Black Hat Europe 2025: Reputation matters even in the ransomware economy

Unpatched Gogs Zero-Day Exploited Across 700+ Instances Amid Active Attacks

Researcher claims Salt Typhoon spies attended Cisco training scheme

Chrome Targeted by Active In-the-Wild Exploit Tied to Undisclosed High-Severity Flaw

Hunting for Mythic in network traffic

Siemens SINEMA Remote Connect Server

Siemens IAM Client

Siemens Gridscale X Prepay

Siemens Energy Services

Siemens Building X - Security Manager Edge Controller

Siemens Advanced Licensing (SALT) Toolkit

OpenPLC_V3

Johnson Controls iSTAR Ultra

Johnson Controls iSTAR

AzeoTech DAQFactory

10K Docker images spray live cloud creds across the internet

Active Attacks Exploit Gladinet's Hard-Coded Keys for Unauthorized Access and Code Execution

Locks, SOCs and a cat in a box: What Schrdinger can teach us about cybersecurity

Users report chaos as Legal Aid Agency stumbles back online after cyberattack

It didnt take long: CVE-2025-55182 is now under active exploitation

React2Shell Exploitation Delivers Crypto Miners and New Malware Across Multiple Sectors

.NET SOAPwn Flaw Opens Door for File Writes and Remote Code Execution via Rogue WSDL

~ 10 Dec 2025 ~

700+ self-hosted Gits battered in 0-day attacks with no fix imminent

Three PCIe Encryption Weaknesses Expose PCIe 5.0+ Systems to Faulty Data Handling

From awareness to action: Building a security-first culture for the agentic AI era

US extradites Ukrainian woman accused of hacking meat processing plant for Russia

Microsoft wont fix .NET RCE bug affecting slew of enterprise apps, researchers say

Webinar: How Attackers Exploit Cloud Misconfigurations Across AWS, AI Models, and Kubernetes

Warning: WinRAR Vulnerability CVE-2025-6218 Under Active Attack by Multiple Threat Groups

Clarity in complexity: New insights for transparent email security

2 Men Linked to Chinas Salt Typhoon Hacker Group Likely Trained in a Cisco Academy

Protecting value at risk - the role of a risk operations center

A Complete Guide to the Jeffrey Epstein Document Dumps

Seeking symmetry during ATT&CK season: How to harness todays diverse analyst and tester landscape to paint a security masterpiece

Microsoft Issues Security Fixes for 56 Flaws, Including Active Exploit and Two Zero-Days

Crisis in Icebergen: How NATO crafts stories to sharpen cyber skills

FBI Warns of Fake Video Scams

Fortinet, Ivanti, and SAP Issue Urgent Patches for Authentication and Code Execution Flaws

~ 9 Dec 2025 ~

North Korea-linked Actors Exploit React2Shell to Deploy New EtherRAT Malware

Microsoft reports 7.8-rated zero day, plus 56 more in December Patch Tuesday

Microsoft Patch Tuesday, December 2025 Edition

How to answer the door when the AI agents come knocking

Shai-Hulud 2.0: Guidance for detecting, investigating, and defending against the supply chain attack

Four Threat Clusters Using CastleLoader as GrayBravo Expands Its Malware Service Infrastructure

Storm-0249 Escalates Ransomware Attacks with ClickFix, Fileless PowerShell, and DLL Sideloading

Porsche panic in Russia as pricey status symbols forget how to car

How to Streamline Zero Trust Using the Shared Signals Framework

Changing the physics of cyber defense

Google Adds Layered Defenses to Chrome to Block Indirect Prompt Injection Threats

STAC6565 Targets Canada in 80% of Attacks as Gold Blade Deploys QWCrypt Ransomware

As humanoid robots enter the mainstream, security pros flag the risk of botnets on legs

Researchers Find Malicious VS Code, Go, npm, and Rust Packages Stealing Developer Data

UK to Europe: The time to counter Russia's information war machine is now

AI vs. Human Drivers

Universal Boot Loader (U-Boot)

Multiple India-based CCTV Cameras

Festo LX Appliance

Goodbye, dark Telegram: Blocks are pushing the underground out

UK finally vows to look at 35-year-old Computer Misuse Act

The big catch: How whaling attacks target top executives

Whitehall rejects 1.8B digital ID price tag but won't say what it will cost

Researchers spot 700 percent increase in hypervisor ransomware attacks

~ 8 Dec 2025 ~

Experts Confirm JS#SMUGGLER Uses Compromised Sites to Deploy NetSupport RAT

193 cybercrims arrested, accused of plotting 'violence-as-a-service'

Weekly Recap: USB Malware, React2Shell, WhatsApp Worms, AI IDE Bugs & More

How Can Retailers Cyber-Prepare for the Most Vulnerable Time of the Year?

Stronger together: New Beazley collaboration enhances cyber resilience

Android Malware FvncBot, SeedSnatcher, and ClayRat Gain Stronger Data Theft Features

Sneeit WordPress RCE Exploited in the Wild While ICTBroadcast Bug Fuels Frost Botnet Attacks

UK moves to strengthen undersea cable defenses as Russian snooping ramps up

Home Office kept police facial recognition flaws to itself, UK data watchdog fumes

MuddyWater Deploys UDPGangster Backdoor in Targeted Turkey-Israel-Azerbaijan Campaign

Substitution Cipher Based on The Voynich Manuscript

Barts Health seeks High Court block after Clop pillages NHS trust data

Block all AI browsers for the foreseeable future: Gartner

Chinas first reusable rocket explodes, but its onboard Ethernet network flew

Apache warns of 10.0-rated flaw in Tika metadata ingestion tool