Port 22

~ 14 Oct 2025 ~

Patch Tuesday, October 2025 End of 10 Edition

Chinese Hackers Exploit ArcGIS Server as Backdoor for Over a Year

A New Attack Lets Hackers Steal 2-Factor Authentication Codes From Android Phones

Feds Seize Record-Breaking $15 Billion in Bitcoin From Alleged Scam Empire

Moving Beyond Awareness: How Threat Hunting Builds Readiness

RMPocalypse: Single 8-Byte Write Shatters AMDs SEV-SNP Confidential Computing

New Pixnapping Android Flaw Lets Rogue Apps Steal 2FA Codes Without Permissions

What AI Reveals About Web Applications and Why It Matters

Upcoming Speaking Engagements

Microsoft raises the bar: A smarter way to measure AI for cybersecurity

Cybersecurity Awareness Month 2025: Why software patching matters more than ever

Asahi breach leaves bitter taste as brewer fears personal data slurped

Mozilla is recruiting beta testers for a free, baked-in Firefox VPN

npm, PyPI, and RubyGems Packages Found Sending Developer Data to Discord Channels

Oracle rushes out another emergency E-Business Suite patch as Clop fallout widens

Rockwell Automation 1715 EtherNet/IP Comms Module

3 Best VPN for iPhone (2025), Tested and Reviewed

The Trump Administrations Increased Use of Social Media Surveillance

Researchers Expose TA585s MonsterV2 Malware Capabilities and Attack Chain

British govt agents demand action after UK mega-cyberattacks surge 50%

Signal in the noise: what hashtags reveal about hacktivism in 2025

The king is dead, long live the king! Windows 10 EOL and Windows 11 forensic artifacts

EU biometric border system launches, suffers teeting problems

Satellites Are Leaking the Worlds Secrets: Calls, Texts, Military and Corporate Data

~ 13 Oct 2025 ~

Weekly Recap: WhatsApp Worm, Critical CVEs, Oracle 0-Day, Ransomware Cartel & More

Why Unmonitored JavaScript Is Your Biggest Holiday Security Risk

Rewiring Democracy is Coming Soon

Scattered Lapsus$ Hunters rage-quit the internet (again), promise to return next year

Building a lasting security culture at Microsoft

Researchers Warn RondoDox Botnet is Weaponizing Over 50 Flaws Across 30+ Vendors

Microsoft Locks Down IE Mode After Hackers Turned Legacy Feature Into Backdoor

Microsoft 'illegally' tracked students via 365 Education, says data watchdog

Astaroth Banking Trojan Abuses GitHub to Remain Operational After Takedowns

China probes Qualcomm's Autotalks deal amid rising US trade tensions

Ofcom fines 4chan 20K and counting for pretending UK's Online Safety Act doesn't exist

AI and the Future of American Politics

Dutch government puts Nexperia on a short leash over chip security fears

New Rust-Based Malware "ChaosBot" Uses Discord Channels to Control Victims' PCs

AI-aided malvertising: Exploiting a chatbot to spread scams

Autoswagger Automated discovery and testing of OpenAPI & Swagger endpoints

~ 12 Oct 2025 ~

New Oracle E-Business Suite Bug Could Let Hackers Access Data Without Login

~ 11 Oct 2025 ~

Experts Warn of Widespread SonicWall VPN Compromise Impacting Over 100 Accounts

Hackers Turn Velociraptor DFIR Tool Into Weapon in LockBit Ransomware Attacks

'Happy Gilmore' Producer Buys Spyware Maker NSO Group

~ 10 Oct 2025 ~

Friday Squid Blogging: Sperm Whale Eating a Giant Squid

Stealit Malware Abuses Node.js Single Executable Feature via Game and VPN Installers

Microsoft Warns of Payroll Pirates Hijacking HR SaaS Accounts to Steal Employee Salaries

From Detection to Patch: Fortra Reveals Full Timeline of CVE-2025-10035 Exploitation

The AI SOC Stack of 2026: What Sets Top-Tier Platforms Apart?

175 Malicious npm Packages with 26,000 Downloads Used in Credential Phishing Campaign

DDoS Botnet Aisuru Blankets US ISPs in Record DDoS

From LFI to RCE: Active Exploitation Detected in Gladinet and TrioFox Vulnerability

Pro-Russia hacktivist group dies of cringe after falling into researchers' trap

Microsoft warns of 'payroll pirate' crew looting US university salaries

CL0P-Linked Hackers Breach Dozens of Organizations Through Oracle Software Flaw

Autonomous AI Hacking and the Future of Cybersecurity

Cops nuke BreachForums (again) amid cybercrime supergroup extortion blitz

UK techies' union warns members after breach exposes sensitive personal details

Apple Announces $2 Million Bug Bounty Reward for the Most Dangerous Exploits

North Korean Scammers Are Doing Architectural Design Now

CloudConqueror AWS CloudControl API Attack Surface Mapping and Persistence Tool

~ 9 Oct 2025 ~

From HealthKick to GOVERSHELL: The Evolution of UTA0388's Espionage Malware

New ClayRat Spyware Targets Android Users via Fake WhatsApp and TikTok Apps

It's trivially easy to poison LLMs into spitting out gibberish, says Anthropic

Hackers Access SonicWall Cloud Firewall Backups, Spark Urgent Security Checks

ThreatsDay Bulletin: MS Teams Hack, MFA Hijacking, $2B Crypto Heist, Apple Siri Probe & More

Apple Took Down ICE-Tracking Apps. Their Developers Aren't Giving Up

SaaS Breaches Start with Tokens - What Security Teams Must Watch

Securing agentic AI: Your guide to the Microsoft Ignite sessions catalog

Investigating targeted payroll pirate attacks affecting US universities

From Phishing to Malware: AI Becomes Russia's New Cyber Weapon in War on Ukraine

SonicWall breach hits every cloud backup customer after 5% claim goes up in smoke

Critical Exploit Lets Hackers Bypass Authentication in WordPress Service Finder Theme

Rockwell Automation Stratix

Rockwell Automation Lifecycle Services with Cisco

Hitachi Energy Asset Suite

How Uber seems to know where you are even with restricted location permissions

~ 8 Oct 2025 ~

Hackers Exploit WordPress Sites to Power Next-Gen ClickFix Phishing Attacks

Chinese Hackers Weaponize Open-Source Nezha Tool in New Attack Wave

LockBit, Qilin, and DragonForce Join Forces to Dominate the Ransomware Ecosystem

Take this rob and shove it! Salesforce issues stern retort to ransomware extort

Step Into the Password Graveyard If You Dare (and Join the Live Session)

Severe Figma MCP Vulnerability Lets Hackers Execute Code Remotely Patch Now

Flok License Plate Surveillance

Germany slams brakes on EU's Chat Control device-scanning snoopfest

OpenAI Disrupts Russian, North Korean, and Chinese Hackers Misusing ChatGPT for Cyberattacks

Cybersecurity Awareness Month 2025: Passwords alone are not enough

LLM Black Markets in 2025 Prompt Injection, Jailbreak Sales & Model Leaks

~ 7 Oct 2025 ~

ShinyHunters Wage Broad Corporate Extortion Spree

BatShadow Group Uses New Go-Based 'Vampire Bot' Malware to Hunt Job Seekers

Google's New AI Doesn't Just Find Vulnerabilities It Rewrites Code to Patch Them

Employees regularly paste company secrets into ChatGPT

Disrupting threats targeting Microsoft Teams

New Research: AI Is Already the #1 Data Exfiltration Channel in the Enterprise

Nearly a year after attack, US medical scanning biz gets clear image of stolen patient data

XWorm 6.0 Returns with 35+ Plugins and Enhanced Data Theft Capabilities

New Microsoft Secure Future Initiative (SFI) patterns and practices: Practical guides to strengthen security

Police and military radio maker BK Technologies cops to cyber break-in

OpenAI bans suspected Chinese accounts using ChatGPT to plan surveillance

13-Year Redis Flaw Exposed: CVSS 10.0 Vulnerability Lets Attackers Run Code Remotely