Port 22

~ 23 Sep 2025 ~

BadIIS Malware Spreads via SEO Poisoning Redirects Traffic, Plants Web Shells

GitHub moves to tighten npm security amid phishing, malware plague

Oracle gets to store US users' TikTok data, says Trump

Workers fear for their jobs as JLR's latest shutdown extended

Viessmann Vitogate 300

Schneider Electric SESU

Mitsubishi Electric MELSEC-Q Series CPU Module

AutomationDirect CLICK PLUS

How to Use 1Password's Travel Mode at the Border (2025)

Apples New Memory Integrity Enforcement

Suspected Iran-backed attackers targeting European aerospace sector with novel malware

UK chancellor Putin the blame on Russia for cyber chaos, but evidence says otherwise

EV charging biz zaps customers with data leak scare

~ 22 Sep 2025 ~

ComicForm and SectorJ149 Hackers Deploy Formbook Malware in Eurasian Cyberattacks

Cops cuff another teen over alleged Scattered Spider attack that broke Vegas casinos

Weekly Recap: Chrome 0-Day, AI Hacking Tools, DDR5 Bit-Flips, npm Worm & More

How to Gain Control of AI Agents and Non-Human Identities

EUs cyber agency blames ransomware as Euro airport check-in chaos continues

Car giant Stellantis says customer data nicked after partner vendor pwned

Microsoft Patches Critical Entra ID Flaw Enabling Global Admin Impersonation Across Tenants

Details About Chinese Surveillance and Propaganda Companies

Watch out for SVG files booby-trapped with malware

FOMO? Brit banking biz rolls out AI tools, talks up security

Trump says Michael Dell is part of the team buying TikTok, with Larry Ellison and maybe some Murdochs

A Cyberattack on Jaguar Land Rover Is Causing a Supply Chain Disaster

Tech troubles create aviation chaos on both sides of the Atlantic

Ransomware attack linked to museum break-in and theft of golden exhibits

~ 21 Sep 2025 ~

DPRK Hackers Use ClickFix to Deliver BeaverTail Malware in Crypto Job Scams

~ 20 Sep 2025 ~

LastPass Warns of Fake Repositories Infecting macOS with Atomic Infostealer

Researchers Uncover GPT-4-Powered MalTerminal Malware Creating Ransomware, Reverse Shell

ShadowLeak Zero-Click Flaw Leaks Gmail Data via OpenAI ChatGPT Deep Research Agent

Security News This Week: A Dangerous Worm Is Eating Its Way Through Software Packages

~ 19 Sep 2025 ~

UNC1549 Hacks 34 Devices in 11 Telecom Firms via LinkedIn Job Lures and MINIBIKE Malware

Friday Squid Blogging: Giant Squid vs. Blue Whale

SystemBC Powers REM Proxy With 1,500 Daily VPS Victims Across 80 C2 Servers

Fortra Releases Critical Patch for CVSS 10.0 GoAnywhere MFT Vulnerability

17,500 Phishing Domains Target 316 Brands Across 74 Countries in Global PhaaS Surge

ChatGPT joins human league, now solves CAPTCHAs for the right prompt

Ivanti EPMM holes let miscreants plant shady listeners, CISA says

How To Automate Alert Triage With AI Agents and Confluence SOPs Using Tines

Ding ding: Fortra rings the perfect-10 bell over latest GoAnywhere MFT bug

Russian Hackers Gamaredon and Turla Collaborate to Deploy Kazuar Backdoor in Ukraine

Scattered Spider teen cuffed after buying games and meals with extortion bitcoin

U.K. Arrests Two Teen Scattered Spider Hackers Linked to August 2024 TfL Cyber Attack

One token to pwn them all: Entra ID bug could have granted access to every tenant

Surveying the Global Spyware Market

OpenAI plugs ShadowLeak bug in ChatGPT that let miscreants raid inboxes

Threat landscape for industrial automation systems in Q2 2025

Charities warn Ofcom too soft on Online Safety Act violators

CISA Warns of Two Malware Strains Exploiting Ivanti EPMM CVE-2025-4427 and CVE-2025-4428

Gamaredon X Turla collab

MI6 reveals 'Silent Courier' dark web portal upgrade it hopes will help it recruit new spies

~ 18 Sep 2025 ~

These Are the 15 New York Officials ICE and NYPD Arrested in Manhattan

SonicWall Urges Password Resets After Cloud Backup Breach Affecting Under 5% of Customers

CountLoader Broadens Russian Ransomware Operations With Multi-Version Malware Loader

Google pushes emergency patch for Chrome 0-day - check your browser version now

SilentSync RAT Delivered via Two Malicious PyPI Packages Targeting Python Developers

Microsoft Defender delivered242% return on investment over threeyears

How CISOs Can Drive Effective AI Governance

Crims bust through SonicWall to grab sensitive config data

This Microsoft Entra ID Vulnerability Could Have Been Catastrophic

Cybercriminals pwn 850k+ Americans' healthcare data

Two 'Scattered Spider' teens charged over attack on Londons transport network

Cloudflare DDoSed itself with React useEffect hook blunder

Westermo Network Technologies WeOS 5

Westermo Network Technologies WeOS 5

Schneider Electric Saitel DR & Saitel DP Remote Terminal Unit

Hitachi Energy Service Suite

Hitachi Energy Asset Suite

Dover Fueling Solutions ProGauge MagLink LX4 Devices

Cognex In-Sight Explorer and In-Sight Camera Firmware

Insight Partners confirms ransomware hit, more than 12,000 caught in data dragnet

Google Patches Chrome Zero-Day CVE-2025-10585 as Active V8 Exploit Threatens Millions

Time-of-Check Time-of-Use Attacks Against LLMs

Cybercriminals Have a Weird New Way to Target You With Scam Texts

Panda-monium: China-backed cyber crew spoof Congressman to dig for dirt on US trade talks

Small businesses, big targets: Protecting your business against ransomware

Russian fake-news network, led by an ex-Florida sheriff's deputy, storms back into action with 200+ new sites

TA558 Uses AI-Generated Scripts to Deploy Venom RAT in Brazil Hotel Attacks

~ 17 Sep 2025 ~

Scattered Spider gang feigns retirement, breaks into bank instead

Chinese TA415 Uses VS Code Remote Tunnels to Spy on U.S. Economic Policy Experts

From Quantum Hacks to AI Defenses Expert Guide to Building Unbreakable Cyber Resilience

Rethinking AI Data Security: A Buyer's Guide

Axiom Space aims for the International Space Station with its Orbital Data Center Node

Scattered Spider Resurfaces With Financial Sector Attacks Despite Retirement Claims

BreachForums kingpin goes from walk-free deal to 3-year stretch

DOJ Resentences BreachForums Founder to 3 Years for Cybercrime and Possession of CSAM

UK telco Colts recovery from August cyberattack pushes into November

Hacking Electronic Safes

RaccoonO365 Phishing Network Shut Down After Microsoft and Cloudflare Disrupt 338 Domains

UEFI Secure Boot for Linux Arm64 where do we stand?

Ruh-roh. DDR5 memory vulnerable to new Rowhammer attack

Australia to let Big Tech choose its own adventure to enact kids social media ban

~ 16 Sep 2025 ~

Chaos Mesh Critical GraphQL Flaws Enable RCE and Full Kubernetes Cluster Takeover

Microsoft blocks bait for fastest-growing 365 phish kit, seizes 338 domains

SlopAds Fraud Ring Exploits 224 Android Apps to Drive 2.3 Billion Daily Ad Bids

Exposing Pegasus: How the State Spies on You

Criminals broke into the system Google uses to share info with cops

John Scott-Railton on U.K.s Age-Verification Laws

New FileFix Variant Delivers StealC Malware Through Multilingual Phishing Site