Port 22

~ 17 Dec 2025 ~

Attacks pummeling Cisco AsyncOS 0-day since late November

CEO spills the Tea about massive token farming campaigns

APT28 Targets Ukrainian UKR-net Users in Long-Running Credential Phishing Campaign

New ForumTroll Phishing Attacks Target Russian Scholars Using Fake eLibrary Emails

Border Patrol Bets on Small Drones to Expand US Surveillance Reach

Fix SOC Blind Spots: See Threats to Your Industry & Country in Real Time

Access Fabric: A modern approach to identity and network access

China-Linked Ink Dragon Hacks Governments Using ShadowPad and FINALDRAFT Malware

Blockchain company Nomad to repay users under FTC deal after $186M cyberattack

PwC on securing AI: building trust, compliance and confidence at scale

NATO's battle for cloud sovereignty: speed is existential

Microsoft security updates breaks MSMQ on older Win systems

GhostPoster Malware Found in 17 Firefox Add-ons with 50,000+ Downloads

Deliberate Internet Shutdowns

Microsoft Will Finally Kill an Encryption Cipher That Enabled a Decade of Windows Hacks

England keeping pen and paper exams despite limited digital expansion

Operation ForumTroll continues: Russian political scientists targeted using plagiarism reports

~ 16 Dec 2025 ~

China's Ink Dragon hides out in European government networks

Compromised IAM Credentials Power a Large AWS Crypto Mining Campaign

Analytics provider: We didn't expose smut site data to crims

Rogue NuGet Package Poses as Tracer.Fody, Steals Cryptocurrency Wallet Data

Browser 'privacy' extensions have eye on your AI, log all your chats

SantaStealer stuffs credentials, crypto wallets into a brand new bag

Amazon Exposes Years-Long GRU Cyber Campaign Targeting Energy and Cloud Infrastructure

Why Data Security and Privacy Need to Start in Code

Fortinet FortiGate Under Active Attack Through SAML SSO Authentication Bypass

Most Parked Domains Now Serving Malicious Content

React2Shell Vulnerability Actively Exploited to Deploy Linux Backdoors

From pr0n to playlists and paperclips, trio of breaches spills data of millions

Chinese Surveillance and AI

MI6 chief: we'll be as fluent in Python as we are in Russian

Google to Shut Down Dark Web Monitoring Tool in February 2026

God Mode On: how we attacked a vehicles head unit modem

ESET Threat Report H2 2025

PwC on using AI to turn cybersecurity risk into competitive advantage

No, SoundCloud hasnt started tuning out VPNs. Its mopping up after a cyberattack

~ 15 Dec 2025 ~

Amazon security boss blames Russia's GRU for years-long energy-sector hacks

Featured Chrome Browser Extension Caught Intercepting Millions of Users' AI Chats

FreePBX Patches Critical SQLi, File-Upload, and AUTHTYPE Bypass Flaws Enabling RCE

Defending against the CVE-2025-55182 (React2Shell) vulnerability in React Server Components

Microsoft named an overall leader in KuppingerCole Leadership Compass for Generative AI Defense

Weekly Recap: Apple 0-Days, WinRAR Exploit, LastPass Fines, .NET RCE, OAuth Scams & More

China, Iran are having a field day with React2Shell, Google warns

A Browser Extension Risk Guide After the ShadyPanda Campaign

Phantom Stealer Spread by ISO Phishing Emails Hitting Russian Finance Sector

Delay to European Central Bank messaging project cost the Bank of England 23M

JLR: Payroll data stolen in cybercrime that shook UK economy

Against the Federal Moratorium on State-Level Regulation of AI

VolkLocker Ransomware Exposed by Hard-Coded Master Key Allowing Free Decryption

Apple, Google forced to issue emergency 0-day patches

Denmark takes a Viking swing at VPN-enabled piracy

Legal protection for ethical hacking under Computer Misuse Act is only the first step

Frogblight threatens you with a court case: a new Android banker targets Turkish users

Starlink claims Chinese launch came within 200 meters of broadband satellite

~ 14 Dec 2025 ~

Honeypots can help defenders, or damn them if implemented badly

Upcoming Speaking Engagements

~ 13 Dec 2025 ~

CISA Adds Actively Exploited Sierra Wireless Router Flaw Enabling RCE Attacks

AI Toys for Kids Talk About Sex, Drugs, and Chinese Propaganda

Apple Issues Security Updates After Two WebKit Flaws Found Exploited in the Wild

Fake OSINT and GPT Utility GitHub Repos Spread PyStoreRAT Malware Payloads

~ 12 Dec 2025 ~

Microsoft RasMan DoS 0-day gets unofficial patch - and a working exploit

Friday Squid Blogging: Giant Squid Eating a Diamondback Squid

New Advanced Phishing Kits Use AI and MFA Bypass Tactics to Steal Credentials at Scale

New React vulns leak secrets, invite DoS attacks

Securing GenAI in the Browser: Policy, Isolation, and Data Controls That Actually Work

Black Hat Europe 2025: Was that device designed to be on the internet at all?

New React RSC Vulnerabilities Enable DoS and Source Code Exposure

React2Shell Exploitation Escalates into Large-Scale Global Attacks, Forcing Emergency Mitigation

Microsoft promises more bug payouts, with or without a bounty program

Uncle Sam sues ex-Accenture manager over Army cloud security claims

UK watchdog urged to probe GDPR failures in Home Office eVisa rollout

Building Trustworthy AI Agents

Half of exposed React servers remain unpatched amid active exploitation

CISA Flags Actively Exploited GeoServer XXE Flaw in Updated KEV Catalog

Following the digital trail: what happens to data stolen in a phishing attack

Turn me on, turn me off: Zigbee assessment in industrial environments

Crypto-crasher Do Kwon jailed for 15 years over $40bn UST bust

~ 11 Dec 2025 ~

Warnings Mount in Congress Over Expanded US Wiretap Powers

Russian hackers debut simple ransomware service, but store keys in plain text

ThreatsDay Bulletin: Spyware Alerts, Mirai Strikes, Docker Leaks, ValleyRAT Rootkit and 20 More Stories

Doxers Posing as Cops Are Tricking Big Tech Firms Into Sharing People's Private Data

NANOREMOTE Malware Uses Google Drive API for Hidden Control on Windows Systems

Google fixes super-secret 8th Chrome 0-day

AIs Exploiting Smart Contracts

The Impact of Robotic Process Automation (RPA) on Identity and Access Management

Imposter for hire: How fake people can gain very real access

LastPass hammered with 1.2M fine for 2022 breach fiasco

WIRTE Leverages AshenLoader Sideloading to Install the AshTag Espionage Backdoor

Black Hat Europe 2025: Reputation matters even in the ransomware economy

Unpatched Gogs Zero-Day Exploited Across 700+ Instances Amid Active Attacks

Researcher claims Salt Typhoon spies attended Cisco training scheme

Chrome Targeted by Active In-the-Wild Exploit Tied to Undisclosed High-Severity Flaw

Hunting for Mythic in network traffic

Siemens Energy Services

Siemens Building X - Security Manager Edge Controller

Siemens Advanced Licensing (SALT) Toolkit

OpenPLC_V3

Johnson Controls iSTAR Ultra

Johnson Controls iSTAR

AzeoTech DAQFactory