Port 22

~ 27 Aug 2025 ~

ShadowSilk Hits 36 Government Targets in Central Asia and APAC Using Telegram Bots

Putin on the code: DoD reportedly relies on utility written by Russian dev

Nx NPM packages poisoned in AI-assisted supply chain attack

This Is the Group That's Been Swatting US Universities

The 5 Golden Rules of Safe AI Adoption

The intruder is in the house: Storm-0501 attacked Azure, stole data, demanded payment via Teams

Storm-0501s evolving techniques lead to cloud-based ransomware

Salesloft OAuth Breach via Drift AI Chat Agent Exposes Salesforce Customer Data

Microsoft ranked number one in modern endpoint security market share third year in a row

Blind Eagles Five Clusters Target Colombia Using RATs, Phishing Lures, and Dynamic DNS Infra

Salesforce data missing? It might be due to Salesloft breach, Google says

The Era of AI-Generated Ransomware Has Arrived

We Are Still Unable to Secure LLMs from Malicious Inputs

Exploits and vulnerabilities in Q2 2025

Who are you again? Infosec experiencing 'Identity crisis' amid rising login attacks

Dont let back to school become back to (cyber)bullying

BGPs security problems are notorious. Attempts to fix that are a work in progress

Google issued State-backed attack in progress warnings after spotting web hijack scheme

Cybersecurity Workforce Trends in 2025 Skills Gap, Diversity and SOC Readiness

~ 26 Aug 2025 ~

First known AI-powered ransomware uncovered by ESET Research

Citrix Patches Three NetScaler Flaws, Confirms Active Exploitation of CVE-2025-7775

New Sni5Gect Attack Crashes Phones and Downgrades 5G to 4G without Rogue Base Station

First AI-powered ransomware spotted, but it's not active yet

Azure apparatchik shows custom silicon keeping everything locked down

DOGE accused of duplicating critical Social Security database on unsecured cloud

ZipLine attack uses 'Contact Us' forms, White House butler pic to invade sensitive industries

MixShell Malware Delivered via Contact Forms Targets U.S. Supply Chain Manufacturers

ShadowCaptcha Exploits WordPress Sites to Spread Ransomware, Info Stealers, and Crypto Miners

Securing and governing the rise of autonomous agents

Citrix patches trio of NetScaler bugs after attackers beat them to it

Job Posting: Systems and Security Administrator

HOOK Android Trojan Adds Ransomware Overlays, Expands to 107 Remote Commands

DSLRoot, Proxies, and the Threat of Legal Botnets

Crypto thief earns additional prison time for assaulting witness

Schneider Electric Modicon M340 Controller and Communication Modules

INVT VT-Designer and HMITool

Google to Verify All Android Developers in 4 Countries to Block Malicious Apps

Farmers Insurance harvests bad news: 1.1M customers snared in data breach

CISA Adds Three Exploited Vulnerabilities to KEV Catalog Affecting Citrix and Git

Encryption Backdoor in Military/Police Radios

Malware-ridden apps made it into Google's Play Store, scored 19 million downloads

~ 25 Aug 2025 ~

UNC6384 Deploys PlugX via Captive Portal Hijacks and Valid Certificates Targeting Diplomats

Docker Fixes CVE-2025-9074, Critical Container Escape Vulnerability With CVSS Score 9.3

Phishing Campaign Uses UpCrypter in Fake Voicemail Emails to Deliver RAT Payloads

SEP 24 | Surveillance Night Event: Blow Out w/ Ron Deibert

Weekly Recap: Password Manager Flaws, Apple 0-Day, Hidden AI Prompts, In-the-Wild Exploits & More

Why SIEM Rules Fail and How to Fix Them: Insights from 160 Million Attack Simulations

The Citizen Labs Submission on Transnational Repression in the UK

Transparent Tribe Targets Indian Govt With Weaponized Desktop Shortcuts via Phishing

Poor Password Choices

The Mysterious Shortwave Radio Station Stoking US-Russia Nuclear Fears

Australian university used Wi-Fi location data to identify student protestors

AzureStrike Offensive Toolkit for Attacking Azure Active Directory Environments

AWS, Cloudflare, Digital Ocean, and Google helped Feds investigate alleged Rapper Bot DDoS perp

~ 24 Aug 2025 ~

Malicious Go Module Poses as SSH Brute-Force Tool, Steals Credentials via Telegram Bot

Bug bounties: The good, the bad, and the frankly ridiculous ways to do it

~ 23 Aug 2025 ~

GeoServer Exploits, PolarEdge, and Gayfemboy Push Cybercrime Beyond Traditional Botnets

US Government Seeks Medical Records of Trans Youth

~ 22 Aug 2025 ~

Short circuit: Electronics supplier to tech giants suffers ransomware shutdown

Friday Squid Blogging: Bobtail Squid

Linux Malware Delivered via Malicious RAR Filenames Evades Antivirus Detection

Kidney dialysis giant DaVita tells 2.4M people they were snared in ransomware data theft nightmare

Im Spending the Year at the Munk School

Chinese Hackers Murky, Genesis, and Glacial Panda Escalate Cloud and Telecom Espionage

INTERPOL Arrests 1,209 Cybercriminals Across 18 African Nations in Global Crackdown

Automation Is Redefining Pentest Delivery

Criminal background checker APCS faces data breach

Fake CAPTCHA tests trick users into running malware

Interpol bags 1,209 suspects, $97M in cybercrime operation focused on Africa

ChromeAlone Chromium Browser C2 Implant for Red Team Operations

Ex-Developer Jailed Four Years for Sabotaging Ohio Employer with Kill-Switch Malware

AI Agents Need Data Integrity

Modern vehicle cybersecurity trends

Developer jailed for taking down employer's network with kill switch malware

~ 21 Aug 2025 ~

Anthropic scanning Claude chats for queries about DIY nukes for some reason

Microsoft reportedly cuts China's early access to bug disclosures, PoC exploit code

'Impersonation as a service' the next big thing in cybercrime

Pre-Auth Exploit Chains Found in Commvault Could Enable Remote Code Execution Attacks

Cybercriminals Deploy CORNFLAKE.V3 Backdoor via ClickFix Tactic and Fake CAPTCHA Pages

Honey, I shrunk the image and now I'm pwned

Congressman proposes bringing back letters of marque for cyber privateers

Hackers Using New QuirkyLoader Malware to Spread Agent Tesla, AsyncRAT and Snake Keylogger

Weak Passwords and Compromised Accounts: Key Findings from the Blue Report 2025

Think before you Click(Fix): Analyzing the ClickFix social engineering technique

Orange Belgium mega-breach exposes 850K customers to serious fraud

US cops wrap up RapperBot, one of world's biggest DDoS-for-hire rackets

Apple rushes out fix for active zero-day in iOS and macOS

Scattered Spider Hacker Gets 10 Years, $13M Restitution for SIM Swapping Crypto Theft

Colt changes tune, admits data theft as Warlock gang begins auction

Mitsubishi Electric Corporation MELSEC iQ-F Series CPU Module

Google yet to take down 'screenshot-grabbing' Chrome VPN extension

Jim Sanborn Is Auctioning Off the Solution to Part Four of the Kryptos Sculpture

AI crawlers and fetchers are blowing up websites, with Meta and OpenAI the worst offenders

Apple Patches CVE-2025-43300 Zero-Day in iOS, iPadOS, and macOS Exploited in Targeted Attacks

"What happens online stays online" and other cyberbullying myths, debunked

China cut itself off from the global internet for an hour on Wednesday

SIM-Swapper, Scattered Spider Hacker Gets 10 Years

~ 20 Aug 2025 ~

Microsoft stays mum about M365 Copilot on-demand security bypass

DOM-Based Extension Clickjacking Exposes Popular Password Managers to Credential and Data Theft

FBI Warns FSB-Linked Hackers Exploiting Unpatched Cisco Devices for Cyber Espionage