Port 22

~ 3 Jul 2025 ~

Meta calls 200M EU fine over pay-or-consent ad model 'unlawful'

Mitsubishi Electric MELSOFT Update Manager

Mitsubishi Electric MELSEC iQ-F Series

Hitachi Energy Relion 670/650 and SAM600-IO Series

Hitachi Energy MicroSCADA X SYS600

Ransomware crew Hunters International shuts down, hands out keys to victims

Surveillance Used by a Drug Cartel

Critical Cisco Vulnerability in Unified CM Grants Root Access via Static Credentials

The Promise and Peril of Digital Security in the Age of Dictatorship

How government cyber cuts will affect you and your business

Let's Encrypt rolls out free security certs for IP addresses

ChatGPT creates phishers paradise by recommending the wrong URLs for major companies

~ 2 Jul 2025 ~

North Korean Hackers Target Web3 with Nim Malware and Use ClickFix in BabyShark Campaign

Cisco scores a perfect 10 - sadly for a critical flaw in its comms platform

CISA warns the Signal clone used by natsec staffers is being attacked, so patch now

A Group of Young Cybercriminals Poses the Most Imminent Threat of Cyberattacks Right Now

23andMe's new owner says your DNA is safe this time

That Network Traffic Looks Legit, But it Could be Hiding a Serious Threat

Hackers Using PDFs to Impersonate Microsoft, DocuSign, and More in Callback Phishing Campaigns

U.S. Sanctions Russian Bulletproof Hosting Provider for Supporting Cybercriminals Behind Ransomware

US drops sanctions on second Russian bulletproof hosting vehicle this year

Vercel's v0 AI Tool Weaponized by Cybercriminals to Rapidly Create Fake Login Pages at Scale

Ubuntu Disables Spectre/Meltdown Protections

Cl0p cybercrime gang's data exfiltration tool found vulnerable to RCE attacks

Gamaredon in 2024: Cranking out spearphishing campaigns against Ukraine with an evolved toolset

UK eyes new laws as cable sabotage blurs line between war and peace

Australian airline Qantas reveals data theft impacting six million customers

Malvertising and TDS Cloaking Tactics Uncovered

~ 1 Jul 2025 ~

Critical Vulnerability in Anthropic's MCP Exposes Developer Machines to Remote Exploits

TA829 and UNK_GreenSec Share Tactics and Infrastructure in Ongoing Malware Campaigns

New Flaw in IDEs Like Visual Studio Code Lets Malicious Extensions Bypass Verified Status

Microsoft admits to Intune forgetfulness

Planning your move to Microsoft Defender portal for all Microsoft Sentinel customers

International Criminal Court swats away 'sophisticated and targeted' cyberattack

A New Maturity Model for Browser Security: Closing the Last-Mile Risk

Google Patches Critical Zero-Day Flaw in Chromes V8 Engine After Active Exploitation

U.S. Arrests Key Facilitator in North Korean IT Worker Scheme, Seizes $7.74 Million

Voltronic Power and PowerShield UPS Monitoring Software

Hitachi Energy Relion 670/650 and SAM600-IO Series

Hitachi Energy MSM

FESTO Hardware Controller, Hardware Servo Press Kit

FESTO Didactic CP, MPS 200, and MPS 400 Firmware

FESTO CODESYS

FESTO Automation Suite, FluidDraw, and Festo Didactic Products

ESET Threat Report H1 2025: Key findings

Iranian Blackout Affected Misinformation Campaigns

Microsoft Removes Password Management from Authenticator App Starting August 2025

Terrible tales of opsec oversights: How cybercrooks get themselves caught

ESET APT Activity Report Q4 2024Q1 2025: Malware sharing, wipers and exploits

Proton bashes Apple and joins antitrust suit that seeks to throw the App Store wide open

~ 30 Jun 2025 ~

US shuts down a string of North Korean IT worker scams

U.S. Agencies Warn of Rising Iranian Cyberattacks on Defense, OT Networks, and Critical Infrastructure

Europol Dismantles $540 Million Cryptocurrency Fraud Network, Arrests Five Suspects

Identities of More Than 80 Americans Stolen for North Korean IT Worker Scams

Jasper Sleet: North Korean remote IT workers evolving tactics to infiltrate organizations

Blind Eagle Uses Proton66 Hosting for Phishing, RAT Deployment on Colombian Banks

British IT worker sentenced to seven months after trashing company network

Senator Chides FBI for Weak Advice on Mobile Security

Scattered Spider crime spree takes flight as focus turns to aviation sector

Leveraging Credentials As Unique Identifiers: A Pragmatic Approach To NHI Inventories

Weekly Recap: Airline Hacks, Citrix 0-Day, Outlook Malware, Banking Trojans and more

Sinaloa drug cartel hired a cybersnoop to identify and kill FBI informants

How Cybersecurity Fears Affect Confidence in Voting Systems

Your browser has ad tech's fingerprints all over it, but there's a clean-up squad in town

Canada orders Chinese CCTV biz Hikvision to quit the country ASAP

OnionC2 Tor Powered Rust Command and Control Framework

It's 2025 and almost half of you are still paying ransomware operators

~ 28 Jun 2025 ~

FBI Warns of Scattered Spider's Expanding Attacks on Airlines Using Social Engineering

Ex-NATO hacker: 'In the cyber world, there's no such thing as a ceasefire'

GIFTEDCROOK Malware Evolves: From Browser Stealer to Intelligence-Gathering Tool

Facebooks New AI Tool Asks to Upload Your Photos for Story Ideas, Sparking Privacy Concerns

ICE Rolls Facial Recognition Tools Out to Officers' Phones

This month in security with Tony Anscombe June 2025 edition

~ 27 Jun 2025 ~

Crims are posing as insurance companies to steal health records and payment info

Over 1,000 SOHO Devices Hacked in China-linked LapDogs Cyber Espionage Campaign

Friday Squid Blogging: What to Do When You Find a Squid Egg Mop

PUBLOAD and Pubshell Malware Used in Mustang Panda's Tibet-Specific Attack

Unveiling RIFT: Enhancing Rust malware analysis through pattern matching

Cisco punts network-security integration as key for agentic AI

Aloha, you mightve been pwned: Hawaiian Airlines discloses cybersecurity event

Business Case for Agentic AI SOC Analysts

Chinese Group Silver Fox Uses Fake Websites to Deliver Sainbox RAT and Hidden Rootkit

US Supreme Court Upholds Texas Porn ID Law

So you CAN turn an entire car into a video game controller

Data spill in aisle 5: Grocery giant Ahold Delhaize says 2.2M affected after cyberattack

MOVEit Transfer Faces Increased Threats as Scanning Surges and CVE Flaws Are Targeted

OneClik Malware Targets Energy Sector Using Microsoft ClickOnce and Golang Backdoors

The Age of Integrity

Sububy A Modular Ruby Suite for Subdomain Enumeration

~ 26 Jun 2025 ~

Critical Open VSX Registry Flaw Exposes Millions of Developers to Supply Chain Attacks

FBI used bitcoin wallet records to peg notorious IntelBroker as UK national

Critical RCE Flaws in Cisco ISE and ISE-PIC Allow Unauthenticated Attackers to Gain Root Access

What if Microsoft just turned you off? Security pro counts the cost of dependency

New FileFix Method Emerges as a Threat Following 517% Rise in ClickFix Attacks

Cisco fixes two critical make-me-root bugs on Identity Services Engine components

The Hidden Risks of SaaS: Why Built-In Protections Aren't Enough for Modern Data Resilience

Building security that lasts: Microsofts journey towards durability at scale

Iranian APT35 Hackers Targeting Israeli Tech Experts with AI-Powered Phishing Attacks

Cyber Criminals Exploit Open-Source Tools to Compromise Financial Institutions Across Africa

Glasgow City Council online services crippled following cyberattack