Port 22

~ 17 Nov 2025 ~

Selling your identity to North Korean IT scammers isn't a sustainable side hustle

5 Reasons Why Attackers Are Phishing Over LinkedIn

Collaborative research by Microsoft and NVIDIA on real-time immunity

Dragon Breath Uses RONINGLOADER to Disable Security Tools and Deploy Gh0st RAT

Game over: Europol storms gaming platforms in extremist content sweep

Overconfidence is the new zero-day as teams stumble through cyber simulations

Eurofiber admits crooks swiped data from French unit after cyberattack

More Prompt||GTFO

UK prosecutors seize 4.11M in crypto from Twitter mega-hack culprit

Rust Adoption Drives Android Memory Safety Bugs Below 20% for First Time

What if your romantic AI chatbot cant keep a secret?

Jaguar Land Rover hack cost India's Tata Motors around $2.4 billion and counting

mcp-scan Real-Time Guardrail Monitoring and Dynamic Proxy for MCP Servers

~ 16 Nov 2025 ~

Logitech leaks data after zero-day attack

Microsoft Patch Tuesday, November 2025 Edition

~ 15 Nov 2025 ~

RondoDox Exploits Unpatched XWiki Servers to Pull More Devices Into Its Botnet

Five U.S. Citizens Plead Guilty to Helping North Korean IT Workers Infiltrate 136 Companies

A Major Leak Spills a Chinese Hacking Contractors Tools and Targets

~ 14 Nov 2025 ~

North Korean Hackers Turn JSON Services into Covert Malware Delivery Channels

Friday Squid Blogging: Pilot Whales Eat a Lot of Squid

Researchers Find Serious AI Bugs Exposing Meta, Nvidia, and Microsoft Inference Frameworks

Fortinet finally cops to critical make-me-admin bug under active exploitation

DOJ Issued Seizure Warrant to Starlink Over Satellite Internet Systems Used at Scam Compound

Iranian Hackers Launch SpearSpecter Spy Operation on Defense & Government Targets

Crims poison 150K+ npm packages with token-farming malware

Upcoming Speaking Engagements

FBI flags scam targeting Chinese speakers with bogus surgery bills

Ransomware's Fragmentation Reaches a Breaking Point While LockBit Returns

Chinese Hackers Use Anthropic's AI to Launch Automated Cyber Espionage Campaign

CISA flags imminent threat as Akira ransomware starts hitting Nutanix AHV

Fortinet FortiWeb Flaw Actively Exploited in the Wild Before Company's Silent Patch

The Role of Humans in an AI-Powered World

Clop claims it hacked 'the NHS.' Which bit? Your guess is as good as theirs

Russian Hackers Create 4,300 Fake Travel Sites to Steal Hotel Guests' Payment Data

Kubernetes overlords decide Ingress NGINX isnt worth saving

~ 13 Nov 2025 ~

Chinese spies told Claude to break into about 30 critical orgs. Some attacks succeeded

Ransomed CTO falls on sword, refuses to pay extortion demand

Fake Chrome Extension Safery Steals Ethereum Wallet Seed Phrases Using Sui Blockchain

When Attacks Come Faster Than Patches: Why 2026 Will be the Year of Machine-Speed Security

Operation Endgame Dismantles Rhadamanthys, Venom RAT, and Elysium Botnet in Global Crackdown

Ubuntu 25.10's Rusty sudo holes quickly welded shut

ThreatsDay Bulletin: Cisco 0-Days, AI Bug Bounties, Crypto Heists, State-Linked Leaks and 20 More Stories

Google Sues to Disrupt Chinese SMS Phishing Triad

Extra, extra, read all about it: Washington Post clobbered in Clop caper

CISA Flags Critical WatchGuard Fireware Flaw Exposing 54,000 Fireboxes to No-Login Attacks

Book Review: The Business of Secrets

Rhadamanthys malware admin rattled as cops seize a thousand-plus servers

Siemens Spectrum Power 4

Siemens Solid Edge

Siemens Software Center and Solid Edge

Siemens SICAM P850 family and SICAM P855 family

Siemens LOGO! 8 BM Devices

Siemens COMOS

Siemens Altair Grid Engine

Rockwell Automation Verve Asset Manager

Rockwell Automation Studio 5000 Simulation Interface

Rockwell Automation FactoryTalk Policy Manager

Rockwell Automation FactoryTalk DataMosaix Private Cloud

Rockwell Automation AADvance-Trusted SIS Workstation

Mitsubishi Electric MELSEC iQ-F Series

General Industrial Controls Lynx+ Gateway

Brightpick Mission Control / Internal Logic Control

AVEVA Edge

AVEVA Application Server IDE

NHS supplier ends probe into ransomware attack that contributed to patient death

Over 46,000 Fake npm Packages Flood Registry in Worm-Like Spam Attack

How password managers can be hacked and how to stay safe

~ 12 Nov 2025 ~

DHS Kept Chicago Police Records for Months in Violation of Domestic Espionage Rules

Google sues 25 China-based scammers behind Lighthouse 'phishing for dummies' kit

Google Sues China-Based Hackers Behind $1 Billion Lighthouse Phishing Platform

Amazon Uncovers Attacks Exploited Cisco ISE and Citrix NetScaler as Zero-Day Flaws

[Webinar] Learn How Leading Security Teams Reduce Attack Surface Exposure with DASR

Attackers turned Citrix, Cisco 0-day exploits into custom-malware hellscape

John Scott-Railton on New NSO Group Ownership

Active Directory Under Siege: Why Critical Infrastructure Needs Stronger Security

Microsoft Fixes 63 Security Flaws, Including a Windows Kernel Zero-Day Under Active Attack

Google Launches 'Private AI Compute' Secure AI Processing with On-Device-Level Privacy

On Hacking Back

Bitcoin bandit's 5B bubble bursts as cops wrap seven-year chase

UK's Cyber Security and Resilience Bill makes Parliamentary debut

Aviation watchdog says organized drone attacks will shut UK airports sooner or later

This Is the Platform Google Claims Is Behind a 'Staggering Scam Text Operation

China hates crypto and scams, but is now outraged USA acquired bitcoin from a scammer

Australias spy boss says authoritarian nations ready to commit high-impact sabotage

Initial Access Brokers (IAB) in 2025 From Dark Web Listings to Supply Chain Ransomware Events

WhatsApp Malware 'Maverick' Hijacks Browser Sessions to Target Brazil's Biggest Banks

~ 11 Nov 2025 ~

GootLoader Is Back, Using a New Font Trick to Hide Malware on WordPress Sites

CISO's Expert Guide To AI Supply Chain Attacks

Researchers Detect Malicious npm Package Targeting GitHub-Owned Repositories

Nov 26 | Women, Technology, and Peacemaking Webinar: 25 Years After UNSCR 1325

Why a Lot of People are Getting Hacked by Government Spyware

Android Trojan 'Fantasy Hub' Malware Service Turns Telegram Into a Hub for Hackers

North Korean spies turn Google's Find Hub into remote-wipe weapon

EU's reforms of GDPR, AI slated by privacy activists for 'playing into Big Techs hands'

OWASP Top 10: Broken access control still tops app security list

Hitachi-owned GlobalLogic admits data stolen on 10k current and former staff

Prompt Injection in AI Browsers

UK asks cyberspies to probe whether Chinese buses can be switched off remotely

Cyber insurers paid out over twice as much for UK ransomware attacks last year

UK's Ajax fighting vehicle arrives years late and still sending crew to hospital