Port 22

~ 2 Dec 2025 ~

GlassWorm Returns with 24 Malicious Extensions Impersonating Popular Developer Tools

Malicious npm Package Uses Hidden Prompt and Script to Evade AI Security Tools

Your Data Might Determine How Much You Pay for Eggs

Iran-Linked Hackers Hits Israeli Sectors with New MuddyViper Backdoor in Targeted Attacks

Two Android 0-day bugs disclosed and fixed, plus 105 more to patch

University of Pennsylvania joins list of victims from Clop's Oracle EBS raid

SecAlerts Cuts Through the Noise with a Smarter, Faster Way to Track Vulnerabilities

How to build forward-thinking cybersecurity teams for tomorrow

Europol nukes Cryptomixer laundering hub, seizing 25M in Bitcoin

Kensington and Chelsea confirms IT outage was a data breach after all

FTC schools edtech outfit after intruder walked off with 10M student records

Google Patches 107 Android Flaws, Including Two Framework Bugs Exploited in the Wild

Like Social Media, AI Requires Difficult Choices

Iskra iHUB and iHUB Lite

Industrial Video & Control Longwatch

Kaspersky Security Bulletin 2025. Statistics

MuddyWater: Snakes by the riverbank

India demands smartphone makers install a government app on every handset

~ 1 Dec 2025 ~

India Orders Phone Makers to Pre-Install Sanchar Saathi App to Tackle Telecom Fraud

ShadyPanda Turns Popular Browser Extensions with 4.3 Million Installs Into Spyware

Stealthy browser extensions waited years before infecting 4.3M Chrome, Edge users with backdoors and spyware

Weekly Recap: Hot CVEs, npm Worm Returns, Firefox RCE, M365 Email Raid & More

Four arrested in South Korea over massive IP camera snooping spree

Webinar: The "Agentic" Trojan Horse: Why the New AI Browsers War is a Nightmare for Security Teams

Dutch study finds teen cybercrime is mostly just a phase

New Albiriox MaaS Malware Targets 400+ Apps for On-Device Fraud and Screen Control

Flock Uses Overseas Gig Workers to Build Its Surveillance AI

South Korea's answer to Amazon admits breach exposed 33.7M customers

Banning VPNs

French Football Federation faces own-goal after club software data breach

Tomiris Shifts to Public-Service Implants for Stealthier C2 in Attacks on Government Targets

Oversharing is not caring: Whats at stake if your employees post too much online

Google and Apple ordered to stop fake government TXTs

Swiss government says give M365, and all SaaS, a miss as it lacks end-to-end encryption

~ 30 Nov 2025 ~

CISA Adds Actively Exploited XSS Bug CVE-2021-26829 in OpenPLC ScadaBR to KEV

~ 29 Nov 2025 ~

The WIRED Guide to Digital Opsec for Teens

~ 28 Nov 2025 ~

Legacy Python Bootstrap Scripts Create Domain-Takeover Risk in Multiple PyPI Packages

North Korean Hackers Deploy 197 npm Packages to Spread Updated OtterCookie Malware

Friday Squid Blogging: Flying Neon Squid Found on Israeli Beach

The AI Hype-Machine: Canadas Ill-Advised National Sprint on Artificial Intelligence

Why Organizations Are Turning to RPAM

PostHog admits Shai-Hulud 2.0 was its biggest ever security bungle

Brit telco Brsk confirms breach as bidding begins for 230K+ customer records

GrapheneOS bails on OVHcloud over France's privacy stance

Prompt Injection Through Poetry

MS Teams Guest Access Can Remove Defender Protection When Users Join External Tenants

This month in security with Tony Anscombe November 2025 edition

The AI hype-machine: Canadas ill-advised national sprint on artificial intelligence

Avoiding the kitchen sink: A guide to mixed methods approaches within digital rights governance

TryHackMe races to add women to Christmas cyber challenge roster after backlash

OBR drags in cyber bigwig after Budget leak blunder

UK digital ID plan gets a price tag at last 1.8B

Poems Can Trick AI Into Helping You Make a Nuclear Weapon

Tomiris wreaks Havoc: New tools and techniques of the APT group

Korean web giant Naver acquired crypto exchange Upbit, which reported a $30m heist a day later

~ 27 Nov 2025 ~

Bloody Wolf Expands Java-based NetSupport RAT Attacks in Kyrgyzstan and Uzbekistan

Microsoft to Block Unauthorized Scripts in Entra ID Logins with 2026 CSP Update

Zendesk users targeted as Scattered Lapsus$ Hunters spin up fake support sites

OpenAI cuts off Mixpanel after analytics leak exposes API users

ThreatsDay Bulletin: AI Malware, Voice Bot Flaws, Crypto Laundering, IoT Attacks and 20 More Stories

FCC sounds alarm after emergency tones turned into potty-mouthed radio takeover

Asahi admits ransomware gang may have spilled almost 2M people's data

Gainsight Expands Impacted Customer List Following Salesforce Security Alert

Scottish council still rebuilding systems two years after ransomware attack

What parents should know to protect their children from doxxing

~ 26 Nov 2025 ~

Shai-Hulud v2 Campaign Spreads From npm to Maven, Exposing Thousands of Secrets

Gainsight CEO downplays breach, says only a 'handful' of customers had data stolen

Qilin Ransomware Turns South Korean MSP Breach Into 28-Victim 'Korean Leaks' Data Heist

Botnet takes advantage of AWS outage to smack 28 countries

When Your $2M Security Detection Fails: Can your SOC Save You?

Meet Rey, the Admin of Scattered Lapsus$ Hunters

Mobile industry warns patchwork cyber regs are driving up costs

Webinar: Learn to Spot Risks and Patch Safely with Community-Maintained Tools

Chrome Extension Caught Injecting Hidden Solana Transfer Fees Into Raydium Swaps

The Destruction of a Notorious Myanmar Scam Compound Appears to Have Been Performative

CodeRED emergency alert system CodeDEAD after INC ransomware attack

US Navy scuttles Constellation frigate program for being too slow for tomorrow's threats

RomCom Uses SocGholish Fake Update Attacks to Deliver Mythic Agent Malware

Huawei and Chinese Surveillance

London councils probe cyber incident as shared IT systems knocked offline

Old tech, new vulnerabilities: NTLM abuse, ongoing exploitation in 2025

FBI Reports $262M in ATO Fraud as Researchers Cite Growing AI Phishing and Holiday Scams

Top five cybersecurity Black Friday deals for businesses 2025

Systemic Ransomware Events in 2025 How Jaguar Land Rover Showed What a Category 3 Supply Chain Breach Looks Like

~ 25 Nov 2025 ~

Lifetime access to AI-for-evil WormGPT 4 costs just $220

Corporate predators get more than they bargain for when their prey runs SonicWall firewalls

Years of JSONFormatter and CodeBeautify Leaks Expose Thousands of Passwords and API Keys

ICE Offers Up to $280 Million to Immigrant-Tracking Bounty Hunter Firms

JackFix Uses Fake Windows Update Pop-Ups on Adult Sites to Deliver Multiple Stealers

HashJack attack shows AI browsers can be fooled with a simple #

ToddyCats New Hacking Tools Steal Outlook Emails and Microsoft 365 Access Tokens

Charting the future of SOC: Human and AI collaboration for better security

3 SOC Challenges You Need to Solve Before 2026

Get ready for 2026, the year of AI-aided ransomware

Hackers Hijack Blender 3D Assets to Deploy StealC V2 Data-Stealing Malware

Clop's Oracle EBS rampage reaches Dartmouth College

CISA Warns of Active Spyware Campaigns Hijacking High-Value Signal and WhatsApp Users

Four Ways AI Is Being Used to Strengthen Democracies Worldwide

Festo Compact Vision System, Control Block, Controller, and Operator Unit products

Ashlar-Vellum Cobalt, Xenon, Argon, Lithium, Cobalt Share