Port 22

~ 20 Oct 2025 ~

Weekly Recap: F5 Breached, Linux Rootkits, Pixnapping Attack, EtherHiding & More

Analysing ClickFix: 3 Reasons Why Copy/Paste Attacks Are Driving Security Breaches

131 Chrome Extensions Caught Hijacking WhatsApp Web for Massive Spam Campaign

Inside the attack chain: Threat activity targeting Azure Blob Storage

What the Huge AWS Outage Reveals About the Internet

Cybersecurity Awareness Month 2025: Building resilience against ransomware

MSS Claims NSA Used 42 Cyber Tools in Multi-Stage Attack on Beijing Time Systems

Agentic AIs OODA Loop Problem

Anthropic Has a Plan to Keep Its AI From Building a Nuclear Weapon. Will It Work?

UK calls up Armed Forces veterans for digital ID soft launch

XRayC2 Weaponizing AWS X-Ray for Covert Command and Control (C2)

~ 19 Oct 2025 ~

Europol Dismantles SIM Farm Network Powering 49 Million Fake Accounts Worldwide

~ 18 Oct 2025 ~

New .NET CAPI Backdoor Targets Russian Auto and E-Commerce Firms via Phishing ZIPs

Silver Fox Expands Winos 4.0 Attacks to Japan and Malaysia via HoldingHands RAT

Hackers Dox ICE, DHS, DOJ, and FBI Officials

~ 17 Oct 2025 ~

Friday Squid Blogging: Squid Inks Philippines Fisherman

North Korean Hackers Combine BeaverTail and OtterCookie into Advanced JS Malware

Identity Security: Your First and Last Line of Defense

Have I Been Pwned logs 17.6M victims in Prosper breach

Researchers Uncover WatchGuard VPN Bug That Could Let Attackers Take Over Devices

Labor unions sue Trump administration over social media surveillance

Carmakers fear chip crunch as Dutch sanctions hit Nexperia

Microsoft Revokes 200 Fraudulent Certificates Used in Rhysida Ransomware Campaign

Email Bombs Exploit Lax Authentication in Zendesk

A Surprising Amount of Satellite Traffic Is Unencrypted

Post-exploitation framework now also delivered via npm

SEO spam and hidden links: how to protect your website and your reputation

HoneyBee Misconfigured App Generator for Red Team Validation

~ 16 Oct 2025 ~

Why the F5 Hack Created an Imminent Threat for Thousands of Networks

North Korean Hackers Use EtherHiding to Hide Malware Inside Blockchain Smart Contracts

Hackers Abuse Blockchain Smart Contracts to Spread Malware via Infected WordPress Sites

LinkPro Linux Rootkit Uses eBPF to Hide and Activates via Magic TCP Packets

Vulnerability scores, huh, what are they good for? Almost nothing

Microsoft named a Leader in the 2025 Gartner Magic Quadrant for SIEM

Architectures, Risks, and Adoption: How to Assess and Choose the Right AI-SOC Platform

Hackers Deploy Linux Rootkits via Cisco SNMP Flaw in "Zero Disco' Attacks

Chinese cyberspies snoop on Russian IT biz in rare east-on-east attack

Beware the Hidden Costs of Pen Testing

ThreatsDay Bulletin: $15B Crypto Bust, Satellite Spying, Billion-Dollar Smishing, Android RATs & More

Locked out of your Gmail account? Google says phone a friend

Extortion and ransomware drive over half of cyberattacks

One Republican Now Controls a Huge Chunk of US Election Infrastructure

Microsoft kills 9.9-rated ASP.NET Core bug 'our highest ever' score

Senator presses Cisco over firewall flaws that burned US agency

Siemens TeleControl Server Basic

Siemens Solid Edge

Siemens SiPass Integrated

Siemens SINEC NMS

Siemens SIMATIC ET 200SP Communication Processors

Siemens HyperLynx and Industrial Edge App Publisher

Rockwell Automation FactoryTalk ViewPoint

Rockwell Automation FactoryTalk View Machine Edition and PanelView Plus 7

Rockwell Automation FactoryTalk Linx

Rockwell Automation ArmorStart AOP

Hitachi Energy MACH GWS

Auction house Sotheby's finds its data on the block after cyberattack

Tech industry grad hiring crashes 46% as bots do junior work

Cryptocurrency ATMs

CISA Flags Adobe AEM Flaw with Perfect 10.0 Score Already Under Active Attack

Minecraft mods: Should you 'hack' your game?

Machine learning meets malware: how AI-powered ransomware could destroy your business

~ 15 Oct 2025 ~

Chinese Threat Group 'Jewelbug' Quietly Infiltrated Russian IT Network for Months

F5 Breach Exposes BIG-IP Source Code Nation-State Hackers Behind Massive Intrusion

Over 100 VS Code Extensions Exposed Developers to Hidden Supply Chain Risks

How Attackers Bypass Synced Passkeys

The importance of hardening customer support tools against cyberattacks

Devs are writing VS Code extensions that blab secrets by the bucketload

Two New Windows Zero-Days Exploited in the Wild One Affects Every Version Ever Shipped

Maverick: a new banking Trojan abusing WhatsApp in a mass-scale distribution

Two CVSS 10.0 Bugs in Red Lion RTUs Could Hand Hackers Full Industrial Control

Hackers Target ICTBroadcast Servers via Cookie Exploit to Gain Remote Shell Access

New SAP NetWeaver Bug Lets Attackers Take Over Servers Without Login

Apples Bug Bounty Program

Capita fined 14M after 58-hour delay exposed 6.6M records

Mysterious Elephant: a growing threat

When Face Recognition Doesnt Know Your Face Is a Face

IT service desks: The security blind spot that may put your business at risk

Exploit-as-a-Service Resurgence in 2025 Broker Models, Bundles & Subscription Access

~ 14 Oct 2025 ~

Patch Tuesday, October 2025 End of 10 Edition

Chinese Hackers Exploit ArcGIS Server as Backdoor for Over a Year

A New Attack Lets Hackers Steal 2-Factor Authentication Codes From Android Phones

Feds Seize Record-Breaking $15 Billion in Bitcoin From Alleged Scam Empire

Moving Beyond Awareness: How Threat Hunting Builds Readiness

RMPocalypse: Single 8-Byte Write Shatters AMDs SEV-SNP Confidential Computing

New Pixnapping Android Flaw Lets Rogue Apps Steal 2FA Codes Without Permissions

What AI Reveals About Web Applications and Why It Matters

Upcoming Speaking Engagements

Microsoft raises the bar: A smarter way to measure AI for cybersecurity

Cybersecurity Awareness Month 2025: Why software patching matters more than ever

Asahi breach leaves bitter taste as brewer fears personal data slurped

Mozilla is recruiting beta testers for a free, baked-in Firefox VPN

npm, PyPI, and RubyGems Packages Found Sending Developer Data to Discord Channels

Oracle rushes out another emergency E-Business Suite patch as Clop fallout widens

Rockwell Automation 1715 EtherNet/IP Comms Module

3 Best VPN for iPhone (2025), Tested and Reviewed

The Trump Administrations Increased Use of Social Media Surveillance

Researchers Expose TA585s MonsterV2 Malware Capabilities and Attack Chain

British govt agents demand action after UK mega-cyberattacks surge 50%

Signal in the noise: what hashtags reveal about hacktivism in 2025

The king is dead, long live the king! Windows 10 EOL and Windows 11 forensic artifacts