Port 22

~ 25 Nov 2025 ~

Zenitel TCIV-3+

SiRcom SMART Alert (SiSA)

Rockwell Automation Arena Simulation

Opto 22 groov View

CISA warns spyware crews are breaking into Signal and WhatsApp accounts

Russian spy ship theories sink after Orkney blackout traced to wind farm fault

Influencers in the crosshairs: How cybercriminals are targeting content creators

ZTE, China Unicom Liaoning and Dalian Changhai Airport launch 5G-A ISAC private network to elevate low-altitude security and airport safety

~ 24 Nov 2025 ~

Fresh ClickFix attacks use Windows Update trick-pics to steal credentials

Praise Amazon for raising this service from the dead

New Fluent Bit Flaws Expose Cloud to RCE and Stealthy Infrastructure Intrusions

Ex-CISA officials, CISOs dispel 'hacklore,' spread cybersecurity truths

Is Your Android TV Streaming Box Part of a Botnet?

Second Sha1-Hulud Wave Affects 25,000+ Repositories via npm Preinstall Credential Theft

Weekly Recap: Fortinet Exploit, Chrome 0-Day, BadIIS Malware, Record DDoS, SaaS Breach & More

Dec 11 | Signalgate The Rise of Alternative Communication Platforms

Chinese DeepSeek-R1 AI Generates Insecure Code When Prompts Mention Tibet or Uyghurs

Years-old bugs in open source tool left every major cloud open to disruption

Intrusion at real estate finance biz sparks concern for big banks

Shai-Hulud worm returns, belches secrets to 25K GitHub repos

Amazon Is Using Specialized AI Agents for Deep Bug Hunting

FCC guts post-Salt Typhoon telco rules despite ongoing espionage risk

ShadowPad Malware Actively Exploits WSUS Vulnerability for Full System Access

To buy or not to buy: How cybercriminals capitalize on Black Friday

IACR Nullifies Election Because of Lost Decryption Key

CISA orders feds to patch Oracle Identity Manager zero-day after signs of abuse

MDR is the answer now, whats the question?

Championing cyber security: the national UK cyber team's journey at the European Cyber Security Challenge

Cryptology boffins association to re-run election after losing encryption key needed to count votes

70-hour work weeks no longer enough for Infosys founder, who praises Chinas 996 culture

SmbCrawler SMB Share Discovery and Secret-Hunting

~ 23 Nov 2025 ~

Weaponized file name flaw makes updating glob an urgent job

~ 22 Nov 2025 ~

China-Linked APT31 Launches Stealthy Cyberattacks on Russian IT Using Cloud Services

Matrix Push C2 Uses Browser Notifications for Fileless, Cross-Platform Phishing Attacks

CISA Warns of Actively Exploited Critical Oracle Identity Manager Zero-Day Vulnerability

US Border Patrol Is Spying on Millions of American Drivers

~ 21 Nov 2025 ~

Friday Squid Blogging: New Squid Sneaker

Grafana Patches CVSS 10.0 SCIM Flaw Enabling Impersonation and Privilege Escalation

ShinyHunters 'does not like Salesforce at all,' claims the crew accessed Gainsight 3 months ago

More on Rewiring Democracy

Google Brings AirDrop Compatibility to Androids Quick Share Using Rust-Hardened Security

Microsoft named a Leader in the Gartner Magic Quadrant for Access Management for the ninth consecutive year

Why IT Admins Choose Samsung for Mobile Security

APT24 Deploys BADAUDIO in Years-Long Espionage Hitting Taiwan and 1,000+ Domains

Four charged over alleged plot to smuggle Nvidia AI chips into China

SEC Drops SolarWinds Case After Years of High-Stakes Cybersecurity Scrutiny

Russia-linked crooks bought a bank for Christmas to launder cyber loot

AI as Cyberattacker

Salesforce Flags Unauthorized Data Access via Gainsight-Linked OAuth Activity

This Hacker Conference Installed a Literal Anti-Virus Monitoring System

ToddyCat: your hidden email assistant. Part 1

ZTE Launches ZXCSec MAF security solution for large model

Google links Androids Quick Share to Apples AirDrop, without Cupertinos help

Heisenberg Dependency Health Check GitHub Action for Supply Chain Risk

~ 20 Nov 2025 ~

SEC drops SolarWinds lawsuit that painted a target on CISOs everywhere

ShadowRay 2.0 Exploits Unpatched Ray Flaw to Build Self-Spreading GPU Cryptomining Botnet

Tsundere Botnet Expands Using Game Lures and Ethereum-Based C2 on Windows

Four Indicted In Alleged Conspiracy To Smuggle Supercomputers and Nvidia Chips to China

Another Salesforce-linked data breach has ShinyHunters fingerprints all over it

LLM-generated malware is improving, but don't expect autonomous attacks tomorrow

Mozilla Says Its Finally Done With Two-Faced Onerep

ThreatsDay Bulletin: 0-Days, LinkedIn Spies, Crypto Crimes, IoT Flaws and New Malware Waves

CTM360 Exposes a Global WhatsApp Hijacking Campaign: HackOnChat

Fired techie admits sabotaging ex-employer, causing $862K in damage

New Sturnus Android Trojan Quietly Captures Encrypted Chats and Hijacks Devices

TP-Link accuses rival Netgear of 'smear campaign' over alleged China ties

Education boards left gates wide open for PowerSchool mega-breach, say watchdogs

Iran-Linked Hackers Mapped Ship AIS Data Days Before Real-World Missile Strike Attempt

Scam USPS and E-Z Pass Texts and Websites

Opto 22 GRV-EPIC and groov RIO

ICAM365 CCTV Camera Multiple Models

Festo MSE6-C2M/D2M/E2M

Festo Didactic products

Emerson Appleton UPSMON-PRO

Automated Logic WebCTRL Premium Server

Palo Alto kit sees massive surge in malicious activity amid mystery traffic flood

Inside the dark web job market

Blockchain and Node.js abused by Tsundere: an emerging botnet

With the Rise of AI, Cisco Sounds an Urgent Alarm About the Risks of Aging Tech

The OSINT playbook: Find your weak spots before attackers do

TamperedChef Malware Spreads via Fake Software Installers in Ongoing Global Campaign

Palo Alto CEO tips nation-states to weaponize quantum computing by 2029

US, UK, Australia sanction Lockbit gangs hosting provider

~ 19 Nov 2025 ~

Fortinet 'fesses up to second 0-day within a week

WIRED Roundup: DHSs Privacy Breach, AI Romantic Affairs, and Google Sues Text Scammers

Hackers Actively Exploiting 7-Zip Symbolic LinkBased RCE Vulnerability (CVE-2025-11001)

Python-Based WhatsApp Worm Spreads Eternidade Stealer Across Brazilian Devices

WrtHug Exploits Six ASUS WRT Flaws to Hijack Tens of Thousands of EoL Routers Worldwide

Amazon security boss: Hostile countries use cyber targeting for physical military strikes

Application Containment: How to Use Ringfencing to Prevent the Weaponization of Trusted Software

EdgeStepper Implant Reroutes DNS Queries to Deploy Malware via Hijacked Software Updates

ServiceNow AI Agents Can Be Tricked Into Acting Against Each Other via Second-Order Prompts

The Cloudflare Outage May Be a Security Roadmap

Researchers claim 'largest leak ever' after uncovering WhatsApp enumeration flaw

Legal Restrictions on Vulnerability Disclosure

IT threat evolution in Q3 2025. Mobile statistics

IT threat evolution in Q3 2025. Non-mobile statistics

Vaping Is Everywhere in SchoolsSparking a Bathroom Surveillance Boom

PlushDaemon compromises network devices for adversary-in-the-middle attacks

Fortinet Warns of New FortiWeb CVE-2025-58034 Vulnerability Exploited in the Wild