Port 22

~ 24 Sep 2025 ~

Campaigners urge UK PM Starmer to dump digital ID wheeze before it's announced

Politicos: There is a good strong case for government intervention on JLR cyberattack

~ 23 Sep 2025 ~

Two New Supermicro BMC Bugs Allow Malicious Firmware to Evade Root of Trust Security

Eurojust Arrests 5 in 100M Cryptocurrency Investment Fraud Spanning 23 Countries

U.S. Secret Service Seizes 300 SIM Servers, 100K Cards Threatening U.S. Officials Near UN

Nearly half of businesses suffered deepfaked phone calls against staff

SonicWall releases rootkit-busting firmware update following wave of attacks

SolarWinds Releases Hotfix for Critical CVE-2025-26399 Remote Code Execution Flaw

SIM Farms Are a Spam Plague. A Giant One in New York Threatened US Infrastructure, Feds Say

Third time's the charm? SolarWinds (again) patches critical Web Help Desk RCE

Lean Teams, Higher Stakes: Why CISOs Must Rethink Incident Remediation

ShadowV2 Botnet Exploits Misconfigured AWS Docker Containers for DDoS-for-Hire Service

OnePlus leaves researchers on read over Android bug that exposes texts

Microsoft Purview delivered 30% reduction in data breach likelihood

SIM city: Feds say 100,000-card farms could have killed cell towers in NYC

DHS Has Been Collecting US Citizens DNA for Years

Kaspersky: RevengeHotels checks back in with AI-coded malware

GitHub Mandates 2FA and Short-Lived Tokens to Strengthen npm Supply Chain Security

OpenSSF warns that open source infrastructure doesn't run on thoughts and prayers

BadIIS Malware Spreads via SEO Poisoning Redirects Traffic, Plants Web Shells

GitHub moves to tighten npm security amid phishing, malware plague

Oracle gets to store US users' TikTok data, says Trump

Workers fear for their jobs as JLR's latest shutdown extended

Viessmann Vitogate 300

Schneider Electric SESU

Mitsubishi Electric MELSEC-Q Series CPU Module

AutomationDirect CLICK PLUS

How to Use 1Password's Travel Mode at the Border (2025)

Apples New Memory Integrity Enforcement

Suspected Iran-backed attackers targeting European aerospace sector with novel malware

UK chancellor Putin the blame on Russia for cyber chaos, but evidence says otherwise

EV charging biz zaps customers with data leak scare

~ 22 Sep 2025 ~

ComicForm and SectorJ149 Hackers Deploy Formbook Malware in Eurasian Cyberattacks

Cops cuff another teen over alleged Scattered Spider attack that broke Vegas casinos

Weekly Recap: Chrome 0-Day, AI Hacking Tools, DDR5 Bit-Flips, npm Worm & More

How to Gain Control of AI Agents and Non-Human Identities

EUs cyber agency blames ransomware as Euro airport check-in chaos continues

Car giant Stellantis says customer data nicked after partner vendor pwned

Microsoft Patches Critical Entra ID Flaw Enabling Global Admin Impersonation Across Tenants

Details About Chinese Surveillance and Propaganda Companies

Watch out for SVG files booby-trapped with malware

FOMO? Brit banking biz rolls out AI tools, talks up security

Trump says Michael Dell is part of the team buying TikTok, with Larry Ellison and maybe some Murdochs

A Cyberattack on Jaguar Land Rover Is Causing a Supply Chain Disaster

Tech troubles create aviation chaos on both sides of the Atlantic

Ransomware attack linked to museum break-in and theft of golden exhibits

~ 21 Sep 2025 ~

DPRK Hackers Use ClickFix to Deliver BeaverTail Malware in Crypto Job Scams

~ 20 Sep 2025 ~

LastPass Warns of Fake Repositories Infecting macOS with Atomic Infostealer

Researchers Uncover GPT-4-Powered MalTerminal Malware Creating Ransomware, Reverse Shell

ShadowLeak Zero-Click Flaw Leaks Gmail Data via OpenAI ChatGPT Deep Research Agent

Security News This Week: A Dangerous Worm Is Eating Its Way Through Software Packages

~ 19 Sep 2025 ~

UNC1549 Hacks 34 Devices in 11 Telecom Firms via LinkedIn Job Lures and MINIBIKE Malware

Friday Squid Blogging: Giant Squid vs. Blue Whale

SystemBC Powers REM Proxy With 1,500 Daily VPS Victims Across 80 C2 Servers

Fortra Releases Critical Patch for CVSS 10.0 GoAnywhere MFT Vulnerability

17,500 Phishing Domains Target 316 Brands Across 74 Countries in Global PhaaS Surge

ChatGPT joins human league, now solves CAPTCHAs for the right prompt

Ivanti EPMM holes let miscreants plant shady listeners, CISA says

How To Automate Alert Triage With AI Agents and Confluence SOPs Using Tines

Ding ding: Fortra rings the perfect-10 bell over latest GoAnywhere MFT bug

Russian Hackers Gamaredon and Turla Collaborate to Deploy Kazuar Backdoor in Ukraine

Scattered Spider teen cuffed after buying games and meals with extortion bitcoin

U.K. Arrests Two Teen Scattered Spider Hackers Linked to August 2024 TfL Cyber Attack

One token to pwn them all: Entra ID bug could have granted access to every tenant

Surveying the Global Spyware Market

OpenAI plugs ShadowLeak bug in ChatGPT that let miscreants raid inboxes

Threat landscape for industrial automation systems in Q2 2025

Charities warn Ofcom too soft on Online Safety Act violators

CISA Warns of Two Malware Strains Exploiting Ivanti EPMM CVE-2025-4427 and CVE-2025-4428

Gamaredon X Turla collab

MI6 reveals 'Silent Courier' dark web portal upgrade it hopes will help it recruit new spies

~ 18 Sep 2025 ~

These Are the 15 New York Officials ICE and NYPD Arrested in Manhattan

SonicWall Urges Password Resets After Cloud Backup Breach Affecting Under 5% of Customers

CountLoader Broadens Russian Ransomware Operations With Multi-Version Malware Loader

Google pushes emergency patch for Chrome 0-day - check your browser version now

SilentSync RAT Delivered via Two Malicious PyPI Packages Targeting Python Developers

Microsoft Defender delivered242% return on investment over threeyears

How CISOs Can Drive Effective AI Governance

Crims bust through SonicWall to grab sensitive config data

This Microsoft Entra ID Vulnerability Could Have Been Catastrophic

Cybercriminals pwn 850k+ Americans' healthcare data

Two 'Scattered Spider' teens charged over attack on Londons transport network

Cloudflare DDoSed itself with React useEffect hook blunder

Westermo Network Technologies WeOS 5

Westermo Network Technologies WeOS 5

Schneider Electric Saitel DR & Saitel DP Remote Terminal Unit

Hitachi Energy Service Suite

Hitachi Energy Asset Suite

Dover Fueling Solutions ProGauge MagLink LX4 Devices

Cognex In-Sight Explorer and In-Sight Camera Firmware

Insight Partners confirms ransomware hit, more than 12,000 caught in data dragnet

Google Patches Chrome Zero-Day CVE-2025-10585 as Active V8 Exploit Threatens Millions

Time-of-Check Time-of-Use Attacks Against LLMs

Cybercriminals Have a Weird New Way to Target You With Scam Texts

Panda-monium: China-backed cyber crew spoof Congressman to dig for dirt on US trade talks

Small businesses, big targets: Protecting your business against ransomware

Russian fake-news network, led by an ex-Florida sheriff's deputy, storms back into action with 200+ new sites

TA558 Uses AI-Generated Scripts to Deploy Venom RAT in Brazil Hotel Attacks

~ 17 Sep 2025 ~

Scattered Spider gang feigns retirement, breaks into bank instead

Chinese TA415 Uses VS Code Remote Tunnels to Spy on U.S. Economic Policy Experts