Port 22

~ 4 Aug 2025 ~

The Wild West of Shadow IT

Microsoft Entra Suite delivers 131% ROI by unifying identity and network access

Mozilla flags phishing wave aimed at hijacking trusted Firefox add-ons

PlayPraetor Android Trojan Infects 11,000+ Devices via Fake Google Play Pages and Meta Ads

First Sentencing in Scheme to Help North Koreans Infiltrate US Companies

German phone repair biz collapses following 2023 ransomware attack

The US Military Is Raking in Millions From On-Base Slot Machines

When hyperscalers cant safeguard one nations data from another, dark clouds are ahead

Millions of age checks performed as UK Online Safey Act gets rolling

Chinas botched Great Firewall upgrade invites attacks on its censorship infrastructure

PyRIT AI-Powered Reconnaissance for Cloud Red Teaming

PyRIT AI-Powered Reconnaissance for Cloud Red Teaming

Lazarus Group rises again, this time with malware-laden fake FOSS

~ 3 Aug 2025 ~

Silent Push CEO on cybercrime takedowns: 'It's an ongoing cat-and-mouse game'

~ 2 Aug 2025 ~

CL-STA-0969 Installs Covert Malware in Telecom Networks During 10-Month Espionage Campaign

New Plague PAM Backdoor Exposes Critical Linux Systems to Silent Credential Theft

Akira Ransomware Exploits SonicWall VPNs in Likely Zero-Day Attack on Fully-Patched Devices

Google Will Use AI to Guess Peoples Ages Based on Search History

CISA roasts unnamed critical national infrastructure body for shoddy security hygiene

~ 1 Aug 2025 ~

Friday Squid Blogging: A Case of Squid Fossil Misidentification

Cursor AI Code Editor Fixed Flaw Allowing Attackers to Run Commands via Prompt Injection

OpenAI removes ChatGPT self-doxing option

Tested: Microsoft Recall can still capture credit cards and passwords, a treasure trove for crooks

China says US spies exploited Microsoft Exchange zero-day to steal military info

Attackers Use Fake OAuth Apps with Tycoon Kit to Breach Microsoft 365 Accounts

AI-Generated Malicious npm Package Drains Solana Funds from 1,500+ Before Takedown

You Are What You Eat: Why Your AI Security Tools Are Only as Strong as the Data You Feed Them

Storm-2603 Deploys DNS-Controlled Backdoor in Warlock and LockBit Ransomware Attacks

Florida prison email blunder exposes visitor contact info to inmates

Is your phone spying on you? | Unlocked 403 cybersecurity podcast (S2E5)

Spying on People Through Airportr Luggage Delivery Service

Cybercrooks attached Raspberry Pi to bank network and drained ATM cash

Why the tech industry needs to stand firm on preserving end-to-end encryption

Top spy says LinkedIn profiles that list defence work 'recklessly invite attention of foreign intelligence services'

BrainDamage Payload Generator and Encrypted Shell Stager for Red Teams

~ 31 Jul 2025 ~

Secret Blizzard Deploys Malware in ISP-Level AitM Attacks on Moscow Embassies

Experts Detect Multi-Layer Redirect Tactic Used to Steal Microsoft 365 Login Credentials

As ransomware gangs threaten physical harm, 'I am afraid of what's next,' ex-negotiator says

Gene scanner pays $9.8 million to get feds off its back in security flap

N. Korean Hackers Used Job Lures, Cloud Account Access, and Malware to Steal Millions in Crypto

Microsoft's Azure AI Speech needs just seconds of audio to spit out a convincing deepfake

Beijing summons Nvidia over alleged backdoors in China-bound AI chips

Modernize your identity defense with Microsoft Identity Threat Detection and Response

AI-Driven Trends in Endpoint Security: What the 2025 Gartner Magic Quadrant Reveals

Kremlin goons caught abusing ISPs to spy on Moscow-based diplomats, Microsoft says

The Kremlin's Most Devious Hacking Group Is Using Russian ISPs to Plant Spyware

Frozen in transit: Secret Blizzards AiTM campaign against diplomats

UNC2891 Breaches ATM Network via 4G Raspberry Pi, Tries CAKETAP Rootkit for Fraud

Alert Fatigue, Data Overload, and the Fall of Traditional SIEMs

Silk Typhoon spun a web of patents for offensive cyber tools, report says

Brit watchdog pushes to rein in Microsoft and AWS with 'strategic market status'

NHS disability equipment provider on brink of collapse a year after cyberattack

Hackers Exploit Critical WordPress Theme Flaw to Hijack Sites via Remote Plugin Install

Rockwell Automation Lifecycle Services with VMware

Gralp Systems Gralp FMUS series

Cheating on Quantum Computing Benchmarks

Banning VPNs to protect kids? Good luck with that

This month in security with Tony Anscombe July 2025 edition

Internet exchange points are ignored, vulnerable, and absent from infrastructure protection plans

Lethal Cambodia-Thailand border clash linked to cyber-scam slave camps

The TSA likes facial recognition at airports. Passengers and politicians, not so much

~ 30 Jul 2025 ~

Hackers Use Facebook Ads to Spread JSCEAL Malware via Fake Cryptocurrency Trading Apps

FunkSec Ransomware Decryptor Released Free to Public After Group Goes Dormant

Scammers Unleash Flood of Slick Online Gaming Sites

Critical Dahua Camera Flaws Enable Remote Hijack via ONVIF and File Upload Exploits

Enterprises neglect AI security and attackers have noticed

Chinese Firms Linked to Silk Typhoon Filed 15+ Patents for Cyber Espionage Tools

Users left scrambling for a plan B as Dropbox drops Dropbox Passwords

Minnesota governor calls in the troops after St Paul cyberattack

Product Walkthrough: A Look Inside Pillar's AI Security Platform

Apple Patches Safari Vulnerability Also Exploited as Zero-Day in Google Chrome

Palo Alto Networks inks $25b deal to buy identity-security shop CyberArk

Google Launches DBSC Open Beta in Chrome and Enhances Patch Transparency via Project Zero

Hackers Exploit SAP Vulnerability to Breach Linux Systems and Deploy Auto-Color Malware

Ransomware gang sets deadline to leak 3.5 TB of Ingram Micro data

Scattered Spider Hacker Arrests Halt Attacks, But Copycat Threats Sustain Security Pressure

Measuring the Attack/Defense Balance

Cobalt Strike Beacon delivered via GitHub and social media

Leveraging OSINT from the Dark Web A Practical How-To

~ 29 Jul 2025 ~

CISA caves to Wyden, agrees to release US telco insecurity report - but wont say when

Wiz Uncovers Critical Access Bypass Flaw in AI-Powered Vibe Coding Platform Base44

FBI: Watch out for these signs Scattered Spider is spinning its web around your org

PyPI Warns of Ongoing Phishing Campaign Using Fake Verification Emails and Lookalike Domain

Targeted Across Borders: Digital Transnational Repression, Gender Dimensions, and the Role of Host States

Chaos RaaS Emerges After BlackSuit Takedown, Demanding $300K from U.S. Victims

How the Browser Became the Main Cyber Battleground

Cybercriminals Use Fake Apps to Steal Data and Blackmail Users Across Asias Mobile Networks

Why React Didn't Kill XSS: The New JavaScript Injection Playbook

Raspberry Pi RP2350 A4 update fixes old bugs and dares you to break it again

Samsung HVAC DMS

National Instruments LabVIEW

Delta Electronics DTN Soft

War Games: MoD asks soldiers with 1337 skillz to compete in esports

Aeroflot Hacked

Age Verification Laws Send VPN Use Soaringand Threaten the Open Internet

CISA Adds PaperCut NG/MF CSRF Vulnerability to KEV Catalog Amid Active Exploitation

The hidden risks of browser extensions and how to stay safe

~ 28 Jul 2025 ~

Hackers Breach Toptal GitHub, Publish 10 Malicious npm Packages With 5,000 Downloads

Microsoft spotlights Apple bug patched in March as SharePoint exploits continue

Security pros are drowning in threat-intel data and it's making everything more dangerous