Port 22

~ 21 Aug 2025 ~

Google yet to take down 'screenshot-grabbing' Chrome VPN extension

Jim Sanborn Is Auctioning Off the Solution to Part Four of the Kryptos Sculpture

AI crawlers and fetchers are blowing up websites, with Meta and OpenAI the worst offenders

Apple Patches CVE-2025-43300 Zero-Day in iOS, iPadOS, and macOS Exploited in Targeted Attacks

"What happens online stays online" and other cyberbullying myths, debunked

China cut itself off from the global internet for an hour on Wednesday

SIM-Swapper, Scattered Spider Hacker Gets 10 Years

~ 20 Aug 2025 ~

Microsoft stays mum about M365 Copilot on-demand security bypass

DOM-Based Extension Clickjacking Exposes Popular Password Managers to Credential and Data Theft

FBI Warns FSB-Linked Hackers Exploiting Unpatched Cisco Devices for Cyber Espionage

Amazon quietly fixed Q Developer flaws that made AI agent vulnerable to prompt injection, RCE

SEP 12 | The Three Faces of Transnational Repression: The Citizen Lab at APSA Annual Meeting

Experts Find AI Browsers Can Be Tricked by PromptFix Exploit to Run Malicious Hidden Prompts

FBI: Russian spies exploiting a 7-year-old Cisco bug to slurp configs from critical infrastructure

Commvault releases patches for two nasty bug chains after exploits proven

Webinar: Discover and Control Shadow AI Agents in Your Enterprise Before Hackers Do

'Limited' data leak at Aussie telco turns out to be 280K customer details

Phone Searches at the US Border Hit a Record High

Quantum-safe security: Progress towards next-generation cryptography

From Impact to Action: Turning BIA Insights Into Resilient Recovery

North Korea Uses GitHub in Diplomat Cyber Attacks as IT Worker Scheme Hits 320+ Firms

Subverting AIOps Systems Through Poisoned Input Data

DOJ Charges 22-Year-Old for Running RapperBot Botnet Behind 370,000 DDoS Attacks

McDonald's not lovin' it when hacker exposes nuggets of rotten security

Darknet Communications in 2025 From IRC Forums to Telegram Crime Networks

~ 19 Aug 2025 ~

Apache ActiveMQ Flaw Exploited to Deploy DripDropper Malware on Cloud Linux Systems

Don't want drive-by Ollama attackers snooping on your local chats? Patch now

Oregon Man Charged in Rapper Bot DDoS Service

Like burglars closing a door, Apache ActiveMQ attackers patch critical vuln after breaking in

New GodRAT Trojan Targets Trading Firms Using Steganography and Gh0st RAT Code

Ron Deibert Warns Cybersecurity Industry About U.S. Authoritarian Descent

AUG 21 | The Vicious Cycle: Algorithmic Rage Farming, Privatized Subversion, Chilling Effects and the Spread of Authoritarian Practices

Public Exploit for Chained SAP Flaws Exposes Unpatched Systems to Remote Code Execution

Senate Probe Uncovers Allegations of Widespread Abuse in ICE Custody

U.K. Government Drops Apple Encryption Backdoor Order After U.S. Civil Liberties Pushback

Why Your Security Culture is Critical to Mitigating Cyber Risk

Highly Sensitive Medical Cannabis Patient Data Exposed by Unsecured Database

Casino tech outfit Bragg cops to intrusion but says data jackpot untouched

493 Cases of Sextortion Against Children Linked to Notorious Scam Compounds

PyPI Blocks 1,800 Expired-Domain Emails to Prevent Account Takeovers and Supply Chain Attacks

Siemens Mendix SAML Module

Siemens Desigo CC Product Family and SENTRON Powermanager

Zero-Day Exploit in WinRAR File

GodRAT New RAT targeting financial institutions

US spy chief claims UK backed down over Apple backdoor demand

The need for speed: Why organizations are turning to rapid, trustworthy MDR

More customers asking for Google's Data Boundary, says Cloud Experience boss

Browser wars are back, predicts Palo Alto, thanks to AI

Noodlophile Malware Campaign Expands Global Reach with Copyright Phishing Lures

~ 18 Aug 2025 ~

Facial recognition works better in the lab than on the street, researchers show

Microsoft Windows Vulnerability Exploited to Deploy PipeMagic RansomExx Malware

Pot calls kettle black as China dubs US 'surveillance empire' over chip tracking

Weekly Recap: NFC Fraud, Curly COMrades, N-able Exploits, Docker Backdoors & More

Malicious PyPI and npm Packages Discovered Exploiting Dependencies in Supply Chain Attacks

Microsoft's Nuance coughs up $8.5M to rid itself of MOVEit breach suit

Wazuh for Regulatory Compliance

Dissecting PipeMagic: Inside the architecture of a modular backdoor framework

Workday warns of CRM breach after social engineers make off with business contact details

Eavesdropping on Phone Conversations Through Vibrations

Boffins say tool can sniff 5G traffic, launch 'attacks' without using rogue base stations

Every question you ask, every comment you make, I'll be recording you

Evolution of the PipeMagic backdoor: from the RansomExx incident to CVE-2025-29824

Investors beware: AI-powered financial scams swamp social media

Someone's poking the bear with infostealers targeting Russian crypto developers

LostMyPassword Dual Use Password Recovery and Credential Dumping Tool

~ 17 Aug 2025 ~

P2P payment service Zelle sued for enabling payment fraud hell

~ 16 Aug 2025 ~

Election workers fear threats and intimidation without feds' support in 2026

ERMAC V3.0 Banking Trojan Source Code Leak Exposes Full Malware Infrastructure

Russian Group EncryptHub Exploits MSC EvilTwin Vulnerability to Deploy Fickle Stealer Malware

Russia Is Cracking Down on End-to-End Encrypted Calls

~ 15 Aug 2025 ~

Taiwan Web Servers Breached by UAT-7237 Using Customized Open-Source Hacking Tools

Typhoon-adjacent Chinese crew broke into Taiwanese web host

Friday Squid Blogging: Squid-Shaped UFO Spotted Over Texas

Mobile Phishers Target Brokerage Accounts in Ramp and Dump Cashout Scheme

Cisco's Secure Firewall Management Center now not-so secure, springs a CVSS 10 RCE hole

U.S. Sanctions Garantex and Grinex Over $100M in Ransomware-Linked Illicit Crypto Transactions

Zero Trust + AI: Privacy in the Age of Agentic AI

Cisco Warns of CVSS 10.0 FMC RADIUS Flaw Allowing Remote Code Execution

Cyberattack on Dutch prosecution service is keeping speed cameras offline

Trojans Embedded in .svg Files

Telco giant Colt suffers attack, takes systems offline

LLM chatbots trivial to weaponise for data theft, say boffins

Should UK.gov save money by looking for open source alternatives to Microsoft? You decide

MailSniper PowerShell Tool for Exchange Mailbox Search and Credential Discovery

~ 14 Aug 2025 ~

Ransomware crews don't care about your endpoint security they've already killed it

New HTTP/2 'MadeYouReset' Vulnerability Enables Large-Scale DoS Attacks

An Analysis of Chinese Censorship Bias in LLM

Hidden Links: Analyzing Secret Families of VPN Apps

What WeChat Knows: Pervasive First-Party Tracking in a Billion-User Super-App Ecosystem

Psst: wanna buy a legit FBI email account for $40?

Hackers Found Using CrossC2 to Expand Cobalt Strike Beacons Reach to Linux and macOS

'MadeYouReset' HTTP/2 flaw lets attackers DoS servers

Lock down your critical infrastructure, CISA begs admins

Have You Turned Off Your Virtual Oven?

New Android Malware Wave Hits Banking via NFC Relay Fraud, Call Hijacking, and Root Exploits

BtcTurk suspends operations amid alleged $49M hot wallet heist

Simple Steps for Attack Surface Reduction

Law and water: Russia blamed for US court system break-in and Norwegian dam drama

Google Requires Crypto App Licenses in 15 Regions as FBI Warns of $9.9M Scam Losses

Rockwell Automation 1756-ENT2R, 1756-EN4TR, 1756-EN4TRXT