Port 22

~ 14 Nov 2025 ~

Kubernetes overlords decide Ingress NGINX isnt worth saving

~ 13 Nov 2025 ~

Chinese spies told Claude to break into about 30 critical orgs. Some attacks succeeded

Ransomed CTO falls on sword, refuses to pay extortion demand

Fake Chrome Extension Safery Steals Ethereum Wallet Seed Phrases Using Sui Blockchain

When Attacks Come Faster Than Patches: Why 2026 Will be the Year of Machine-Speed Security

Operation Endgame Dismantles Rhadamanthys, Venom RAT, and Elysium Botnet in Global Crackdown

Ubuntu 25.10's Rusty sudo holes quickly welded shut

ThreatsDay Bulletin: Cisco 0-Days, AI Bug Bounties, Crypto Heists, State-Linked Leaks and 20 More Stories

Google Sues to Disrupt Chinese SMS Phishing Triad

Extra, extra, read all about it: Washington Post clobbered in Clop caper

CISA Flags Critical WatchGuard Fireware Flaw Exposing 54,000 Fireboxes to No-Login Attacks

Book Review: The Business of Secrets

Rhadamanthys malware admin rattled as cops seize a thousand-plus servers

Siemens Spectrum Power 4

Siemens Solid Edge

Siemens Software Center and Solid Edge

Siemens SICAM P850 family and SICAM P855 family

Siemens LOGO! 8 BM Devices

Siemens COMOS

Siemens Altair Grid Engine

Rockwell Automation Verve Asset Manager

Rockwell Automation Studio 5000 Simulation Interface

Rockwell Automation FactoryTalk Policy Manager

Rockwell Automation FactoryTalk DataMosaix Private Cloud

Rockwell Automation AADvance-Trusted SIS Workstation

Mitsubishi Electric MELSEC iQ-F Series

General Industrial Controls Lynx+ Gateway

Brightpick Mission Control / Internal Logic Control

AVEVA Edge

AVEVA Application Server IDE

NHS supplier ends probe into ransomware attack that contributed to patient death

Over 46,000 Fake npm Packages Flood Registry in Worm-Like Spam Attack

How password managers can be hacked and how to stay safe

~ 12 Nov 2025 ~

DHS Kept Chicago Police Records for Months in Violation of Domestic Espionage Rules

Google sues 25 China-based scammers behind Lighthouse 'phishing for dummies' kit

Google Sues China-Based Hackers Behind $1 Billion Lighthouse Phishing Platform

Amazon Uncovers Attacks Exploited Cisco ISE and Citrix NetScaler as Zero-Day Flaws

[Webinar] Learn How Leading Security Teams Reduce Attack Surface Exposure with DASR

Attackers turned Citrix, Cisco 0-day exploits into custom-malware hellscape

John Scott-Railton on New NSO Group Ownership

Active Directory Under Siege: Why Critical Infrastructure Needs Stronger Security

Microsoft Fixes 63 Security Flaws, Including a Windows Kernel Zero-Day Under Active Attack

Google Launches 'Private AI Compute' Secure AI Processing with On-Device-Level Privacy

On Hacking Back

Bitcoin bandit's 5B bubble bursts as cops wrap seven-year chase

UK's Cyber Security and Resilience Bill makes Parliamentary debut

Aviation watchdog says organized drone attacks will shut UK airports sooner or later

This Is the Platform Google Claims Is Behind a 'Staggering Scam Text Operation

China hates crypto and scams, but is now outraged USA acquired bitcoin from a scammer

Australias spy boss says authoritarian nations ready to commit high-impact sabotage

Initial Access Brokers (IAB) in 2025 From Dark Web Listings to Supply Chain Ransomware Events

WhatsApp Malware 'Maverick' Hijacks Browser Sessions to Target Brazil's Biggest Banks

~ 11 Nov 2025 ~

GootLoader Is Back, Using a New Font Trick to Hide Malware on WordPress Sites

CISO's Expert Guide To AI Supply Chain Attacks

Researchers Detect Malicious npm Package Targeting GitHub-Owned Repositories

Nov 26 | Women, Technology, and Peacemaking Webinar: 25 Years After UNSCR 1325

Why a Lot of People are Getting Hacked by Government Spyware

Android Trojan 'Fantasy Hub' Malware Service Turns Telegram Into a Hub for Hackers

North Korean spies turn Google's Find Hub into remote-wipe weapon

EU's reforms of GDPR, AI slated by privacy activists for 'playing into Big Techs hands'

OWASP Top 10: Broken access control still tops app security list

Hitachi-owned GlobalLogic admits data stolen on 10k current and former staff

Prompt Injection in AI Browsers

UK asks cyberspies to probe whether Chinese buses can be switched off remotely

Cyber insurers paid out over twice as much for UK ransomware attacks last year

UK's Ajax fighting vehicle arrives years late and still sending crew to hospital

Why shadow AI could be your biggest security blind spot

Hackers Exploiting Triofox Flaw to Install Remote Access Tools via Antivirus Feature

Konni Hackers Turn Googles Find Hub into a Remote Data-Wiping Weapon

LLM side-channel attack could allow snoops to guess what you're talking about

~ 10 Nov 2025 ~

Critical federal cybersecurity funding set to resume as government shutdown draws to a close - for now

Phishers try to lure 5K Facebook advertisers with fake business pages

Weekly Recap: Hyper-V Malware, Malicious AI Bots, RDP Exploits, WhatsApp Lockdown and More

New Browser Security Report Reveals Emerging Threats for Enterprises

John Scott-Railton on a New Paragon Infection in Italy

Securing our future: November 2025 progress report on Microsofts Secure Future Initiative

Russian broker pleads guilty to profiting from Yanluowang ransomware attacks

Large-Scale ClickFix Phishing Attacks Target Hotel Systems with PureRAT Malware

GlassWorm Malware Discovered in Three VS Code Extensions with Thousands of Installs

New Attacks Against Secure Enclaves

Allianz UK joins growing list of Clops Oracle E-Business Suite victims

As AI enables bad actors, how are 3,000+ teams responding?

Cisco creating new security model using 30 years of data describing cyber-dramas and saves

Microsoft teases agents that become independent users within the workforce

Reconnoitre Open-Source Reconnaissance and Service Enumeration Tool

~ 9 Nov 2025 ~

Data breach at Chinese infosec firm reveals cyber-weapons and target list

Louvre's pathetic passwords belong in a museum, just not that one

Drilling Down on Uncle Sams Proposed TP-Link Ban

~ 8 Nov 2025 ~

Microsoft Uncovers 'Whisper Leak' Attack That Identifies AI Chat Topics in Encrypted Traffic

Who's watching the watchers? This Mozilla fellow, and her Surveillance Watch map

~ 7 Nov 2025 ~

Samsung Zero-Click Flaw Exploited to Deploy LANDFALL Android Spyware via WhatsApp

The Government Shutdown Is a Ticking Cybersecurity Time Bomb

Friday Squid Blogging: Squid Game: The Challenge, Season Two

Previously unknown Landfall spyware used in 0-day attacks on Samsung phones

From Log4j to IIS, Chinas Hackers Turn Legacy Bugs into Global Espionage Tools

Hidden Logic Bombs in Malware-Laced NuGet Packages Set to Detonate Years After Installation

Whisper Leak: A novel side-channel attack on remote language models

Enterprise Credentials at Risk Same Old, Same Old?

Cybercrims plant destructive time bomb malware in industrial .NET extensions

Google Launches New Maps Feature to Help Businesses Report Review-Based Extortion Attempts