Port 22

~ 11 Sep 2025 ~

Siemens User Management Component (UMC)

Siemens SINEC OS

Siemens SINAMICS Drives

Siemens SIMOTION Tools

Siemens SIMATIC Virtualization as a Service (SIVaaS)

Siemens Industrial Edge Management OS (IEM-OS)

Siemens Apogee PXC and Talon TC Devices

Schneider Electric Modicon M340, BMXNOE0100, and BMXNOE0110

AsyncRAT Exploits ConnectWise ScreenConnect to Steal Credentials and Crypto

Brussels faces privacy crossroads over encryption backdoors

Attacker steals customer data from Brit rail operator LNER during break-in at supplier

Experts scrutinized Ofcom's Online Safety Act governance. They're concerned

Are cybercriminals hacking your systems or just logging in?

BAE Systems surfaces autonomous submarine for military use

NASA bars Chinese citizens from its facilities, networks, even Zoom calls

Beijing went to 'EggStreme' lengths to attack Philippines military, researchers say

~ 10 Sep 2025 ~

Akira ransomware crims abusing trifecta of SonicWall security holes for extortion attacks

Chinese APT Deploys EggStreme Fileless Malware to Breach Philippine Military Systems

Apple slips up on ChillyHell macOS malware, lets it past security . . . for 4 years

CHILLYHELL macOS Backdoor and ZynorRAT RAT Threaten macOS, Windows, and Linux Systems

Microsoft Fixes 80 Flaws Including SMB PrivEsc and Azure CVSS 10.0 Bugs

Jaguar Land Rover U-turns to confirm 'some data' affected after cyber prang

Jagar Land Rover U-turns to confirm 'some data' affected after cyber prang

Apple iPhone Air and iPhone 17 Feature A19 Chips With Spyware-Resistant Memory Safety

Job Opportunity: Information Security Program Manager

China-Linked APT41 Hackers Target U.S. Trade Officials Amid 2025 Negotiations

The Time-Saving Guide for Service Providers: Automating vCISO and Compliance Services

Notes of cyber inspector: three clusters of threat in cyberspace

Here's What to Know About Poland Shooting Down Russian Drones

Watch Out for Salty2FA: New Phishing Kit Targeting US and EU Enterprises

Uncle Sam indicts alleged ransomware kingpin tied to $18B in damages

US Investment in Spyware Is Skyrocketing

Flu jab email mishap exposes hundreds of students' personal data

Cybercrooks ripped the wheels off at Jaguar Land Rover. Here's how not to get taken for a ride

Adobe Commerce Flaw CVE-2025-54236 Lets Hackers Take Over Customer Accounts

SAP Patches Critical NetWeaver (CVSS Up to 10.0) and Previously Exploited S/4HANA Flaws

This Patch Tuesday, SAP is the worst offender and Microsoft users can kinda chill

Dark Web Search Engines in 2025 Rankings, Risks & Ethical Trade-offs

~ 9 Sep 2025 ~

More packages poisoned in npm attack, but would-be crypto thieves left pocket change

Microsoft Patch Tuesday, September 2025 Edition

Cindy Cohn Is Leaving the EFF, but Not the Fight for Digital Rights

New cybersecurity rules land for Defense Department contractors

Axios Abuse and Salty 2FA Kits Fuel Advanced Microsoft 365 Phishing Attacks

Defense Dept didn't protect social media accounts, left stream keys out in public

RatOn Android Malware Detected With NFC Relay and ATS Banking Fraud Capabilities

No gains, just pains as 1.6M fitness phone call recordings exposed online

From MostereRAT to ClickFix: New Malware Campaigns Highlight Rising AI and Phishing Risks

TOR-Based Cryptojacking Attack Expands Through Misconfigured Docker APIs

[Webinar] Shadow AI Agents Multiply Fast Learn How to Detect and Control Them

How Leading CISOs are Getting Budget Approval

What the Plex? Streaming service suffers yet another password spill

Rockwell Automation ThinManager

Rockwell Automation Stratix IOS

Rockwell Automation FactoryTalk Optix

Rockwell Automation FactoryTalk Activation Manager

Rockwell Automation ControlLogix 5580

Rockwell Automation CompactLogix 5480

Rockwell Automation Analytics LogixAI

Rockwell Automation 1783-NATR

ABB Cylon Aspect BMS/BAS

20 Popular npm Packages With 2 Billion Weekly Downloads Compromised in Supply Chain Attack

New Cryptanalysis of the Fiat-Shamir Protocol

Nokia successor HMD spawns secure device biz with Euro-made smartphone

A New Platform Is Launching to Protect Public Servants From an Angry Mob

Anthropic's Claude Code runs code to test if it is safe which might be a big mistake

Preventing business disruption and building cyber-resilience with MDR

UK toughens Online Safety Act with ban on self-harm content

45 Previously Unreported Domains Expose Longstanding Salt Typhoon Cyber Espionage

Forget disappearing messages now Signal will store 100MB of them for you for free

Massive Leak Shows How a Chinese Company Is Exporting the Great Firewall to the World

~ 8 Sep 2025 ~

WhatsApp's former security boss claims reporting infosec failings led to ousting

18 Popular Code Packages Hacked, Rigged to Steal Crypto

The US government has no idea how many cybersecurity pros it employs

GitHub Account Compromise Led to Salesloft Drift Breach Affecting 22 Companies

GPUGate Malware Uses Google Ads and Fake GitHub Commits to Target IT Firms

Drift massive attack traced back to loose Salesloft GitHub account

Dev snared in crypto phishing net, 18 npm packages compromised

Signed Copies of Rewiring Democracy

Salt Typhoon used dozens of domains, going back five years. Did you visit one?

Weekly Recap: Drift Breach Chaos, Zero-Days Active, Patch Warnings, Smarter Threats & More

You Didnt Get Phished You Onboarded the Attacker

PACER buckles under MFA rollout as courts warn of support delays

CISA sounds alarm over TP-Link wireless routers under attack

UK tech minister booted out in weekend cabinet reshuffle

AI in Government

asnip ASN Reconnaissance via Domain and IP Mapping

~ 6 Sep 2025 ~

Noisy Bear Targets Kazakhstan Energy Sector With BarrelFire Phishing Campaign

Malicious npm Packages Impersonate Flashbots, Steal Ethereum Wallet Keys

ICE Has Spyware Now

GOP Cries Censorship Over Spam Filters That Work

Friday Squid Blogging: The Origin and Propagation of Squid

~ 5 Sep 2025 ~

Defense Department Scrambles to Pretend It's Called the War Department

CISA Orders Immediate Patch of Critical Sitecore Vulnerability Under Active Exploitation

The crazy, true story behind the first AI-powered ransomware

Shell to pay: Crims invade your PC with CastleRAT malware, now in C and Python

TAG-150 Develops CastleRAT in Python and C, Expanding CastleLoader Malware Operations

My Latest Book: Rewiring Democracy

Critical, make-me-super-user SAP S/4HANA bug under active exploitation

SAP S/4HANA Critical Vulnerability CVE-2025-42957 Exploited in the Wild

Azure mandatory multifactor authentication: Phase 2 starting in October 2025