Port 22

~ 11 Aug 2025 ~

Update WinRAR tools now: RomCom and others exploiting zero-day vulnerability

xsshunter-express Self-Hosted Blind XSS Payload Capture and Analysis

New Win-DDoS Flaws Let Attackers Turn Public Domain Controllers into DDoS Botnet via RPC, LDAP

~ 10 Aug 2025 ~

Trend Micro offers weak workaround for already-exploited critical vuln in management console

Researchers Detail Windows EPM Poisoning Exploit Chain Leading to Domain Privilege Escalation

DEF CON hackers plug security holes in US water systems amid tsunami of threats

How to Protect Yourself From Portable Point-of-Sale Scams

The inside story of the Telemessage saga, and how you can view the data

Linux-Based Lenovo Webcams Flaw Can Be Remotely Exploited for BadUSB Attacks

Researchers Reveal ReVault Attack Targeting Dell ControlVault3 Firmware in 100+ Laptop Models

~ 9 Aug 2025 ~

Researchers Uncover GPT-5 Jailbreak and Zero-Click AI Agent Attacks Exposing Cloud and IoT Systems

A Special Diamond Is the Key to a Fully Open Source Quantum Sensor

CyberArk and HashiCorp Flaws Enable Remote Vault Takeover Without Credentials

The US Court Records System Has Been Hacked

~ 8 Aug 2025 ~

Friday Squid Blogging: New Vulnerability in Squid HTTP Proxy Server

Ex-NSA Chief Paul Nakasone Has a Warning for the Tech World

AI Tools Fuel Brazilian Phishing Scam While Efimer Trojan Steals Crypto from 5,000 Victims

KrebsOnSecurity in New Most Wanted HBO Max Series

Hackers Went Looking for a Backdoor in High-Security Safesand Now Can Open Them in Seconds

Chinese biz using AI to hit US politicians, influencers with propaganda

A Misconfiguration That Haunts Corporate Streaming Platforms Could Expose Sensitive Data

Leaked Credentials Up 160%: What Attackers Are Doing With Them

RubyGems, PyPI Hit by Malicious Packages Stealing Credentials, Crypto, Forcing Security Changes

Star leaky app of the week: StarDict

Black Hat USA 2025: Is a high cyber insurance premium about your risk, or your insurers?

Ex-White House cyber, counter-terrorism guru: Microsoft considers security an annoyance, not a necessity

It Looks Like a School Bathroom Smoke Detector. A Teen Hacker Showed It Could Be an Audio Bug

GreedyBear Steals $1M in Crypto Using 150+ Malicious Firefox Wallet Extensions

Infosec hounds spot prompt injection vuln in Google Gemini apps

Google Project Zero Changes Its Disclosure Policy

UK secretly allows facial recognition scans of passport, immigration databases

UK proxy traffic surges as users consider VPN alternatives amid Online Safety Act

Scammers mass-mailing the Efimer Trojan to steal crypto

Android adware: What is it, and how do I get it off my device?

Prohibition never works, but that didn't stop the UK's Online Safety Act

Veles Googles Open Source Secret Scanner for GCP Key Detection

~ 7 Aug 2025 ~

SocGholish Malware Spread via Ad Tools; Delivers Access to LockBit, Evil Corp, and Others

Why blow up satellites when you can just hack them?

Leak Reveals the Workaday Lives of North Korean IT Scammers

German security researchers say 'Windows Hell No' to Microsoft biometrics for biz

Malicious Go, npm Packages Deliver Cross-Platform Malware, Trigger Remote Data Wipes

Mysterious Crime Spree Targeted National Guard Equipment Stashes

Encryption Made for Police and Military Radios May Be Easily Cracked

Microsoft, CISA warn yet another Exchange server bug can lead to 'total domain compromise'

Microsoft Discloses Exchange Server Flaw Enabling Silent Cloud Access in Hybrid Setups

6,500 Axis Servers Expose Remoting Protocol, 4,000 in U.S. Vulnerable to Exploits

Black Hat USA 2025: Policy compliance and the myth of the silver bullet

The AI-Powered Security Shift: What 2025 Is Teaching Us About Cloud Defense

SonicWall Confirms Patched Vulnerability Behind Recent VPN Attacks, Not a Zero-Day

Announcing public preview: Phishing triage agent in Microsoft Defender

Black Hat's network ops center brings rivals together for a common cause

CISA releases malware analysis for Sharepoint Server attack

Black Hat USA 2025: Does successful cybersecurity today increase cyber-risk tomorrow?

KLM, Air France latest major organizations looted for customer data

Webinar: How to Stop Python Supply Chain Attacksand the Expert Tools You Need

Meta training AI on social media posts? Only 7% in Europe think it's OK

Yealink IP Phones and RPS (Redirect and Provisioning Service)

Rockwell Automation Arena

Packet Power EMX and EG

Johnson Controls FX80 and FX90

EG4 Electronics EG4 Inverters

Dreame Technology iOS and Android Mobile Applications

Delta Electronics DIAView

Burk Technology ARC Solo

China Accuses Nvidia of Putting Backdoors into Their Chips

Amnesty slams Elon Musk's X for 'central role' in fueling 2024 UK riots

Could agentic AI save us from the cybercrisis?

Researchers Uncover ECScape Flaw in Amazon ECS Enabling Cross-Task Credential Theft

Fake VPN and Spam Blocker Apps Tied to VexTrio Used in Ad Fraud, Subscription Scams

~ 6 Aug 2025 ~

A Single Poisoned Document Could Leak Secret Data Via ChatGPT

Microsoft researchers bullish on AI security agent even though it let 74% of malware slip through

Google says the group behind last year's Snowflake attack slurped data from one of its Salesforce instances

AI Slashes Workloads for vCISOs by 68% as SMBs Demand More New Report Reveals

Microsoft Launches Project Ire to Autonomously Classify Malware Using AI Tools

Sharing practical guidance: Launching Microsoft Secure Future Initiative (SFI) patterns and practices

Trend Micro Confirms Active Exploitation of Critical Apex One Flaws in On-Premise Systems

What to Know About Traveling to China for Business

Hackers Hijacked Googles Gemini AI With a Poisoned Calendar Invite to Take Over a Smart Home

CERT-UA Warns of HTA-Delivered C# Malware Attacks Using Court Summons Lures

Who Got Arrested in the Raid on the XSS Crime Forum?

AI Is Transforming Cybersecurity Adversarial Testing - Pentera Founders Vision

Nuclear Experts Say Mixing AI and Nuclear Weapons Is Inevitable

CISA Adds 3 D-Link Router Flaws to KEV Catalog After Active Exploitation Reports

Driver of destruction: How a legitimate driver is being used to take down AV processes

The Semiconductor Industry and Regulatory Compliance

Ransomware-as-a-Service Economy Trends, Targets & Takedowns

~ 5 Aug 2025 ~

Vibe coding tool Cursor's MCP implementation allows persistent code execution

ClickFix Malware Campaign Exploits CAPTCHAs to Spread Cross-Platform Infections

Googles August Patch Fixes Two Qualcomm Vulnerabilities Exploited in the Wild

Cursor AI Code Editor Vulnerability Enables RCE via Malicious MCP File Swaps Post Approval

Patch now: Millions of Dell PCs with Broadcom chips vulnerable to attack

Study finds humans not completely useless at malware detection

Misconfigurations Are Not Vulnerabilities: The Costly Confusion Behind Security Risks

Elevate your protection with expanded Microsoft Defender Experts coverage

How Top CISOs Save Their SOCs from Alert Chaos to Never Miss Real Incidents

Chained bugs in Nvidia's Triton Inference Server lead to full system compromise

15,000 Fake TikTok Shop Domains Deliver Malware, Steal Crypto via AI-Driven Scam Campaign

Tigo Energy Cloud Connect Advanced

Mitsubishi Electric Iconics Digital Solutions Multiple Products

Surveilling Your Children with AirTags