Port 22

~ 14 Jul 2025 ~

Improving IT efficiency with Microsoft Security Copilot in Microsoft Intune and Microsoft Entra

CBI Shuts Down 390K U.K. Tech Support Scam, Arrests Key Operatives in Noida Call Center

AI 'Nudify' Websites Are Raking in Millions of Dollars

eSIM Vulnerability in Kigen's eUICC Cards Exposes Billions of IoT Devices to Malicious Attacks

GPS on the fritz? Britain and France plot a backup plan

Forensic journey: Breaking down the UserAssist artifact structure

UK's NCA disputes claim it's nearly three times less efficient than the FBI

Iran seeks at least three cloud providers to power its government

TREVORspray Credential Spray Toolkit for Azure, Okta, OWA & More

~ 13 Jul 2025 ~

Nvidia warns its GPUs even Blackwells need protection against Rowhammer attacks

You have a fake North Korean IT worker problem - here's how to stop it

~ 12 Jul 2025 ~

GPUHammer: New RowHammer Attack Variant Degrades AI Models on NVIDIA GPUs

Over 600 Laravel Apps Exposed to Remote Code Execution Due to Leaked APP_KEYs on GitHub

4 Arrested Over Scattered Spider Hacking Spree

~ 11 Jul 2025 ~

Squid Dominated the Oceans in the Late Cretaceous

Fortinet Releases Patch for Critical SQL Injection Flaw in FortiWeb (CVE-2025-25257)

CVSS 10 RCE in Wing FTP exploited within 24 hours, security researchers warn

PerfektBlue Bluetooth Vulnerabilities Expose Millions of Vehicles to Remote Code Execution

Securing Data in the AI Era

Critical Wing FTP Server Vulnerability (CVE-2025-47812) Actively Being Exploited in the Wild

Metadata Shows the FBIs Raw Jeffrey Epstein Prison Video Was Likely Modified

Iranian-Backed Pay2Key Ransomware Resurfaces with 80% Profit Share for Cybercriminals

Tradecraft in the Information Age

UK Online Safety Act 'not up to scratch' on misinformation, warn MPs

CISA Adds Citrix NetScaler CVE-2025-5777 to KEV Catalog as Active Exploits Target Enterprises

Security company hired a used car salesman to build a website, and it didn't end well

French cops cuff Russian pro basketball player on ransomware charges

Chinese censorship-busters claim Tencent is trying to kill its WeChat archive

Force Push Scanner Hunt GitHub Dangling Commits for Leaked Secrets

~ 10 Jul 2025 ~

Lovestruck US Air Force worker admits leaking secrets on dating app

Critical mcp-remote Vulnerability Enables Remote Code Execution, Impacting 437,000+ Downloads

Now everybody but Citrix agrees that CitrixBleed 2 is under exploit

DHS Tells Police That Common Protest Activities Are Violent Tactics

Ex-ASML engineer who stole chip tech for Russia gets three years in Dutch prison

Fake Gaming and AI Firms Push Malware on Cryptocurrency Users via Telegram and Discord

Four Arrested in 440M Cyber Attack on Marks & Spencer, Co-op, and Harrods

UK Charges Four in Scattered Spider Ransom Group

What Security Leaders Need to Know About AI Governance for SaaS

New ZuRu Malware Variant Targeting Developers via Trojanized Termius macOS App

AMD Warns of New Transient Scheduler Attacks Impacting a Wide Range of CPUs

Forrester names Microsoft a Leader in the 2025 Zero Trust Platforms Wave report

Russia, hotbed of cybercrime, says nyet to ethical hacking bill

ServiceNow Flaw CVE-2025-3648 Could Lead to Data Exposure via Misconfigured ACLs

Siemens TIA Project-Server and TIA Portal

Siemens TIA Administrator

Siemens Solid Edge

Siemens SIPROTEC 5

Siemens SINEC NMS

Siemens SIMATIC CN 4100

KUNBUS RevPi Webstatus

End-of-Train and Head-of-Train Remote Linking Protocol

Delta Electronics DTM Soft

Advantech iView

NCA arrests four in connection with UK retail ransomware attacks

Using Signal Groups for Activism

Code highlighting with Cursor AI for $500,000

Sovereign-ish: Google Cloud keeps AI data in UK, but not the support

Review: How Passwork 7 helps tame business passwords

At last, a use case for AI agents with high sky-high ROI: Stealing crypto

~ 9 Jul 2025 ~

How to trick ChatGPT into revealing Windows keys? I give up

Gold Melody IAB Exploits Exposed ASP.NET Machine Keys for Unauthorized Access to Targets

McDonalds AI Hiring Bot Exposed Millions of Applicants' Data to Hackers Using the Password 123456

DoNot APT Expands Operations, Targets European Foreign Ministries with LoptikMod Malware

US sanctions alleged North Korean IT sweatshop leader

AMD warns of new Meltdown, Spectre-like bugs affecting CPUs

U.S. Sanctions North Korean Andariel Hacker Behind Fraudulent IT Worker Scheme

How To Automate Ticket Creation, Device Identification and Threat Triage With Tines

The cloud-native imperative for effective cyber resilience

Microsoft expands Zero Trust workshop to cover network, SecOps, and more

Reframing investments in security as investments in the business

Chinese Hacker Xu Zewei Arrested for Ties to Silk Typhoon Group and U.S. Cyber Attacks

Microsoft Patches 130 Vulnerabilities, Including Critical Flaws in SPNEGO and SQL Server

Qantas begins telling some customers that mystery attackers have their home address

Yet Another Strava Privacy Leak

Ingram Micro restarts orders for some following ransomware attack

Privacy campaigners pour cold water on London cops' 1,000 facial recognition arrests

Iranian ransomware crew reemerges, promises big bucks for attacks on US or Israel

Emerging Darknet Marketplaces of 2025 Anatomy Tactics & Trends

Microsoft Patch Tuesday, July 2025 Edition

~ 8 Jul 2025 ~

Hackers Use Leaked Shellter Tool License to Spread Lumma Stealer and SectopRAT Malware

Microsoft enjoys first Patch Tuesday of 2025 with no active exploits

Anatsa Android Banking Trojan Hits 90,000 Users with Fake PDF App on Google Play

Massive browser hijacking campaign infects 2.3M Chrome, Edge users

Enhancing Microsoft 365 security by eliminating high-privilege access

Malicious Pull Request Targets 6,000+ Developers via Vulnerable Ethcode VS Code Extension

5 Ways Identity-based Attacks Are Breaching Retail

RondoDox Botnet Exploits Flaws in TBK DVRs and Four-Faith Routers to Launch DDoS Attacks

BaitTrap: Over 17,000 Fake News Websites Caught Fueling Investment Fraud Globally

The cloud-native imperative for effective cyber resilience

Researchers Uncover Batavia Windows Spyware Stealing Documents from Russian Firms

SUSE launching region-locked support for the sovereignty-conscious

Emerson ValveLink Products

Suspected Chinese cybersnoop grounded in Italy after US tipoff

CISA Adds Four Critical Vulnerabilities to KEV Catalog Due to Active Exploitation

Approach to mainframe penetration testing on z/OS. Deep dive into RACF

Is your password ecosystem ready for the regulators?

Suspected Scattered Spider domains target everyone from manufacturers to Chipotle

~ 7 Jul 2025 ~

SEO Poisoning Campaign Targets 8,500+ SMB Users with Malware Disguised as AI Tools

CitrixBleed 2 exploits are on the loose as security researchers yell and wave their hands

Weekly Recap: Chrome 0-Day, Ivanti Exploits, MacOS Stealers, Crypto Heists and More