Port 22

~ 15 Dec 2025 ~

Amazon security boss blames Russia's GRU for years-long energy-sector hacks

Featured Chrome Browser Extension Caught Intercepting Millions of Users' AI Chats

FreePBX Patches Critical SQLi, File-Upload, and AUTHTYPE Bypass Flaws Enabling RCE

Defending against the CVE-2025-55182 (React2Shell) vulnerability in React Server Components

Microsoft named an overall leader in KuppingerCole Leadership Compass for Generative AI Defense

Weekly Recap: Apple 0-Days, WinRAR Exploit, LastPass Fines, .NET RCE, OAuth Scams & More

China, Iran are having a field day with React2Shell, Google warns

A Browser Extension Risk Guide After the ShadyPanda Campaign

Phantom Stealer Spread by ISO Phishing Emails Hitting Russian Finance Sector

Delay to European Central Bank messaging project cost the Bank of England 23M

JLR: Payroll data stolen in cybercrime that shook UK economy

Against the Federal Moratorium on State-Level Regulation of AI

VolkLocker Ransomware Exposed by Hard-Coded Master Key Allowing Free Decryption

Apple, Google forced to issue emergency 0-day patches

Denmark takes a Viking swing at VPN-enabled piracy

Legal protection for ethical hacking under Computer Misuse Act is only the first step

Frogblight threatens you with a court case: a new Android banker targets Turkish users

Starlink claims Chinese launch came within 200 meters of broadband satellite

~ 14 Dec 2025 ~

Honeypots can help defenders, or damn them if implemented badly

Upcoming Speaking Engagements

~ 13 Dec 2025 ~

CISA Adds Actively Exploited Sierra Wireless Router Flaw Enabling RCE Attacks

AI Toys for Kids Talk About Sex, Drugs, and Chinese Propaganda

Apple Issues Security Updates After Two WebKit Flaws Found Exploited in the Wild

Fake OSINT and GPT Utility GitHub Repos Spread PyStoreRAT Malware Payloads

~ 12 Dec 2025 ~

Microsoft RasMan DoS 0-day gets unofficial patch - and a working exploit

Friday Squid Blogging: Giant Squid Eating a Diamondback Squid

New Advanced Phishing Kits Use AI and MFA Bypass Tactics to Steal Credentials at Scale

New React vulns leak secrets, invite DoS attacks

Securing GenAI in the Browser: Policy, Isolation, and Data Controls That Actually Work

Black Hat Europe 2025: Was that device designed to be on the internet at all?

New React RSC Vulnerabilities Enable DoS and Source Code Exposure

React2Shell Exploitation Escalates into Large-Scale Global Attacks, Forcing Emergency Mitigation

Microsoft promises more bug payouts, with or without a bounty program

Uncle Sam sues ex-Accenture manager over Army cloud security claims

UK watchdog urged to probe GDPR failures in Home Office eVisa rollout

Building Trustworthy AI Agents

Half of exposed React servers remain unpatched amid active exploitation

CISA Flags Actively Exploited GeoServer XXE Flaw in Updated KEV Catalog

Following the digital trail: what happens to data stolen in a phishing attack

Turn me on, turn me off: Zigbee assessment in industrial environments

Crypto-crasher Do Kwon jailed for 15 years over $40bn UST bust

~ 11 Dec 2025 ~

Warnings Mount in Congress Over Expanded US Wiretap Powers

Russian hackers debut simple ransomware service, but store keys in plain text

ThreatsDay Bulletin: Spyware Alerts, Mirai Strikes, Docker Leaks, ValleyRAT Rootkit and 20 More Stories

Doxers Posing as Cops Are Tricking Big Tech Firms Into Sharing People's Private Data

NANOREMOTE Malware Uses Google Drive API for Hidden Control on Windows Systems

Google fixes super-secret 8th Chrome 0-day

AIs Exploiting Smart Contracts

The Impact of Robotic Process Automation (RPA) on Identity and Access Management

Imposter for hire: How fake people can gain very real access

LastPass hammered with 1.2M fine for 2022 breach fiasco

WIRTE Leverages AshenLoader Sideloading to Install the AshTag Espionage Backdoor

Black Hat Europe 2025: Reputation matters even in the ransomware economy

Unpatched Gogs Zero-Day Exploited Across 700+ Instances Amid Active Attacks

Researcher claims Salt Typhoon spies attended Cisco training scheme

Chrome Targeted by Active In-the-Wild Exploit Tied to Undisclosed High-Severity Flaw

Hunting for Mythic in network traffic

Siemens SINEMA Remote Connect Server

Siemens IAM Client

Siemens Gridscale X Prepay

Siemens Energy Services

Siemens Building X - Security Manager Edge Controller

Siemens Advanced Licensing (SALT) Toolkit

OpenPLC_V3

Johnson Controls iSTAR Ultra

Johnson Controls iSTAR

AzeoTech DAQFactory

10K Docker images spray live cloud creds across the internet

Active Attacks Exploit Gladinet's Hard-Coded Keys for Unauthorized Access and Code Execution

Locks, SOCs and a cat in a box: What Schrdinger can teach us about cybersecurity

Users report chaos as Legal Aid Agency stumbles back online after cyberattack

It didnt take long: CVE-2025-55182 is now under active exploitation

React2Shell Exploitation Delivers Crypto Miners and New Malware Across Multiple Sectors

.NET SOAPwn Flaw Opens Door for File Writes and Remote Code Execution via Rogue WSDL

~ 10 Dec 2025 ~

700+ self-hosted Gits battered in 0-day attacks with no fix imminent

Three PCIe Encryption Weaknesses Expose PCIe 5.0+ Systems to Faulty Data Handling

From awareness to action: Building a security-first culture for the agentic AI era

US extradites Ukrainian woman accused of hacking meat processing plant for Russia

Microsoft wont fix .NET RCE bug affecting slew of enterprise apps, researchers say

Webinar: How Attackers Exploit Cloud Misconfigurations Across AWS, AI Models, and Kubernetes

Warning: WinRAR Vulnerability CVE-2025-6218 Under Active Attack by Multiple Threat Groups

Clarity in complexity: New insights for transparent email security

2 Men Linked to Chinas Salt Typhoon Hacker Group Likely Trained in a Cisco Academy

Protecting value at risk - the role of a risk operations center

A Complete Guide to the Jeffrey Epstein Document Dumps

Seeking symmetry during ATT&CK season: How to harness todays diverse analyst and tester landscape to paint a security masterpiece

Microsoft Issues Security Fixes for 56 Flaws, Including Active Exploit and Two Zero-Days

Crisis in Icebergen: How NATO crafts stories to sharpen cyber skills

FBI Warns of Fake Video Scams

Fortinet, Ivanti, and SAP Issue Urgent Patches for Authentication and Code Execution Flaws

~ 9 Dec 2025 ~

North Korea-linked Actors Exploit React2Shell to Deploy New EtherRAT Malware

Microsoft reports 7.8-rated zero day, plus 56 more in December Patch Tuesday

Microsoft Patch Tuesday, December 2025 Edition

How to answer the door when the AI agents come knocking

Shai-Hulud 2.0: Guidance for detecting, investigating, and defending against the supply chain attack

Four Threat Clusters Using CastleLoader as GrayBravo Expands Its Malware Service Infrastructure

Storm-0249 Escalates Ransomware Attacks with ClickFix, Fileless PowerShell, and DLL Sideloading

Porsche panic in Russia as pricey status symbols forget how to car

How to Streamline Zero Trust Using the Shared Signals Framework

Changing the physics of cyber defense