Port 22

~ 11 Jul 2025 ~

Metadata Shows the FBIs Raw Jeffrey Epstein Prison Video Was Likely Modified

Iranian-Backed Pay2Key Ransomware Resurfaces with 80% Profit Share for Cybercriminals

Tradecraft in the Information Age

UK Online Safety Act 'not up to scratch' on misinformation, warn MPs

CISA Adds Citrix NetScaler CVE-2025-5777 to KEV Catalog as Active Exploits Target Enterprises

Security company hired a used car salesman to build a website, and it didn't end well

French cops cuff Russian pro basketball player on ransomware charges

Chinese censorship-busters claim Tencent is trying to kill its WeChat archive

Force Push Scanner Hunt GitHub Dangling Commits for Leaked Secrets

~ 10 Jul 2025 ~

Lovestruck US Air Force worker admits leaking secrets on dating app

Critical mcp-remote Vulnerability Enables Remote Code Execution, Impacting 437,000+ Downloads

Now everybody but Citrix agrees that CitrixBleed 2 is under exploit

DHS Tells Police That Common Protest Activities Are Violent Tactics

Ex-ASML engineer who stole chip tech for Russia gets three years in Dutch prison

Fake Gaming and AI Firms Push Malware on Cryptocurrency Users via Telegram and Discord

Four Arrested in 440M Cyber Attack on Marks & Spencer, Co-op, and Harrods

UK Charges Four in Scattered Spider Ransom Group

What Security Leaders Need to Know About AI Governance for SaaS

New ZuRu Malware Variant Targeting Developers via Trojanized Termius macOS App

AMD Warns of New Transient Scheduler Attacks Impacting a Wide Range of CPUs

Forrester names Microsoft a Leader in the 2025 Zero Trust Platforms Wave report

Russia, hotbed of cybercrime, says nyet to ethical hacking bill

ServiceNow Flaw CVE-2025-3648 Could Lead to Data Exposure via Misconfigured ACLs

Siemens TIA Project-Server and TIA Portal

Siemens TIA Administrator

Siemens Solid Edge

Siemens SIPROTEC 5

Siemens SINEC NMS

Siemens SIMATIC CN 4100

KUNBUS RevPi Webstatus

End-of-Train and Head-of-Train Remote Linking Protocol

Delta Electronics DTM Soft

Advantech iView

NCA arrests four in connection with UK retail ransomware attacks

Using Signal Groups for Activism

Code highlighting with Cursor AI for $500,000

Sovereign-ish: Google Cloud keeps AI data in UK, but not the support

Review: How Passwork 7 helps tame business passwords

At last, a use case for AI agents with high sky-high ROI: Stealing crypto

~ 9 Jul 2025 ~

How to trick ChatGPT into revealing Windows keys? I give up

Gold Melody IAB Exploits Exposed ASP.NET Machine Keys for Unauthorized Access to Targets

McDonalds AI Hiring Bot Exposed Millions of Applicants' Data to Hackers Using the Password 123456

DoNot APT Expands Operations, Targets European Foreign Ministries with LoptikMod Malware

US sanctions alleged North Korean IT sweatshop leader

AMD warns of new Meltdown, Spectre-like bugs affecting CPUs

U.S. Sanctions North Korean Andariel Hacker Behind Fraudulent IT Worker Scheme

How To Automate Ticket Creation, Device Identification and Threat Triage With Tines

The cloud-native imperative for effective cyber resilience

Microsoft expands Zero Trust workshop to cover network, SecOps, and more

Reframing investments in security as investments in the business

Chinese Hacker Xu Zewei Arrested for Ties to Silk Typhoon Group and U.S. Cyber Attacks

Microsoft Patches 130 Vulnerabilities, Including Critical Flaws in SPNEGO and SQL Server

Qantas begins telling some customers that mystery attackers have their home address

Yet Another Strava Privacy Leak

Ingram Micro restarts orders for some following ransomware attack

Privacy campaigners pour cold water on London cops' 1,000 facial recognition arrests

Iranian ransomware crew reemerges, promises big bucks for attacks on US or Israel

Emerging Darknet Marketplaces of 2025 Anatomy Tactics & Trends

Microsoft Patch Tuesday, July 2025 Edition

~ 8 Jul 2025 ~

Hackers Use Leaked Shellter Tool License to Spread Lumma Stealer and SectopRAT Malware

Microsoft enjoys first Patch Tuesday of 2025 with no active exploits

Anatsa Android Banking Trojan Hits 90,000 Users with Fake PDF App on Google Play

Massive browser hijacking campaign infects 2.3M Chrome, Edge users

Enhancing Microsoft 365 security by eliminating high-privilege access

Malicious Pull Request Targets 6,000+ Developers via Vulnerable Ethcode VS Code Extension

5 Ways Identity-based Attacks Are Breaching Retail

RondoDox Botnet Exploits Flaws in TBK DVRs and Four-Faith Routers to Launch DDoS Attacks

BaitTrap: Over 17,000 Fake News Websites Caught Fueling Investment Fraud Globally

The cloud-native imperative for effective cyber resilience

Researchers Uncover Batavia Windows Spyware Stealing Documents from Russian Firms

SUSE launching region-locked support for the sovereignty-conscious

Emerson ValveLink Products

Suspected Chinese cybersnoop grounded in Italy after US tipoff

CISA Adds Four Critical Vulnerabilities to KEV Catalog Due to Active Exploitation

Approach to mainframe penetration testing on z/OS. Deep dive into RACF

Is your password ecosystem ready for the regulators?

Suspected Scattered Spider domains target everyone from manufacturers to Chipotle

~ 7 Jul 2025 ~

SEO Poisoning Campaign Targets 8,500+ SMB Users with Malware Disguised as AI Tools

CitrixBleed 2 exploits are on the loose as security researchers yell and wave their hands

Weekly Recap: Chrome 0-Day, Ivanti Exploits, MacOS Stealers, Crypto Heists and More

Manufacturing Security: Why Default Passwords Must Go

Learn how to build an AI-powered, unified SOC in new Microsoft e-book

A Match Made in the Heavens: The Surveillance State and the New Space Economy

Phishing platforms, infostealers blamed as identity attacks soar

Hiding Prompt Injections in Academic Papers

TAG-140 Deploys DRAT V2 RAT, Targeting Indian Government, Defense, and Rail Sectors

Batavia spyware steals data from Russian organizations

Caracal Rust eBPF Rootkit for Stealthy Post-Exploitation

~ 6 Jul 2025 ~

Stalkerware firm gets scooped by SQL-slinging security snoop

Ingram Micro confirms ransomware behind multi-day outage

~ 5 Jul 2025 ~

Massive spike in use of .es domains for phishing abuse

Taiwan NSB Alerts Public on Data Risks from TikTok, Weibo, and RedNote Over China Ties

Alert: Exposed JDWP Interfaces Lead to Crypto Mining, Hpingbot Targets SSH for DDoS

Android May Soon Warn You About Fake Cell Towers

~ 4 Jul 2025 ~

Friday Squid Blogging: How Squid Skin Distorts Light

NightEagle APT Exploits Microsoft Exchange Flaw to Target China's Military and Tech Sectors

The G7 condemned transnational repression, but will Canada meet its own commitments?

Your AI Agents Might Be Leaking Data Watch this Webinar to Learn How to Stop It

Critical Sudo Vulnerabilities Let Local Users Gain Root Access on Linux, Impacting Major Distros

Google Ordered to Pay $314M for Misusing Android Users' Cellular Data Without Permission