Port 22

~ 9 Sep 2025 ~

No gains, just pains as 1.6M fitness phone call recordings exposed online

From MostereRAT to ClickFix: New Malware Campaigns Highlight Rising AI and Phishing Risks

TOR-Based Cryptojacking Attack Expands Through Misconfigured Docker APIs

[Webinar] Shadow AI Agents Multiply Fast Learn How to Detect and Control Them

How Leading CISOs are Getting Budget Approval

What the Plex? Streaming service suffers yet another password spill

Rockwell Automation ThinManager

Rockwell Automation Stratix IOS

Rockwell Automation FactoryTalk Optix

Rockwell Automation FactoryTalk Activation Manager

Rockwell Automation ControlLogix 5580

Rockwell Automation CompactLogix 5480

Rockwell Automation Analytics LogixAI

Rockwell Automation 1783-NATR

ABB Cylon Aspect BMS/BAS

20 Popular npm Packages With 2 Billion Weekly Downloads Compromised in Supply Chain Attack

New Cryptanalysis of the Fiat-Shamir Protocol

Nokia successor HMD spawns secure device biz with Euro-made smartphone

A New Platform Is Launching to Protect Public Servants From an Angry Mob

Anthropic's Claude Code runs code to test if it is safe which might be a big mistake

Preventing business disruption and building cyber-resilience with MDR

UK toughens Online Safety Act with ban on self-harm content

45 Previously Unreported Domains Expose Longstanding Salt Typhoon Cyber Espionage

Forget disappearing messages now Signal will store 100MB of them for you for free

Massive Leak Shows How a Chinese Company Is Exporting the Great Firewall to the World

~ 8 Sep 2025 ~

WhatsApp's former security boss claims reporting infosec failings led to ousting

18 Popular Code Packages Hacked, Rigged to Steal Crypto

The US government has no idea how many cybersecurity pros it employs

GitHub Account Compromise Led to Salesloft Drift Breach Affecting 22 Companies

GPUGate Malware Uses Google Ads and Fake GitHub Commits to Target IT Firms

Drift massive attack traced back to loose Salesloft GitHub account

Dev snared in crypto phishing net, 18 npm packages compromised

Signed Copies of Rewiring Democracy

Salt Typhoon used dozens of domains, going back five years. Did you visit one?

Weekly Recap: Drift Breach Chaos, Zero-Days Active, Patch Warnings, Smarter Threats & More

You Didnt Get Phished You Onboarded the Attacker

PACER buckles under MFA rollout as courts warn of support delays

CISA sounds alarm over TP-Link wireless routers under attack

UK tech minister booted out in weekend cabinet reshuffle

AI in Government

asnip ASN Reconnaissance via Domain and IP Mapping

~ 6 Sep 2025 ~

Noisy Bear Targets Kazakhstan Energy Sector With BarrelFire Phishing Campaign

Malicious npm Packages Impersonate Flashbots, Steal Ethereum Wallet Keys

ICE Has Spyware Now

GOP Cries Censorship Over Spam Filters That Work

Friday Squid Blogging: The Origin and Propagation of Squid

~ 5 Sep 2025 ~

Defense Department Scrambles to Pretend It's Called the War Department

CISA Orders Immediate Patch of Critical Sitecore Vulnerability Under Active Exploitation

The crazy, true story behind the first AI-powered ransomware

Shell to pay: Crims invade your PC with CastleRAT malware, now in C and Python

TAG-150 Develops CastleRAT in Python and C, Expanding CastleLoader Malware Operations

My Latest Book: Rewiring Democracy

Critical, make-me-super-user SAP S/4HANA bug under active exploitation

SAP S/4HANA Critical Vulnerability CVE-2025-42957 Exploited in the Wild

Azure mandatory multifactor authentication: Phase 2 starting in October 2025

Automation Is Redefining Pentest Delivery

VirusTotal Finds 44 Undetected SVG Files Used to Deploy Base64-Encoded Phishing Pages

GPT-4o-mini Falls for Psychological Manipulation

IT threat evolution in Q2 2025. Mobile statistics

IT threat evolution in Q2 2025. Non-mobile statistics

Under lock and key: Safeguarding business data with encryption

Knock-on effects of software dev break-in hit schools trust

BlockEDRTraffic EDR Evasive Lateral Movement Tool

~ 4 Sep 2025 ~

Russian APT28 Deploys NotDoor Outlook Backdoor Against Companies in NATO Countries

GhostRedirector Hacks 65 Windows Servers Using Rungan Backdoor and Gamshen IIS Module

Attackers snooping around Sitecore, dropping malware via public sample keys

Boffins build automated Android bug hunting system

China-aligned crew poisons Windows servers to manipulate Google results

US Congressmans Brother Lands No-Bid Contract to Train DHS Snipers

Cybercriminals Exploit Xs Grok AI to Bypass Ad Protections and Spread Malware to Millions

Google Fined $379 Million by French Regulator for Cookie Consent Violations

CISA Flags TP-Link Router Flaws CVE-2023-50224 and CVE-2025-9377 as Actively Exploited

Enterprises sticking with Windows 10 could shell out billions for continued support

Honeywell OneWireless Wireless Device Manager (WDM)

Generative AI as a Cybercrime Assistant

GhostRedirector poisons Windows servers: Backdoors with a side of Potatoes

Sainsbury's eyes up shoplifters with live facial recognition

France fines Google, SHEIN, for undercooked Cookie policies that led to crummy privacy

US puts $10M bounty on three Russians accused of attacking critical infrastructure

Malicious npm Packages Exploit Ethereum Smart Contracts to Target Crypto Developers

Congressional panel throws cyber threat intel-sharing, funding a lifeline

~ 3 Sep 2025 ~

Android drops mega patch bomb - 120 fixes, two already exploited

Crims claim HexStrike AI penetration tool makes quick work of Citrix bugs

Automated Sextortion Spyware Takes Webcam Pics of Victims Watching Porn

Threat Actors Weaponize HexStrike AI to Exploit Citrix Flaws Within a Week of Disclosure

It looks like youre ransoming data. Would you like some help?

Detecting Data Leaks Before Disaster

Android Security Alert: Google Patches 120 Flaws, Including Two Zero-Days Under Attack

Iranian Hackers Exploit 100+ Embassy Email Accounts in Global Phishing Targeting Diplomats

Matrix.org homeserver grinds to a halt after RAID meltdown

Cloudflare Blocks Record-Breaking 11.5 Tbps DDoS Attack

Indirect Prompt Injection Attacks Against LLM Assistants

What Is a Passkey? Heres How to Set Up and Use Them (2025)

CISA Adds TP-Link and WhatsApp Flaws to KEV Catalog Amid Active Exploitation

Salesloft Takes Drift Offline After OAuth Token Theft Hits Hundreds of Organizations

Internet mapping and research outfit Censys reveals state-based abuse, harassment

Generative AI in Social Engineering & Phishing in 2025

~ 2 Sep 2025 ~

Lazarus Group Expands Malware Arsenal With PondRAT, ThemeForestRAT, and RemotePE

How big will this Drift get? Cloudflare cops to Salesloft Drift breach

Researchers Warn of MystRodX Backdoor Using DNS and ICMP Triggers for Stealthy Control