Port 22

~ 17 Sep 2025 ~

UEFI Secure Boot for Linux Arm64 where do we stand?

Ruh-roh. DDR5 memory vulnerable to new Rowhammer attack

Australia to let Big Tech choose its own adventure to enact kids social media ban

~ 16 Sep 2025 ~

Chaos Mesh Critical GraphQL Flaws Enable RCE and Full Kubernetes Cluster Takeover

Microsoft blocks bait for fastest-growing 365 phish kit, seizes 338 domains

SlopAds Fraud Ring Exploits 224 Android Apps to Drive 2.3 Billion Daily Ad Bids

Exposing Pegasus: How the State Spies on You

Criminals broke into the system Google uses to share info with cops

John Scott-Railton on U.K.s Age-Verification Laws

New FileFix Variant Delivers StealC Malware Through Multilingual Phishing Site

Apple 0-day likely used in spy attacks affected devices as old as iPhone 8

A DHS Data Hub Exposed Sensitive Intel to Thousands of Unauthorized Users

Apple Backports Fix for CVE-2025-43300 Exploited in Sophisticated Spyware Attack

Securing the Agentic Era: Introducing Astrix's AI Agent Control Plane

Microsoft Purview innovations for your Fabric data: Unify data security and governance for the AI era

How to Set Up and Use a Burner Phone

Self-propagating worm fuels latest npm supply chain compromise

Self-Replicating Worm Hits 180+ Software Packages

5 Best VPN Services (2025), Tested and Reviewed

Phoenix RowHammer Attack Bypasses Advanced DDR5 Memory Protections in 109 Seconds

'FileFix' attacks use fake Facebook security alerts to trick victims into running infostealers

Siemens SIMATIC NET CP, SINEMA, and SCALANCE

Siemens RUGGEDCOM, SINEC NMS, and SINEMA

Siemens OpenSSL Vulnerability in Industrial Products

Siemens Multiple Industrial Products

Schneider Electric Altivar Products, ATVdPAC Module, ILC992 InterLink Converter

Hitachi Energy RTU500 Series

Delta Electronics DIALink

HybridPetya: The Petya/NotPetya copycat comes with a twist

Microsoft Still Uses RC4

JLR stuck in neutral as losses skyrocket amid cyberattack cleanup

40 npm Packages Compromised in Supply Chain Attack Using bundle.js to Steal Credentials

RevengeHotels: a new wave of attacks leveraging LLMs and VenomRAT

China slaps 1-hour deadline on reporting serious cyber incidents

Mustang Panda Deploys SnakeDisk USB Worm to Deliver Yokai Backdoor on Thailand IPs

~ 15 Sep 2025 ~

Careless engineer stored recovery codes in plaintext, got whole org pwned

Russia Tests Hypersonic Missile at NATOs Doorstepand Shares the Video

6 Browser-Based Attacks Security Teams Need to Prepare For Right Now

Weekly Recap: Bootkit Malware, AI-Powered Attacks, Supply Chain Breaches, Zero-Days & More

Security begins with visibility: How IGA brings hidden access risks to light

Former FinWise employee may have accessed nearly 700K customer records

AI-Powered Villager Pen Testing Tool Hits 11,000 PyPI Downloads Amid Abuse Concerns

Nork snoops whip up fake South Korean military ID with help from ChatGPT

China turns the screws on Nvidia with antitrust probe

HiddenGh0st, Winos and kkRAT Exploit SEO, GitHub Pages in Chinese Malware Attacks

Lawsuit About WhatsApp Security

Jaguar Land Rover supply chain workers must get Covid-style support, says union

Shiny tools, shallow checks: how the AI hype opens the door to malicious MCP servers

UK Lords take aim at Ofcom's 'child-protection' upgrades to Online Safety Act

Cyber-scam camp operators shift operations to vulnerable countries as sanctions strike

~ 14 Sep 2025 ~

15 ransomware gangs go dark to enjoy 'golden parachutes'

Upcoming Speaking Engagements

Data destruction done wrong could cost your company millions

~ 13 Sep 2025 ~

FBI Warns of UNC6040 and UNC6395 Targeting Salesforce Platforms in Data Theft Attacks

Jeffrey Epsteins Yahoo Inbox Revealed

~ 12 Sep 2025 ~

HybridPetya: More proof that Secure Boot bypasses are not just an urban legend

Assessing the Quality of Dried Squid

A Cyberattack Victim Notification Framework

Samsung Fixes Critical Zero-Day CVE-2025-21043 Exploited in Android Attacks

Apple Warns French Users of Fourth Spyware Campaign in 2025, CERT-FR Confirms

Samsung fixes Android 0-day that may have been used to spy on WhatsApp messages

New HybridPetya Ransomware Bypasses UEFI Secure Boot With CVE-2024-7344 Exploit

All your vulns are belong to us! CISA wants to maintain gov control of CVE program

Critical CVE-2025-5086 in DELMIA Apriso Actively Exploited, CISA Issues Warning

Charlie Kirk Shooting Suspect Identified as 22-Year-Old Utah Man

1,200 undergrads hung out to dry after jailbreak attack on laundry machines

Cloud-Native Security in 2025: Why Runtime Visibility Must Take Center Stage

Spyware Installed on Kenyan Filmmakers Phones in Police Custody

Cursor AI Code Editor Flaw Enables Silent Code Execution via Malicious Repositories

Privacy activists warn digital ID wont stop small boats but will enable mass surveillance

Hack to school: Parents told to keep their little script kiddies in line

Introducing HybridPetya: Petya/NotPetya copycat with UEFI Secure Boot bypass

Huntress's 'hilarious' attacker surveillance splits infosec community

LLAMATOR Red Team Framework for Testing LLM Security

~ 11 Sep 2025 ~

We're number 1! America now leads the world in surveillanceware investment

Google Pixel 10 Adds C2PA Support to Verify AI-Generated Media Authenticity

Senator Wyden Urges FTC to Probe Microsoft for Ransomware-Linked Cybersecurity Negligence

How Chinas Propaganda and Surveillance Systems Really Operate

Hijacker helper VoidProxy boosts Google, Microsoft accounts on demand

Bulletproof Host Stark Industries Evades EU Sanctions

Canadas New Minister of AI Must Not Be Naive to Its Harms

AI-powered penetration tool, an attacker's dream, downloaded 10K times in 2 months

SonicWall SSL VPN Flaw and Misconfigurations Actively Exploited by Akira Ransomware Hackers

Anti-DDoS outfit walloped by record packet flood

Spectre haunts CPUs again: VMSCAPE vulnerability leaks cloud secrets

Fake Madgicx Plus and SocialMetrics Extensions Are Hijacking Meta Business Accounts

Cracking the Boardroom Code: Helping CISOs Speak the Language of Business

Apples Big Bet to Eliminate the iPhones Most Targeted Vulnerabilities

Senator blasts Microsoft for 'dangerous, insecure software' that helped pwn US hospitals

Siemens User Management Component (UMC)

Siemens SINEC OS

Siemens SINAMICS Drives

Siemens SIMOTION Tools

Siemens SIMATIC Virtualization as a Service (SIVaaS)

Siemens Industrial Edge Management OS (IEM-OS)

Siemens Apogee PXC and Talon TC Devices

Schneider Electric Modicon M340, BMXNOE0100, and BMXNOE0110

Schneider Electric EcoStruxure

Daikin Security Gateway

AsyncRAT Exploits ConnectWise ScreenConnect to Steal Credentials and Crypto