Port 22

~ 9 Oct 2025 ~

Critical Exploit Lets Hackers Bypass Authentication in WordPress Service Finder Theme

Rockwell Automation Stratix

Rockwell Automation Lifecycle Services with Cisco

Hitachi Energy Asset Suite

How Uber seems to know where you are even with restricted location permissions

~ 8 Oct 2025 ~

Hackers Exploit WordPress Sites to Power Next-Gen ClickFix Phishing Attacks

Chinese Hackers Weaponize Open-Source Nezha Tool in New Attack Wave

LockBit, Qilin, and DragonForce Join Forces to Dominate the Ransomware Ecosystem

Take this rob and shove it! Salesforce issues stern retort to ransomware extort

Step Into the Password Graveyard If You Dare (and Join the Live Session)

Severe Figma MCP Vulnerability Lets Hackers Execute Code Remotely Patch Now

Flok License Plate Surveillance

Germany slams brakes on EU's Chat Control device-scanning snoopfest

OpenAI Disrupts Russian, North Korean, and Chinese Hackers Misusing ChatGPT for Cyberattacks

Cybersecurity Awareness Month 2025: Passwords alone are not enough

LLM Black Markets in 2025 Prompt Injection, Jailbreak Sales & Model Leaks

~ 7 Oct 2025 ~

ShinyHunters Wage Broad Corporate Extortion Spree

BatShadow Group Uses New Go-Based 'Vampire Bot' Malware to Hunt Job Seekers

Google's New AI Doesn't Just Find Vulnerabilities It Rewrites Code to Patch Them

Employees regularly paste company secrets into ChatGPT

Disrupting threats targeting Microsoft Teams

New Research: AI Is Already the #1 Data Exfiltration Channel in the Enterprise

Nearly a year after attack, US medical scanning biz gets clear image of stolen patient data

XWorm 6.0 Returns with 35+ Plugins and Enhanced Data Theft Capabilities

New Microsoft Secure Future Initiative (SFI) patterns and practices: Practical guides to strengthen security

Police and military radio maker BK Technologies cops to cyber break-in

OpenAI bans suspected Chinese accounts using ChatGPT to plan surveillance

13-Year Redis Flaw Exposed: CVSS 10.0 Vulnerability Lets Attackers Run Code Remotely

Microsoft Links Storm-1175 to GoAnywhere Exploit Deploying Medusa Ransomware

Delta Electronics DIAScreen

AI-Enabled Influence Operation Against Iran

Oracle EBS Under Fire as Cl0p Exploits CVE-2025-61882 in Real-World Attacks

Britain eyes satellite laser warning system and carrier-launched jet drones

The case for cybersecurity: Why successful businesses are built on protection

UK Home Office opens wallet for 60M automated number plate project

Credential stuffing: 2.31 million fine shows passwords are still the weakest link

~ 6 Oct 2025 ~

Inside Microsoft Threat Intelligence: Calm in the chaos

New Report Links Research Firms BIETA and CIII to Chinas MSS Cyber Operations

Weekly Recap: Oracle 0-Day, BitLocker Bypass, VMScape, WhatsApp Worm & More

5 Critical Questions For Adopting an AI Security Solution

Chinese Cybercrime Group Runs Global SEO Fraud Ring Using Compromised IIS Servers

Investigating active exploitation of CVE-2025-10035 GoAnywhere Managed File Transfer vulnerability

Scattered Lapsus$ Hunters offering $10 in Bitcoin to 'endlessly harass' execs

Radiant Group won't touch kids' data now, but apparently hospitals are fair game

Thieves steal IDs and payment info after data leaks from Discord support vendor

Zimbra Zero-Day Exploited to Target Brazilian Military via Malicious ICS Files

AI in the 2026 Midterm Elections

Oracle Rushes Patch for CVE-2025-61882 After Cl0p Exploited It in Data Theft Attacks

Jaguar Land Rover engines ready to roar again after weeks-long cyber stall

Vibe Coding Is the New Open Sourcein the Worst Way Possible

Clop crew hits Oracle E-Business Suite users with fresh zero-day

Beware of threats lurking in booby-trapped PDF files

Leak suggests US government is fibbing over FEMA security failings

How we trained an ML model to detect DLL hijacking

Detecting DLL hijacking with machine learning: real-world cases

~ 4 Oct 2025 ~

CometJacking: One Click Can Turn Perplexitys Comet AI Browser Into a Data Thief

Scanning Activity on Palo Alto Networks Portals Jump 500% in One Day

Apple and Google Pull ICE-Tracking Apps, Bowing to DOJ Pressure

~ 3 Oct 2025 ~

Detour Dog Caught Running DNS-Powered Malware Factory for Strela Stealer

Rhadamanthys Stealer Evolves: Adds Device Fingerprinting, PNG Steganography Payloads

Friday Squid Blogging: Squid Overfishing in the Southwest Atlantic

Researchers Warn of Self-Spreading WhatsApp Malware Named SORVEPOTEL

Product Walkthrough: How Passwork 7 Addresses Complexity of Enterprise Security

New "Cavalry Werewolf" Attack Hits Russian Agencies with FoalShell and StallionRAT

Red Hat fesses up to GitLab breach after attackers brag of data theft

CISA Flags Meteobridge CVE-2025-4008 Flaw as Actively Exploited in the Wild

Apple ices ICE agent tracker app under government heat

ICE Wants to Build Out a 24/7 Social Media Surveillance Team

Munich Airport chaos after drone sightings spook air traffic control

UK government says digital ID won't be compulsory honest

Oracle tells Clop-targeted EBS users to apply July patch, problem solved

Manufacturing under fire: Strengthening cyber-defenses amid surging threats

Criminals take Renault UK customer data for a joyride

We Say You Want a Revolution: PRISONBREAK An AI-Enabled Influence Operation Aimed at Overthrowing the Iranian Regime

~ 2 Oct 2025 ~

Confucius Hackers Hit Pakistan With New WooperStealer and Anondoor Malware

Alert: Malicious PyPI Package soopsocks Infects 2,653 Systems Before Takedown

Automating Pentest Delivery: 7 Key Workflows for Maximum Impact

Subpoena tracking platform blames outage on AWS social engineering attack

ThreatsDay Bulletin: CarPlay Exploit, BYOVD Tactics, SQL C2 Attacks, iCloud Backdoor Demand & More

Microsoft named a Leader in the IDC MarketScape for XDR

Google Mandiant Probes New Oracle Extortion Wave Possibly Linked to Cl0p Ransomware

How to Close Threat Detection Gaps: Your SOC's Action Plan

Daniel Miessler on the AI Attack/Defense Balance

Warning: Beware of Android Spyware Disguised as Signal Encryption Plugin and ToTok Pro

Clop-linked crims shake down Oracle execs with data theft claims

EU funds are flowing into spyware companies, and politicians are demanding answers

Raise3D Pro2 Series 3D Printers

Hitachi Energy MSM Product

Cybercrims claim raid on 28,000 Red Hat repos, say they have sensitive customer files

New spyware campaigns target privacy-conscious Android users in the UAE

~ 1 Oct 2025 ~

New WireTap Attack Extracts Intel SGX ECDSA Key via DDR4 Memory-Bus Interposer

US gov shutdown leaves IT projects hanging, security defenders a skeleton crew

'Delightful' root-access bug in Red Hat OpenShift AI allows full cluster takeover

OneLogin Bug Let Attackers Use API Keys to Steal OIDC Secrets and Impersonate Apps

How Leading Security Teams Blend AI + Human Workflows (Free Webinar)

Red Hat OpenShift AI Flaw Exposes Hybrid Cloud Infrastructure to Full Takeover

Air Force admits SharePoint privacy issue as reports trickle out of possible breach

2025 Cybersecurity Reality Check: Breaches Hidden, Attack Surfaces Growing, and AI Misperceptions Rising