Port 22

~ 4 Sep 2025 ~

GhostRedirector Hacks 65 Windows Servers Using Rungan Backdoor and Gamshen IIS Module

Attackers snooping around Sitecore, dropping malware via public sample keys

Boffins build automated Android bug hunting system

China-aligned crew poisons Windows servers to manipulate Google results

US Congressmans Brother Lands No-Bid Contract to Train DHS Snipers

Cybercriminals Exploit Xs Grok AI to Bypass Ad Protections and Spread Malware to Millions

Google Fined $379 Million by French Regulator for Cookie Consent Violations

CISA Flags TP-Link Router Flaws CVE-2023-50224 and CVE-2025-9377 as Actively Exploited

Enterprises sticking with Windows 10 could shell out billions for continued support

Honeywell OneWireless Wireless Device Manager (WDM)

Generative AI as a Cybercrime Assistant

GhostRedirector poisons Windows servers: Backdoors with a side of Potatoes

Sainsbury's eyes up shoplifters with live facial recognition

France fines Google, SHEIN, for undercooked Cookie policies that led to crummy privacy

US puts $10M bounty on three Russians accused of attacking critical infrastructure

Malicious npm Packages Exploit Ethereum Smart Contracts to Target Crypto Developers

Congressional panel throws cyber threat intel-sharing, funding a lifeline

~ 3 Sep 2025 ~

Android drops mega patch bomb - 120 fixes, two already exploited

Crims claim HexStrike AI penetration tool makes quick work of Citrix bugs

Automated Sextortion Spyware Takes Webcam Pics of Victims Watching Porn

Threat Actors Weaponize HexStrike AI to Exploit Citrix Flaws Within a Week of Disclosure

It looks like youre ransoming data. Would you like some help?

Detecting Data Leaks Before Disaster

Android Security Alert: Google Patches 120 Flaws, Including Two Zero-Days Under Attack

Iranian Hackers Exploit 100+ Embassy Email Accounts in Global Phishing Targeting Diplomats

Matrix.org homeserver grinds to a halt after RAID meltdown

Cloudflare Blocks Record-Breaking 11.5 Tbps DDoS Attack

Indirect Prompt Injection Attacks Against LLM Assistants

What Is a Passkey? Heres How to Set Up and Use Them (2025)

CISA Adds TP-Link and WhatsApp Flaws to KEV Catalog Amid Active Exploitation

Salesloft Takes Drift Offline After OAuth Token Theft Hits Hundreds of Organizations

Internet mapping and research outfit Censys reveals state-based abuse, harassment

Generative AI in Social Engineering & Phishing in 2025

~ 2 Sep 2025 ~

Lazarus Group Expands Malware Arsenal With PondRAT, ThemeForestRAT, and RemotePE

How big will this Drift get? Cloudflare cops to Salesloft Drift breach

Researchers Warn of MystRodX Backdoor Using DNS and ICMP Triggers for Stealthy Control

Who watches the watchmen? Surveillanceware firms make bank, avoid oversight

Zscaler latest victim of Salesloft Drift attacks, customer data exposed

Shadow AI Discovery: A Critical Part of Enterprise AI Governance

Ukrainian Network FDN3 Launches Massive Brute-Force Attacks on SSL VPN and RDP Devices

Stolen OAuth tokens expose Palo Alto customer data

Silver Fox Exploits Microsoft-Signed WatchDog Driver to Deploy ValleyRAT Malware

SunPower PVS6

Fuji Electric FRENIC-Loader 4

Delta Electronics EIP Builder

1965 Cryptanalysis Training Workbook Released by the NSA

No, Trump Cant Legally Federalize US Elections

Malicious npm Package nodejs-smtp Mimics Nodemailer, Targets Atomic and Exodus Wallets

Huawei counts cost of Western bans as UK business withers

Cookies and how to bake them: what they are for, associated risks, and what session hijacking has to do with it

Frostbyte10 bugs put thousands of refrigerators at major grocery chains at risk

Reg readers have spoken: 93% back move away from Microsoft in UK public sector

Europe Putin the blame on Russia after GPS jamming disrupts presidents plane

In the rush to adopt hot new tech, security is often forgotten. AI is no exception

~ 1 Sep 2025 ~

Android Droppers Now Deliver SMS Stealers and Spyware, Not Just Banking Trojans

The Ongoing Fallout from a Breach at AI Chatbot Maker Salesloft

Weekly Recap: WhatsApp 0-Day, Docker Bug, Salesforce Breach, Fake CAPTCHAs, Spyware App & More

When Browsers Become the Attack Surface: Rethinking Security for Scattered Spider

ScarCruft Uses RokRAT Malware in Operation HanKook Phantom Targeting South Korean Academics

Norway's 10B UK frigate deal could delay Royal Navy ships

DDoS is the neglected cybercrime that's getting bigger. Let's kill it off

China Is About to Show Off Its New High-Tech Weapons to the World

LegalPwn: Tricking LLMs by burying badness in lawyerly fine print

Traffic to government domains often crosses national borders, or flows through risky bottlenecks

WhatsApp warns of 'attack against specific targeted users'

TagNabIt AWS Cloud Resource Enumeration via Metadata Tags

~ 30 Aug 2025 ~

Attackers Abuse Velociraptor Forensic Tool to Deploy Visual Studio Code for C2 Tunneling

DOGE Put Everyones Social Security Data at Risk, Whistleblower Claims

WhatsApp Issues Emergency Update for Zero-Click Exploit Targeting iOS and macOS Devices

~ 29 Aug 2025 ~

Researchers Warn of Sitecore Exploit Chain Linking Cache Poisoning and Remote Code Execution

SSA Whistleblowers Resignation Email Mysteriously Disappeared From Inboxes

Friday Squid Blogging: Catching Humboldt Squid

Researcher who found McDonald's free-food hack turns her attention to Chinese restaurant robots

Amazon Disrupts APT29 Watering Hole Campaign Abusing Microsoft Device Code Authentication

Abandoned Sogou Zhuyin Update Server Hijacked, Weaponized in Taiwan Espionage Campaign

AWS catches Russia's Cozy Bear clawing at Microsoft credentials

Can Your Security Stack See ChatGPT? Why Network Visibility Matters

Click Studios Patches Passwordstate Authentication Bypass Vulnerability in Emergency Access Page

FreePBX Servers Targeted by Zero-Day Flaw, Emergency Patch Now Available

Feds Seize $6.4M VerifTools Fake-ID Marketplace, but Operators Relaunch on New Domain

Enterprise password management outfit Passwordstate patches Emergency Access bug

Google Warns Salesloft OAuth Breach Extends Beyond Salesforce, Impacting All Integrations

UK government dragged for incomplete security reforms after Afghan leak fallout

Baggage Tag Scam

How attackers adapt to built-in macOS protection

TamperedChef Malware Disguised as Fake PDF Editors Steals Credentials and Cookies

RedExt Browser Extension-Based C2 Framework for Red Team Recon

~ 28 Aug 2025 ~

FBI cyber cop: Salt Typhoon pwned 'nearly every American'

Researchers Find VS Code Flaw Allowing Attackers to Republish Deleted Extensions Under Same Names

DHS says it needs $100M worth of counter-drone tech to protect America

Salt Typhoon Exploits Cisco, Ivanti, Palo Alto Flaws to Breach 600 Organizations Worldwide

Not in my browser! Vivaldi capo doubles down on generative AI ban

FBI, Dutch cops seize fake ID marketplace that sold identity docs for $9

How does China keep stealing our stuff, wonders DoD group responsible for keeping foreign agents out

Affiliates Flock to Soulless Scam Gambling Machine

Webinar: Why Top Teams Are Prioritizing Code-to-Cloud Mapping in Our 2025 AppSec

Hidden Vulnerabilities of Project Management Tools & How FluentPro Backup Secures Them

16 billion credentials exposed: why your business needs a password manager now

Malicious Nx Packages in s1ngularity Attack Leaked 2,349 GitHub, Cloud, and AI Credentials

SK Telecom walloped with $97M fine after schoolkid security blunders let attackers run riot