Port 22

~ 8 Sep 2025 ~

The US government has no idea how many cybersecurity pros it employs

GitHub Account Compromise Led to Salesloft Drift Breach Affecting 22 Companies

GPUGate Malware Uses Google Ads and Fake GitHub Commits to Target IT Firms

Drift massive attack traced back to loose Salesloft GitHub account

Dev snared in crypto phishing net, 18 npm packages compromised

Signed Copies of Rewiring Democracy

Salt Typhoon used dozens of domains, going back five years. Did you visit one?

Weekly Recap: Drift Breach Chaos, Zero-Days Active, Patch Warnings, Smarter Threats & More

You Didnt Get Phished You Onboarded the Attacker

PACER buckles under MFA rollout as courts warn of support delays

CISA sounds alarm over TP-Link wireless routers under attack

UK tech minister booted out in weekend cabinet reshuffle

AI in Government

asnip ASN Reconnaissance via Domain and IP Mapping

~ 6 Sep 2025 ~

Noisy Bear Targets Kazakhstan Energy Sector With BarrelFire Phishing Campaign

Malicious npm Packages Impersonate Flashbots, Steal Ethereum Wallet Keys

ICE Has Spyware Now

GOP Cries Censorship Over Spam Filters That Work

Friday Squid Blogging: The Origin and Propagation of Squid

~ 5 Sep 2025 ~

Defense Department Scrambles to Pretend It's Called the War Department

CISA Orders Immediate Patch of Critical Sitecore Vulnerability Under Active Exploitation

The crazy, true story behind the first AI-powered ransomware

Shell to pay: Crims invade your PC with CastleRAT malware, now in C and Python

TAG-150 Develops CastleRAT in Python and C, Expanding CastleLoader Malware Operations

My Latest Book: Rewiring Democracy

Critical, make-me-super-user SAP S/4HANA bug under active exploitation

SAP S/4HANA Critical Vulnerability CVE-2025-42957 Exploited in the Wild

Azure mandatory multifactor authentication: Phase 2 starting in October 2025

Automation Is Redefining Pentest Delivery

VirusTotal Finds 44 Undetected SVG Files Used to Deploy Base64-Encoded Phishing Pages

GPT-4o-mini Falls for Psychological Manipulation

IT threat evolution in Q2 2025. Mobile statistics

IT threat evolution in Q2 2025. Non-mobile statistics

Under lock and key: Safeguarding business data with encryption

Knock-on effects of software dev break-in hit schools trust

BlockEDRTraffic EDR Evasive Lateral Movement Tool

~ 4 Sep 2025 ~

Russian APT28 Deploys NotDoor Outlook Backdoor Against Companies in NATO Countries

GhostRedirector Hacks 65 Windows Servers Using Rungan Backdoor and Gamshen IIS Module

Attackers snooping around Sitecore, dropping malware via public sample keys

Boffins build automated Android bug hunting system

China-aligned crew poisons Windows servers to manipulate Google results

US Congressmans Brother Lands No-Bid Contract to Train DHS Snipers

Cybercriminals Exploit Xs Grok AI to Bypass Ad Protections and Spread Malware to Millions

Google Fined $379 Million by French Regulator for Cookie Consent Violations

CISA Flags TP-Link Router Flaws CVE-2023-50224 and CVE-2025-9377 as Actively Exploited

Enterprises sticking with Windows 10 could shell out billions for continued support

Honeywell OneWireless Wireless Device Manager (WDM)

Generative AI as a Cybercrime Assistant

GhostRedirector poisons Windows servers: Backdoors with a side of Potatoes

Sainsbury's eyes up shoplifters with live facial recognition

France fines Google, SHEIN, for undercooked Cookie policies that led to crummy privacy

US puts $10M bounty on three Russians accused of attacking critical infrastructure

Malicious npm Packages Exploit Ethereum Smart Contracts to Target Crypto Developers

Congressional panel throws cyber threat intel-sharing, funding a lifeline

~ 3 Sep 2025 ~

Android drops mega patch bomb - 120 fixes, two already exploited

Crims claim HexStrike AI penetration tool makes quick work of Citrix bugs

Automated Sextortion Spyware Takes Webcam Pics of Victims Watching Porn

Threat Actors Weaponize HexStrike AI to Exploit Citrix Flaws Within a Week of Disclosure

It looks like youre ransoming data. Would you like some help?

Detecting Data Leaks Before Disaster

Android Security Alert: Google Patches 120 Flaws, Including Two Zero-Days Under Attack

Iranian Hackers Exploit 100+ Embassy Email Accounts in Global Phishing Targeting Diplomats

Matrix.org homeserver grinds to a halt after RAID meltdown

Cloudflare Blocks Record-Breaking 11.5 Tbps DDoS Attack

Indirect Prompt Injection Attacks Against LLM Assistants

What Is a Passkey? Heres How to Set Up and Use Them (2025)

CISA Adds TP-Link and WhatsApp Flaws to KEV Catalog Amid Active Exploitation

Salesloft Takes Drift Offline After OAuth Token Theft Hits Hundreds of Organizations

Internet mapping and research outfit Censys reveals state-based abuse, harassment

Generative AI in Social Engineering & Phishing in 2025

~ 2 Sep 2025 ~

Lazarus Group Expands Malware Arsenal With PondRAT, ThemeForestRAT, and RemotePE

How big will this Drift get? Cloudflare cops to Salesloft Drift breach

Researchers Warn of MystRodX Backdoor Using DNS and ICMP Triggers for Stealthy Control

Who watches the watchmen? Surveillanceware firms make bank, avoid oversight

Zscaler latest victim of Salesloft Drift attacks, customer data exposed

Shadow AI Discovery: A Critical Part of Enterprise AI Governance

Ukrainian Network FDN3 Launches Massive Brute-Force Attacks on SSL VPN and RDP Devices

Stolen OAuth tokens expose Palo Alto customer data

Silver Fox Exploits Microsoft-Signed WatchDog Driver to Deploy ValleyRAT Malware

SunPower PVS6

Fuji Electric FRENIC-Loader 4

Delta Electronics EIP Builder

1965 Cryptanalysis Training Workbook Released by the NSA

No, Trump Cant Legally Federalize US Elections

Malicious npm Package nodejs-smtp Mimics Nodemailer, Targets Atomic and Exodus Wallets

Huawei counts cost of Western bans as UK business withers

Cookies and how to bake them: what they are for, associated risks, and what session hijacking has to do with it

Frostbyte10 bugs put thousands of refrigerators at major grocery chains at risk

Reg readers have spoken: 93% back move away from Microsoft in UK public sector

Europe Putin the blame on Russia after GPS jamming disrupts presidents plane

In the rush to adopt hot new tech, security is often forgotten. AI is no exception

~ 1 Sep 2025 ~

Android Droppers Now Deliver SMS Stealers and Spyware, Not Just Banking Trojans

The Ongoing Fallout from a Breach at AI Chatbot Maker Salesloft

Weekly Recap: WhatsApp 0-Day, Docker Bug, Salesforce Breach, Fake CAPTCHAs, Spyware App & More

When Browsers Become the Attack Surface: Rethinking Security for Scattered Spider

ScarCruft Uses RokRAT Malware in Operation HanKook Phantom Targeting South Korean Academics

Norway's 10B UK frigate deal could delay Royal Navy ships

DDoS is the neglected cybercrime that's getting bigger. Let's kill it off

China Is About to Show Off Its New High-Tech Weapons to the World

LegalPwn: Tricking LLMs by burying badness in lawyerly fine print