Port 22

~ 25 Aug 2025 ~

Docker Fixes CVE-2025-9074, Critical Container Escape Vulnerability With CVSS Score 9.3

Phishing Campaign Uses UpCrypter in Fake Voicemail Emails to Deliver RAT Payloads

SEP 24 | Surveillance Night Event: Blow Out w/ Ron Deibert

Weekly Recap: Password Manager Flaws, Apple 0-Day, Hidden AI Prompts, In-the-Wild Exploits & More

Why SIEM Rules Fail and How to Fix Them: Insights from 160 Million Attack Simulations

The Citizen Labs Submission on Transnational Repression in the UK

Transparent Tribe Targets Indian Govt With Weaponized Desktop Shortcuts via Phishing

Poor Password Choices

The Mysterious Shortwave Radio Station Stoking US-Russia Nuclear Fears

Australian university used Wi-Fi location data to identify student protestors

AzureStrike Offensive Toolkit for Attacking Azure Active Directory Environments

AWS, Cloudflare, Digital Ocean, and Google helped Feds investigate alleged Rapper Bot DDoS perp

~ 24 Aug 2025 ~

Malicious Go Module Poses as SSH Brute-Force Tool, Steals Credentials via Telegram Bot

Bug bounties: The good, the bad, and the frankly ridiculous ways to do it

~ 23 Aug 2025 ~

GeoServer Exploits, PolarEdge, and Gayfemboy Push Cybercrime Beyond Traditional Botnets

US Government Seeks Medical Records of Trans Youth

~ 22 Aug 2025 ~

Short circuit: Electronics supplier to tech giants suffers ransomware shutdown

Friday Squid Blogging: Bobtail Squid

Linux Malware Delivered via Malicious RAR Filenames Evades Antivirus Detection

Kidney dialysis giant DaVita tells 2.4M people they were snared in ransomware data theft nightmare

Im Spending the Year at the Munk School

Chinese Hackers Murky, Genesis, and Glacial Panda Escalate Cloud and Telecom Espionage

INTERPOL Arrests 1,209 Cybercriminals Across 18 African Nations in Global Crackdown

Automation Is Redefining Pentest Delivery

Criminal background checker APCS faces data breach

Fake CAPTCHA tests trick users into running malware

Interpol bags 1,209 suspects, $97M in cybercrime operation focused on Africa

ChromeAlone Chromium Browser C2 Implant for Red Team Operations

Ex-Developer Jailed Four Years for Sabotaging Ohio Employer with Kill-Switch Malware

AI Agents Need Data Integrity

Modern vehicle cybersecurity trends

Developer jailed for taking down employer's network with kill switch malware

~ 21 Aug 2025 ~

Anthropic scanning Claude chats for queries about DIY nukes for some reason

Microsoft reportedly cuts China's early access to bug disclosures, PoC exploit code

'Impersonation as a service' the next big thing in cybercrime

Pre-Auth Exploit Chains Found in Commvault Could Enable Remote Code Execution Attacks

Cybercriminals Deploy CORNFLAKE.V3 Backdoor via ClickFix Tactic and Fake CAPTCHA Pages

Honey, I shrunk the image and now I'm pwned

Congressman proposes bringing back letters of marque for cyber privateers

Hackers Using New QuirkyLoader Malware to Spread Agent Tesla, AsyncRAT and Snake Keylogger

Weak Passwords and Compromised Accounts: Key Findings from the Blue Report 2025

Think before you Click(Fix): Analyzing the ClickFix social engineering technique

Orange Belgium mega-breach exposes 850K customers to serious fraud

US cops wrap up RapperBot, one of world's biggest DDoS-for-hire rackets

Apple rushes out fix for active zero-day in iOS and macOS

Scattered Spider Hacker Gets 10 Years, $13M Restitution for SIM Swapping Crypto Theft

Colt changes tune, admits data theft as Warlock gang begins auction

Mitsubishi Electric Corporation MELSEC iQ-F Series CPU Module

Google yet to take down 'screenshot-grabbing' Chrome VPN extension

Jim Sanborn Is Auctioning Off the Solution to Part Four of the Kryptos Sculpture

AI crawlers and fetchers are blowing up websites, with Meta and OpenAI the worst offenders

Apple Patches CVE-2025-43300 Zero-Day in iOS, iPadOS, and macOS Exploited in Targeted Attacks

"What happens online stays online" and other cyberbullying myths, debunked

China cut itself off from the global internet for an hour on Wednesday

SIM-Swapper, Scattered Spider Hacker Gets 10 Years

~ 20 Aug 2025 ~

Microsoft stays mum about M365 Copilot on-demand security bypass

DOM-Based Extension Clickjacking Exposes Popular Password Managers to Credential and Data Theft

FBI Warns FSB-Linked Hackers Exploiting Unpatched Cisco Devices for Cyber Espionage

Amazon quietly fixed Q Developer flaws that made AI agent vulnerable to prompt injection, RCE

SEP 12 | The Three Faces of Transnational Repression: The Citizen Lab at APSA Annual Meeting

Experts Find AI Browsers Can Be Tricked by PromptFix Exploit to Run Malicious Hidden Prompts

FBI: Russian spies exploiting a 7-year-old Cisco bug to slurp configs from critical infrastructure

Commvault releases patches for two nasty bug chains after exploits proven

Webinar: Discover and Control Shadow AI Agents in Your Enterprise Before Hackers Do

'Limited' data leak at Aussie telco turns out to be 280K customer details

Phone Searches at the US Border Hit a Record High

Quantum-safe security: Progress towards next-generation cryptography

From Impact to Action: Turning BIA Insights Into Resilient Recovery

North Korea Uses GitHub in Diplomat Cyber Attacks as IT Worker Scheme Hits 320+ Firms

Subverting AIOps Systems Through Poisoned Input Data

DOJ Charges 22-Year-Old for Running RapperBot Botnet Behind 370,000 DDoS Attacks

McDonald's not lovin' it when hacker exposes nuggets of rotten security

Darknet Communications in 2025 From IRC Forums to Telegram Crime Networks

~ 19 Aug 2025 ~

Apache ActiveMQ Flaw Exploited to Deploy DripDropper Malware on Cloud Linux Systems

Don't want drive-by Ollama attackers snooping on your local chats? Patch now

Oregon Man Charged in Rapper Bot DDoS Service

Like burglars closing a door, Apache ActiveMQ attackers patch critical vuln after breaking in

New GodRAT Trojan Targets Trading Firms Using Steganography and Gh0st RAT Code

Ron Deibert Warns Cybersecurity Industry About U.S. Authoritarian Descent

AUG 21 | The Vicious Cycle: Algorithmic Rage Farming, Privatized Subversion, Chilling Effects and the Spread of Authoritarian Practices

Public Exploit for Chained SAP Flaws Exposes Unpatched Systems to Remote Code Execution

Senate Probe Uncovers Allegations of Widespread Abuse in ICE Custody

U.K. Government Drops Apple Encryption Backdoor Order After U.S. Civil Liberties Pushback

Why Your Security Culture is Critical to Mitigating Cyber Risk

Highly Sensitive Medical Cannabis Patient Data Exposed by Unsecured Database

Casino tech outfit Bragg cops to intrusion but says data jackpot untouched

493 Cases of Sextortion Against Children Linked to Notorious Scam Compounds

PyPI Blocks 1,800 Expired-Domain Emails to Prevent Account Takeovers and Supply Chain Attacks

Siemens Mendix SAML Module

Siemens Desigo CC Product Family and SENTRON Powermanager

Zero-Day Exploit in WinRAR File

GodRAT New RAT targeting financial institutions

US spy chief claims UK backed down over Apple backdoor demand

The need for speed: Why organizations are turning to rapid, trustworthy MDR

More customers asking for Google's Data Boundary, says Cloud Experience boss

Browser wars are back, predicts Palo Alto, thanks to AI

Noodlophile Malware Campaign Expands Global Reach with Copyright Phishing Lures

~ 18 Aug 2025 ~

Facial recognition works better in the lab than on the street, researchers show

Microsoft Windows Vulnerability Exploited to Deploy PipeMagic RansomExx Malware

Pot calls kettle black as China dubs US 'surveillance empire' over chip tracking