Port 22

~ 5 Aug 2025 ~

Patch now: Millions of Dell PCs with Broadcom chips vulnerable to attack

Study finds humans not completely useless at malware detection

Misconfigurations Are Not Vulnerabilities: The Costly Confusion Behind Security Risks

Elevate your protection with expanded Microsoft Defender Experts coverage

How Top CISOs Save Their SOCs from Alert Chaos to Never Miss Real Incidents

Chained bugs in Nvidia's Triton Inference Server lead to full system compromise

15,000 Fake TikTok Shop Domains Deliver Malware, Steal Crypto via AI-Driven Scam Campaign

Tigo Energy Cloud Connect Advanced

Mitsubishi Electric Iconics Digital Solutions Multiple Products

Surveilling Your Children with AirTags

SonicWall Investigating Potential SSL VPN Zero-Day After 20+ Targeted Attacks Reported

Hacker summer camp: What to expect from BSides, Black Hat, and DEF CON

ESET Threat Report H1 2025: ClickFix, infostealer disruptions, and ransomware deathmatch

Antivirus vendors fail to spot persistent, nasty, stealthy Linux backdoor

~ 4 Aug 2025 ~

SonicWall investigates 'cyber incidents,' including ransomware targeting suspected 0-day

NVIDIA Triton Bugs Let Unauthenticated Attackers Execute Code and Hijack AI Servers

Vietnamese Hackers Use PXA Stealer, Hit 4,000 IPs and Steal 200,000 Passwords Globally

Python-powered malware snags hundreds of credit cards, 200K passwords, and 4M cookies

Weekly Recap: VPN 0-Day, Encryption Backdoor, AI Malware, macOS Flaw, ATM Hack & More

Man-in-the-Middle Attack Prevention Guide

The Wild West of Shadow IT

Microsoft Entra Suite delivers 131% ROI by unifying identity and network access

Mozilla flags phishing wave aimed at hijacking trusted Firefox add-ons

PlayPraetor Android Trojan Infects 11,000+ Devices via Fake Google Play Pages and Meta Ads

First Sentencing in Scheme to Help North Koreans Infiltrate US Companies

German phone repair biz collapses following 2023 ransomware attack

The US Military Is Raking in Millions From On-Base Slot Machines

When hyperscalers cant safeguard one nations data from another, dark clouds are ahead

Millions of age checks performed as UK Online Safey Act gets rolling

Chinas botched Great Firewall upgrade invites attacks on its censorship infrastructure

PyRIT AI-Powered Reconnaissance for Cloud Red Teaming

PyRIT AI-Powered Reconnaissance for Cloud Red Teaming

Lazarus Group rises again, this time with malware-laden fake FOSS

~ 3 Aug 2025 ~

Silent Push CEO on cybercrime takedowns: 'It's an ongoing cat-and-mouse game'

~ 2 Aug 2025 ~

CL-STA-0969 Installs Covert Malware in Telecom Networks During 10-Month Espionage Campaign

New Plague PAM Backdoor Exposes Critical Linux Systems to Silent Credential Theft

Akira Ransomware Exploits SonicWall VPNs in Likely Zero-Day Attack on Fully-Patched Devices

Google Will Use AI to Guess Peoples Ages Based on Search History

CISA roasts unnamed critical national infrastructure body for shoddy security hygiene

~ 1 Aug 2025 ~

Friday Squid Blogging: A Case of Squid Fossil Misidentification

Cursor AI Code Editor Fixed Flaw Allowing Attackers to Run Commands via Prompt Injection

OpenAI removes ChatGPT self-doxing option

Tested: Microsoft Recall can still capture credit cards and passwords, a treasure trove for crooks

China says US spies exploited Microsoft Exchange zero-day to steal military info

Attackers Use Fake OAuth Apps with Tycoon Kit to Breach Microsoft 365 Accounts

AI-Generated Malicious npm Package Drains Solana Funds from 1,500+ Before Takedown

You Are What You Eat: Why Your AI Security Tools Are Only as Strong as the Data You Feed Them

Storm-2603 Deploys DNS-Controlled Backdoor in Warlock and LockBit Ransomware Attacks

Florida prison email blunder exposes visitor contact info to inmates

Is your phone spying on you? | Unlocked 403 cybersecurity podcast (S2E5)

Spying on People Through Airportr Luggage Delivery Service

Cybercrooks attached Raspberry Pi to bank network and drained ATM cash

Why the tech industry needs to stand firm on preserving end-to-end encryption

Top spy says LinkedIn profiles that list defence work 'recklessly invite attention of foreign intelligence services'

BrainDamage Payload Generator and Encrypted Shell Stager for Red Teams

~ 31 Jul 2025 ~

Secret Blizzard Deploys Malware in ISP-Level AitM Attacks on Moscow Embassies

Experts Detect Multi-Layer Redirect Tactic Used to Steal Microsoft 365 Login Credentials

As ransomware gangs threaten physical harm, 'I am afraid of what's next,' ex-negotiator says

Gene scanner pays $9.8 million to get feds off its back in security flap

N. Korean Hackers Used Job Lures, Cloud Account Access, and Malware to Steal Millions in Crypto

Microsoft's Azure AI Speech needs just seconds of audio to spit out a convincing deepfake

Beijing summons Nvidia over alleged backdoors in China-bound AI chips

Modernize your identity defense with Microsoft Identity Threat Detection and Response

AI-Driven Trends in Endpoint Security: What the 2025 Gartner Magic Quadrant Reveals

Kremlin goons caught abusing ISPs to spy on Moscow-based diplomats, Microsoft says

The Kremlin's Most Devious Hacking Group Is Using Russian ISPs to Plant Spyware

Frozen in transit: Secret Blizzards AiTM campaign against diplomats

UNC2891 Breaches ATM Network via 4G Raspberry Pi, Tries CAKETAP Rootkit for Fraud

Alert Fatigue, Data Overload, and the Fall of Traditional SIEMs

Silk Typhoon spun a web of patents for offensive cyber tools, report says

Brit watchdog pushes to rein in Microsoft and AWS with 'strategic market status'

NHS disability equipment provider on brink of collapse a year after cyberattack

Hackers Exploit Critical WordPress Theme Flaw to Hijack Sites via Remote Plugin Install

Rockwell Automation Lifecycle Services with VMware

Gralp Systems Gralp FMUS series

Cheating on Quantum Computing Benchmarks

Banning VPNs to protect kids? Good luck with that

This month in security with Tony Anscombe July 2025 edition

Internet exchange points are ignored, vulnerable, and absent from infrastructure protection plans

Lethal Cambodia-Thailand border clash linked to cyber-scam slave camps

The TSA likes facial recognition at airports. Passengers and politicians, not so much

~ 30 Jul 2025 ~

Hackers Use Facebook Ads to Spread JSCEAL Malware via Fake Cryptocurrency Trading Apps

FunkSec Ransomware Decryptor Released Free to Public After Group Goes Dormant

Scammers Unleash Flood of Slick Online Gaming Sites

Critical Dahua Camera Flaws Enable Remote Hijack via ONVIF and File Upload Exploits

Enterprises neglect AI security and attackers have noticed

Chinese Firms Linked to Silk Typhoon Filed 15+ Patents for Cyber Espionage Tools

Users left scrambling for a plan B as Dropbox drops Dropbox Passwords

Minnesota governor calls in the troops after St Paul cyberattack

Product Walkthrough: A Look Inside Pillar's AI Security Platform

Apple Patches Safari Vulnerability Also Exploited as Zero-Day in Google Chrome

Palo Alto Networks inks $25b deal to buy identity-security shop CyberArk

Google Launches DBSC Open Beta in Chrome and Enhances Patch Transparency via Project Zero

Hackers Exploit SAP Vulnerability to Breach Linux Systems and Deploy Auto-Color Malware

Ransomware gang sets deadline to leak 3.5 TB of Ingram Micro data

Scattered Spider Hacker Arrests Halt Attacks, But Copycat Threats Sustain Security Pressure

Measuring the Attack/Defense Balance

Cobalt Strike Beacon delivered via GitHub and social media

Leveraging OSINT from the Dark Web A Practical How-To

~ 29 Jul 2025 ~

CISA caves to Wyden, agrees to release US telco insecurity report - but wont say when