Port 22

~ 29 Jul 2025 ~

Wiz Uncovers Critical Access Bypass Flaw in AI-Powered Vibe Coding Platform Base44

FBI: Watch out for these signs Scattered Spider is spinning its web around your org

PyPI Warns of Ongoing Phishing Campaign Using Fake Verification Emails and Lookalike Domain

Targeted Across Borders: Digital Transnational Repression, Gender Dimensions, and the Role of Host States

Chaos RaaS Emerges After BlackSuit Takedown, Demanding $300K from U.S. Victims

How the Browser Became the Main Cyber Battleground

Cybercriminals Use Fake Apps to Steal Data and Blackmail Users Across Asias Mobile Networks

Why React Didn't Kill XSS: The New JavaScript Injection Playbook

Raspberry Pi RP2350 A4 update fixes old bugs and dares you to break it again

Samsung HVAC DMS

National Instruments LabVIEW

Delta Electronics DTN Soft

War Games: MoD asks soldiers with 1337 skillz to compete in esports

Aeroflot Hacked

Age Verification Laws Send VPN Use Soaringand Threaten the Open Internet

CISA Adds PaperCut NG/MF CSRF Vulnerability to KEV Catalog Amid Active Exploitation

The hidden risks of browser extensions and how to stay safe

~ 28 Jul 2025 ~

Hackers Breach Toptal GitHub, Publish 10 Malicious npm Packages With 5,000 Downloads

Microsoft spotlights Apple bug patched in March as SharePoint exploits continue

Security pros are drowning in threat-intel data and it's making everything more dangerous

That Time Tom Lehrer Pranked the NSA

Weekly Recap SharePoint Breach, Spyware, IoT Hijacks, DPRK Fraud, Crypto Drains and More

Email Security Is Stuck in the Antivirus Era: Why It Needs a Modern Approach

Sploitlight: Analyzing a Spotlight-based macOS TCC vulnerability

Majority of 1.4M customers caught in Allianz Life data heist

Aeroflot aeroflops over 'IT issues' after attackers claim year-long compromise

Scattered Spider Hijacks VMware ESXi to Deploy Ransomware on Critical U.S. Infrastructure

Microsoft SharePoint Zero-Day

Critical Flaws in Niagara Framework Threaten Smart Buildings and Industrial Systems Worldwide

Argus Ultimate Reconnaissance Toolkit for Offensive Recon Operations

US spy satellite agency breached, but insists no classified secrets spilled

~ 26 Jul 2025 ~

Congress tries to outlaw AI that jacks up prices based on what it knows about you

Blame a leak for Microsoft SharePoint attacks, researcher insists

~ 25 Jul 2025 ~

Friday Squid Blogging: Stable Quasi-Isodynamic Designs

U.S. Sanctions Firm Behind N. Korean IT Scheme; Arizona Woman Jailed for Running Laptop Farm

Senator to Google: Give us info from telco Salt Typhoon probes

Marcus Michaelsen on the Impacts of Transnational Repression: Interview by Stockholm Center for Freedom

Patchwork Targets Turkish Defense Firms with Spear-Phishing Using Malicious LNK Files

Cyber Espionage Campaign Hits Russian Aerospace Sector Using EAGLET Backdoor

Soco404 and Koske Malware Target Cloud Services with Cross-Platform Cryptomining Attacks

Overcoming Risks from Chinese GenAI Tool Usage

Freelance dev shop Toptal caught serving malware after GitHub account break-in

Microsoft admits it 'cannot guarantee' data sovereignty

Subliminal Learning in AIs

Advisor to Brit tech contractors Qdos confirms client data leak

SharePoint under fire: ToolShell attacks hit organizations worldwide

ToolShell: a story of five vulnerabilities in Microsoft SharePoint

DNS security is important but DNSSEC may be a failed experiment

The Age-Checked Internet Has Arrived

evilreplay Real-Time Browser Session Hijack Without Cookie Theft

~ 24 Jul 2025 ~

Critical Mitel Flaw Lets Hackers Bypass Login, Gain Full Access to MiVoice MX-ONE Systems

Fire Ant Exploits VMware Flaws to Compromise ESXi Hosts and vCenter Environments

Laptop farmer behind $17M North Korean IT worker scam locked up for 8.5 years

Euro healthcare giant AMEOS Group shuts down IT systems after mystery attack

CastleLoader Malware Infects 469 Devices Using Fake GitHub Repos and ClickFix Phishing

Sophos and SonicWall Patch Critical RCE Flaws Affecting Firewalls and SMA 100 Devices

No login? No problem: Cisco ISE flaw gave root access before fix arrived, say researchers

Phishers Target Aviation Execs to Scam Customers

So much for watermarks: UnMarker tool nukes AI provenance tags

Watch This Webinar to Uncover Hidden Flaws in Login, AI, and Digital Trust and Fix Them

Microsoft: SharePoint attacks now officially include ransomware infections

Pentests once a year? Nope. Its time to build an offensive SOC

China-Based APTs Deploy Fake Dalai Lama Apps to Spy on Tibetan Community

Storm-2603 Exploits SharePoint Flaws to Deploy Warlock Ransomware on Unpatched Systems

A Premium Luggage Service's Web Bugs Exposed the Travel Plans of Every UserIncluding Diplomats

Coyote malware abuses Microsoft's UI Automation to hunt banking creds

The EFF is 35, but the battle to defend internet freedom is far from over

Compromised Amazon Q extension told AI to delete everything and it shipped

Europol Arrests XSS Forum Admin in Kyiv After 12-Year Run Operating Cybercrime Marketplace

Network Thermostat X-Series WiFi Thermostats

Mitsubishi Electric CNC Series

LG Innotek Camera Model LNV5110R

Honeywell Experion PKS

How Solid Protocol Restores Digital Agency

Eau no! Dior tells customers their data was swiped in cyber snafu

Hackers Deploy Stealth Backdoor in WordPress Mu-Plugins to Maintain Admin Access

Not pretty, not Windows-only: npm phishing attack laces popular packages with malware

ToolShell: An all-you-can-eat buffet for threat actors

Rogue CAPTCHAs: Look out for phony verification pages spreading malware

~ 23 Jul 2025 ~

Threat Actor Mimo Targets Magento and Docker to Deploy Crypto Miners and Proxyware

Microsoft Put Older Versions of SharePoint on Life Support. Hackers Are Taking Advantage

IRL Com recruits teens for real-life stabbings, shootings, FBI warns

Nothing to see here: Brave browser blocks privacy-busting Microsoft Recall

New Coyote Malware Variant Exploits Windows UI Automation to Steal Banking Credentials

Microsoft SharePoint victim count hits 400+ orgs in ongoing attacks

Kerberoasting Detections: A New Approach to a Decade-Old Challenge

VMware prevents some perpetual license holders from downloading patches

Three questions you should always be able to answer about your security environment

Google Launches OSS Rebuild to Expose Malicious Code in Widely Used Open-Source Packages

$380M lawsuit claims intruder got Clorox's passwords from Cognizant simply by asking

Copilot Vision on Windows 11 sends data to Microsoft servers

CISA Warns: SysAid Flaws Under Active Attack Enable Remote File Access and SSRF

Google Sues the Badbox Botnet Operators

CISA Orders Urgent Patching After Chinese Hackers Exploit SharePoint Flaws in Live Attacks

China warns citizens to beware backdoored devices, on land and under the sea

Fake E-commerce Platforms as Attack Vectors & Threats in 2025

~ 22 Jul 2025 ~

Microsoft Links Ongoing SharePoint Exploits to Three Chinese Hacker Groups

Funding for program to stop next Stuxnet from hitting US expired Sunday

Cisco Confirms Active Exploits Targeting ISE Flaws Enabling Unauthenticated Root Access

Credential Theft and Remote Access Surge as AllaKore, PureRAT, and Hijack Loader Proliferate