Port 22

~ 18 Aug 2025 ~

Weekly Recap: NFC Fraud, Curly COMrades, N-able Exploits, Docker Backdoors & More

Malicious PyPI and npm Packages Discovered Exploiting Dependencies in Supply Chain Attacks

Microsoft's Nuance coughs up $8.5M to rid itself of MOVEit breach suit

Wazuh for Regulatory Compliance

Dissecting PipeMagic: Inside the architecture of a modular backdoor framework

Workday warns of CRM breach after social engineers make off with business contact details

Eavesdropping on Phone Conversations Through Vibrations

Boffins say tool can sniff 5G traffic, launch 'attacks' without using rogue base stations

Every question you ask, every comment you make, I'll be recording you

Evolution of the PipeMagic backdoor: from the RansomExx incident to CVE-2025-29824

Investors beware: AI-powered financial scams swamp social media

Someone's poking the bear with infostealers targeting Russian crypto developers

LostMyPassword Dual Use Password Recovery and Credential Dumping Tool

~ 17 Aug 2025 ~

P2P payment service Zelle sued for enabling payment fraud hell

~ 16 Aug 2025 ~

Election workers fear threats and intimidation without feds' support in 2026

ERMAC V3.0 Banking Trojan Source Code Leak Exposes Full Malware Infrastructure

Russian Group EncryptHub Exploits MSC EvilTwin Vulnerability to Deploy Fickle Stealer Malware

Russia Is Cracking Down on End-to-End Encrypted Calls

~ 15 Aug 2025 ~

Taiwan Web Servers Breached by UAT-7237 Using Customized Open-Source Hacking Tools

Typhoon-adjacent Chinese crew broke into Taiwanese web host

Friday Squid Blogging: Squid-Shaped UFO Spotted Over Texas

Mobile Phishers Target Brokerage Accounts in Ramp and Dump Cashout Scheme

Cisco's Secure Firewall Management Center now not-so secure, springs a CVSS 10 RCE hole

U.S. Sanctions Garantex and Grinex Over $100M in Ransomware-Linked Illicit Crypto Transactions

Zero Trust + AI: Privacy in the Age of Agentic AI

Cisco Warns of CVSS 10.0 FMC RADIUS Flaw Allowing Remote Code Execution

Cyberattack on Dutch prosecution service is keeping speed cameras offline

Trojans Embedded in .svg Files

Telco giant Colt suffers attack, takes systems offline

LLM chatbots trivial to weaponise for data theft, say boffins

Should UK.gov save money by looking for open source alternatives to Microsoft? You decide

MailSniper PowerShell Tool for Exchange Mailbox Search and Credential Discovery

~ 14 Aug 2025 ~

Ransomware crews don't care about your endpoint security they've already killed it

New HTTP/2 'MadeYouReset' Vulnerability Enables Large-Scale DoS Attacks

An Analysis of Chinese Censorship Bias in LLM

Hidden Links: Analyzing Secret Families of VPN Apps

What WeChat Knows: Pervasive First-Party Tracking in a Billion-User Super-App Ecosystem

Psst: wanna buy a legit FBI email account for $40?

Hackers Found Using CrossC2 to Expand Cobalt Strike Beacons Reach to Linux and macOS

'MadeYouReset' HTTP/2 flaw lets attackers DoS servers

Lock down your critical infrastructure, CISA begs admins

Have You Turned Off Your Virtual Oven?

New Android Malware Wave Hits Banking via NFC Relay Fraud, Call Hijacking, and Root Exploits

BtcTurk suspends operations amid alleged $49M hot wallet heist

Simple Steps for Attack Surface Reduction

Law and water: Russia blamed for US court system break-in and Norwegian dam drama

Google Requires Crypto App Licenses in 15 Regions as FBI Warns of $9.9M Scam Losses

Siemens Wibu CodeMeter Runtime

Siemens Web Installer

Siemens Third-Party Components in SINEC OS

Siemens SIPROTEC 5

Siemens SIPROTEC 4 and SIPROTEC 4 Compact

Siemens SINUMERIK

Siemens SINEC Traffic Analyzer

Siemens SINEC Traffic Analyzer

Siemens SINEC OS

Siemens SIMOTION SCOUT, SIMOTION SCOUT TIA, and SINAMICS STARTER

Siemens Simcenter Femap

Siemens SIMATIC S7-PLCSIM

Siemens SIMATIC RTLS Locating Manager

Siemens SIMATIC RTLS Locating Manager

Siemens SICAM Q100/Q200

Siemens RUGGEDCOM ROX II

Siemens RUGGEDCOM ROX II

Siemens RUGGEDCOM CROSSBOW Station Access Controller

Siemens RUGGEDCOM APE1808

Siemens Opcenter Quality

Siemens Engineering Platforms

Siemens COMOS

Siemens BFCClient

Rockwell FactoryTalk Linx

Rockwell FactoryTalk Linx

Rockwell Automation Studio 5000 Logix Designer

Rockwell Automation Micro800

Rockwell Automation FLEX 5000 I/O

Rockwell Automation FactoryTalk Viewpoint

Rockwell Automation FactoryTalk Viewpoint

Rockwell Automation FactoryTalk Action Manager

Rockwell Automation ControlLogix Ethernet Modules

Rockwell Automation ArmorBlock 5000 I/O - Webserver

Rockwell Automation 1756-ENT2R, 1756-EN4TR, 1756-EN4TRXT

Italian hotels breached en masse since June, government confirms

LLM Coding Integrity Breach

The First Federal Cybersecurity Disaster of Trump 2.0 Has Arrived

Stock in the Channel pulls website amid cyberattack

CISA Adds Two N-able N-central Flaws to Known Exploited Vulnerabilities Catalog

The 9 billion question: To Microsoft or not to Microsoft?

~ 13 Aug 2025 ~

New PS1Bot Malware Campaign Uses Malvertising to Deploy Multi-Stage In-Memory Attacks

Fortinet discloses critical bug with working exploit code amid surge in brute-force attempts

Zoom and Xerox Release Critical Security Updates Fixing Privilege Escalation and RCE Flaws

Data Brokers Face New Pressure for Hiding Opt-Out Pages From Google

Fortinet Warns About FortiSIEM Vulnerability (CVE-2025-25256) With In-the-Wild Exploit Code

AI SOC 101: Key Capabilities Security Leaders Need to Know

AI Applications in Cybersecurity

Connect with the security community at Microsoft Ignite 2025

Crooks can't let go: Active attacks target Office vuln patched 8 years ago

Webinar: What the Next Wave of AI Cyberattacks Will Look Like And How to Survive

Microsoft August 2025 Patch Tuesday Fixes Kerberos Zero-Day Among 111 Total New Flaws

UK expands police facial recognition rollout with 10 new vans heading to a town near you

Charon Ransomware Hits Middle East Sectors Using APT-Level Evasion Tactics