Port 22

~ 2 Oct 2025 ~

ThreatsDay Bulletin: CarPlay Exploit, BYOVD Tactics, SQL C2 Attacks, iCloud Backdoor Demand & More

Microsoft named a Leader in the IDC MarketScape for XDR

Google Mandiant Probes New Oracle Extortion Wave Possibly Linked to Cl0p Ransomware

How to Close Threat Detection Gaps: Your SOC's Action Plan

Daniel Miessler on the AI Attack/Defense Balance

Warning: Beware of Android Spyware Disguised as Signal Encryption Plugin and ToTok Pro

Clop-linked crims shake down Oracle execs with data theft claims

EU funds are flowing into spyware companies, and politicians are demanding answers

Raise3D Pro2 Series 3D Printers

Hitachi Energy MSM Product

Cybercrims claim raid on 28,000 Red Hat repos, say they have sensitive customer files

~ 1 Oct 2025 ~

New WireTap Attack Extracts Intel SGX ECDSA Key via DDR4 Memory-Bus Interposer

US gov shutdown leaves IT projects hanging, security defenders a skeleton crew

'Delightful' root-access bug in Red Hat OpenShift AI allows full cluster takeover

OneLogin Bug Let Attackers Use API Keys to Steal OIDC Secrets and Impersonate Apps

How Leading Security Teams Blend AI + Human Workflows (Free Webinar)

Red Hat OpenShift AI Flaw Exposes Hybrid Cloud Infrastructure to Full Takeover

Air Force admits SharePoint privacy issue as reports trickle out of possible breach

Hackers Exploit Milesight Routers to Send Phishing SMS to European Users

2025 Cybersecurity Reality Check: Breaches Hidden, Attack Surfaces Growing, and AI Misperceptions Rising

Cybersecurity Awareness Month: Security starts with you

New Android Banking Trojan Klopatra Uses Hidden VNC to Control Infected Smartphones

Ukraine Warns of CABINETRAT Backdoor + XLL Add-ins Spread via Signal ZIPs

3.7M breach notification letters set to flood North America's mailboxes

Autonomous AI adoption stalls amid trust and governance crisis

Use of Generative AI in Scams

Imgur yanks Brit access to memes as parent company faces fine

Forensic journey: hunting evil within AmCache

Explain digital ID or watch it fizzle out, UK PM Starmer told

Schools are swotting up on security yet still flunk recovery when cyberattacks strike

Beijing-backed burglars master .NET to target government web servers

$50 Battering RAM Attack Breaks Intel and AMD Cloud Security Protections

~ 30 Sep 2025 ~

Fake North Korean IT workers sneaking into healthcare, finance, and AI

Phantom Taurus: New China-Linked Hacker Group Hits Governments With Stealth Malware

Tile trackers are a stalker's dream, say Georgia Tech researchers

Google bolts AI into Drive to catch ransomware, but crooks not shaking yet

Researchers Disclose Google Gemini AI Flaws Allowing Prompt Injection and Cloud Exploits

Microsoft Expands Sentinel Into Agentic Security Platform With Unified Data Lake

Stop Alert Chaos: Context Is the Key to Effective Incident Response

Urgent: China-Linked Hackers Exploit New VMware Zero-Day Since October 2024

Warnings about Cisco vulns under active exploit are falling on deaf ears

TMI: How cloud collaboration suites drive oversharing and unmanaged access

New Android Trojan Datzbro Tricking Elderly with AI-Generated Facebook Travel Events

Evolving Enterprise Defense to Secure the Modern AI Supply Chain

U.K. Police Just Seized 5.5 Billion in Bitcoin The Worlds Largest Crypto Bust

Google's Latest AI Ransomware Defense Only Goes So Far

Empowering defenders in the era of agentic AI with Microsoft Sentinel

OpenPLC_V3

National Instruments Circuit Design Suite

MegaSys Enterprises Telenium Online Web Application

LG Innotek Camera Multiple Models

Festo SBRD-Q/SBOC-Q/SBOI-Q

Festo CPX-CEC-C1 and CPX-CMXX

Festo Controller CECC-S,-LK,-D Family Firmware

How to Use Passkeys With Google Password Manager (2025)

CISA Sounds Alarm on Critical Sudo Flaw Actively Exploited in Linux and Unix Systems

Details of a Scam

Britain's policing minister punts facial recog nationwide

5.5B Bitcoin fraudster pleads guilty after years on the run

Greg Kroah-Hartman explains the Cyber Resilience Act for open source developers

Feds cut funding to program that shared cyber threat info with local governments

~ 29 Sep 2025 ~

EvilAI Malware Masquerades as AI Tools to Infiltrate Global Organizations

One line of malicious npm code led to massive Postmark email heist

Asahi runs dry as online attackers take down Japanese brewer

Weekly Recap: Cisco 0-Day, Record DDoS, LockBit 5.0, BMC Bugs, ShadowV2 Botnet & More

The State of AI in the SOC 2025 - Insights from Recent Study

UK may already be at war with Russia, ex-MI5 head suggests

Microsoft Flags AI-Driven Phishing: LLM-Crafted SVG Files Outsmart Email Security

First Malicious MCP Server Found Stealing Emails in Rogue Postmark-MCP Package

Abusing Notions AI Agent for Data Theft

UK minister suggests government could ditch 'dangerous' Elon Musk's X

How to Use a Password Manager to Share Your Logins After You Die (2025)

Harrods blames its supplier after crims steal 430k customers data in fresh attack

Jaguar Land Rover gets 1.5B government jump-start after cyber breakdown

Tile Tracking Tags Can Be Exploited by Tech-Savvy Stalkers, Researchers Say

Digital ID, same place, different time: In this timeline, the result might surprise us

Submarine cable security is all at sea, and UK govt 'too timid' to act, says report

When AI is trained for treachery, it becomes the perfect agent

Trump demands Microsoft fire its head of global affairs

Dutch teen duo arrested over alleged 'Wi-Fi sniffing' for Russia

~ 28 Sep 2025 ~

Datacenter fire takes 647 South Korean government services offline

How a Travel YouTuber Captured Nepals Revolution for the World

~ 27 Sep 2025 ~

China-Linked PlugX and Bookworm Malware Attacks Target Asian Telecom and ASEAN Networks

An App Used to Dox Charlie Kirk Critics Doxed Its Own Users Instead

Inside the Nuclear Bunkers, Mines, and Mountains Being Retrofitted as Data Centers

Hunt for RedNovember: Beijing hacked critical orgs in year-long snooping campaign

Alibaba unveils $53B global AI plan but it will need GPUs to back it up

~ 26 Sep 2025 ~

Researchers Expose SVG and PureRAT Phishing Threats Targeting Ukraine and Vietnam

Friday Squid Blogging: Jigging for Squid

Cyber threat-sharing law set to shut down, along with US government

Heritage Foundation Uses Bogus Stat to Push a Trans Terrorism Classification

New COLDRIVER Malware Campaign Joins BO Team and Bearlyfy in Russia-Focused Cyberattacks

Crash Tests for Security: Why BAS Is Proof of Defense, Not Assumptions

Microsoft spots fresh XCSSET malware strain hiding in Apple dev projects

Salesforce facing multiple lawsuits after Salesloft breach

Fortra GoAnywhere CVSS 10 Flaw Exploited as 0-Day a Week Before Public Disclosure

New macOS XCSSET Variant Targets Firefox with Clipper and Persistence Module

An attacker's playground: Crims exploit GoAnywhere perfect-10 bug

LockBit's new variant is 'most dangerous yet,' hitting Windows, Linux and VMware ESXi

Prompt injection and a $5 domain trick Salesforce Agentforce into leaking sales