Port 22

~ 9 Dec 2025 ~

Google Adds Layered Defenses to Chrome to Block Indirect Prompt Injection Threats

STAC6565 Targets Canada in 80% of Attacks as Gold Blade Deploys QWCrypt Ransomware

As humanoid robots enter the mainstream, security pros flag the risk of botnets on legs

Researchers Find Malicious VS Code, Go, npm, and Rust Packages Stealing Developer Data

UK to Europe: The time to counter Russia's information war machine is now

AI vs. Human Drivers

Universal Boot Loader (U-Boot)

Multiple India-based CCTV Cameras

Festo LX Appliance

Goodbye, dark Telegram: Blocks are pushing the underground out

UK finally vows to look at 35-year-old Computer Misuse Act

The big catch: How whaling attacks target top executives

Whitehall rejects 1.8B digital ID price tag but won't say what it will cost

Researchers spot 700 percent increase in hypervisor ransomware attacks

~ 8 Dec 2025 ~

Experts Confirm JS#SMUGGLER Uses Compromised Sites to Deploy NetSupport RAT

193 cybercrims arrested, accused of plotting 'violence-as-a-service'

Weekly Recap: USB Malware, React2Shell, WhatsApp Worms, AI IDE Bugs & More

How Can Retailers Cyber-Prepare for the Most Vulnerable Time of the Year?

Stronger together: New Beazley collaboration enhances cyber resilience

Android Malware FvncBot, SeedSnatcher, and ClayRat Gain Stronger Data Theft Features

Sneeit WordPress RCE Exploited in the Wild While ICTBroadcast Bug Fuels Frost Botnet Attacks

UK moves to strengthen undersea cable defenses as Russian snooping ramps up

Home Office kept police facial recognition flaws to itself, UK data watchdog fumes

MuddyWater Deploys UDPGangster Backdoor in Targeted Turkey-Israel-Azerbaijan Campaign

Substitution Cipher Based on The Voynich Manuscript

Barts Health seeks High Court block after Clop pillages NHS trust data

Block all AI browsers for the foreseeable future: Gartner

Chinas first reusable rocket explodes, but its onboard Ethernet network flew

Apache warns of 10.0-rated flaw in Tika metadata ingestion tool

~ 6 Dec 2025 ~

Researchers Uncover 30+ Flaws in AI Coding Tools Enabling Data Theft and RCE Attacks

Critical React2Shell Flaw Added to CISA KEV After Confirmed Active Exploitation

Drones to Diplomas: How Russias Largest Private University is Linked to a $25M Essay Mill

The US Won't Sanction China for Salt Typhoon Hacking

Security News This Week: Oh Crap, Kohlers Toilet Cameras Arent Really End-to-End Encrypted

Death to one-time text codes: Passkeys are the new hotness in MFA

~ 5 Dec 2025 ~

Crims using social media images, videos in 'virtual kidnapping' scams

Zero-Click Agentic Browser Attack Can Delete Entire Google Drive Using Crafted Emails

Friday Squid Blogging: Vampire Squid Genome

Novel clickjacking attack relies on CSS and SVG

Critical XXE Bug CVE-2025-66516 (CVSS 10.0) Hits Apache Tika, Requires Urgent Patch

Cloudflare blames Friday outage on borked fix for React2shell vuln

Microsoft named a leader in the 2025 Gartner Magic Quadrant for Email Security

Chinese Hackers Have Started Exploiting the Newly Disclosed React2Shell Vulnerability

Intellexa Leaks Reveal Zero-Days and Ads-Based Vector for Predator Spyware Delivery

"Getting to Yes": An Anti-Sales Guide for MSPs

Asus supplier hit by ransomware attack as gang flaunts alleged 1 TB haul

Beijing-linked hackers are hammering max-severity React bug, AWS warns

CISA Reports PRC Hackers Using BRICKSTORM for Long-Term Access in U.S. Systems

UK pushes ahead with facial recognition expansion despite civil liberties backlash

JPCERT Confirms Active Command Injection Attacks on Array AG Gateways

Bots, bias, and bunk: How can you tell what's real on the net?

New Anonymous Phone Service

An AI for an AI: Anthropic says AI agents require AI defense

Signalgate Inspector General Report Wants Just One Change to Avoid a Repeat Debacle

~ 4 Dec 2025 ~

SMS Phishers Pivot to Points, Taxes, Fake Retailers

Silver Fox Uses Fake Microsoft Teams Installer to Spread ValleyRAT Malware in China

PRC spies Brickstromed their way into critical US networks and remained hidden for years

PRC spies Brickstormed their way into critical US networks and remained hidden for years

Cloudflare Has Blocked 416 Billion AI Bot Requests Since July 1

Hegseth needs to go to secure messaging school, report says

Twins who hacked State Dept hired to work for gov again, now charged with deleting databases

FBI Says DC Pipe Bomb Suspect Brian Cole Kept Buying Bomb Parts After January 6

Huge Trove of Nude Images Leaked by AI Image Generator Startup's Exposed Database

ThreatsDay Bulletin: Wi-Fi Hack, npm Worm, DeFi Theft, Phishing Blasts and 15 More Stories

Cybersecurity strategies to prioritize now

A New Anonymous Phone Carrier Lets You Sign Up With Nothing but a Zip Code

5 Threats That Reshaped Web Security This Year [2025]

Microsoft quietly shuts down Windows shortcut flaw after years of espionage abuse

GoldFactory Hits Southeast Asia with Modified Banking Apps Driving 11,000+ Infections

Aisuru botnet turns Q3 into a terabit-scale stress test for the entire internet

Record 29.7 Tbps DDoS Attack Linked to AISURU Botnet with up to 4 Million Infected Hosts

Sunbird DCIM dcTrack and Power IQ

SolisCloud Monitoring Platform

Mitsubishi Electric GX Works2

MAXHUB Pivot

Johnson Controls OpenBlue Mobile Web Application for OpenBlue Workplace

Johnson Controls iSTAR

Advantech iView

The Louisiana Department of Wildlife and Fisheries Is Detaining People for ICE

Phishing, privileges and passwords: Why identity is critical to improving cybersecurity posture

TLS 1.3 includes welcome improvements, but still allows long-lived secrets

Rust core library partly polished for industrial safety spec

~ 3 Dec 2025 ~

Critical RSC Bugs in React and Next.js Allow Unauthenticated Remote Code Execution

Microsoft Silently Patches Windows LNK Flaw After Years of Active Exploitation

WordPress King Addons Flaw Under Active Attack Lets Hackers Make Admin Accounts

'Exploitation is imminent' as 39 percent of cloud environs have max-severity React hole

Brazil Hit by Banking Trojan Spread via WhatsApp Worm and RelayNFC NFC Relay Fraud

Shai Hulud 2.0, now with a wiper flavor

Discover the AI Tools Fueling the Next Cybercrime Wave Watch the Webinar

Chopping AI Down to Size: Turning Disruptive Technology into a Strategic Advantage

Picklescan Bugs Allow Malicious PyTorch Models to Evade Scans and Execute Code

Malicious Rust Crate Delivers OS-Specific Malware to Web3 Developer Systems

Exploits and vulnerabilities in Q3 2025

Heres your worst nightmare: E-tailer can only resume partial sales 45 days after ransomware attack

Indian government reveals GPS spoofing at eight major airports

Russia Wants This Mega Missile to Intimidate the West, but It Keeps Crashing

~ 2 Dec 2025 ~

India Orders Messaging Apps to Work Only With Active SIM Cards to Prevent Fraud and Misuse

Researchers Capture Lazarus APT's Remote-Worker Scheme Live on Camera

GlassWorm Returns with 24 Malicious Extensions Impersonating Popular Developer Tools

Malicious npm Package Uses Hidden Prompt and Script to Evade AI Security Tools