Port 22

~ 27 Oct 2025 ~

Ex-CISA head thinks AI might fix code so fast we won't need security teams

First Wap: A Surveillance Computer Youve Never Heard Of

Hundreds of People With Top Secret Clearance Exposed by House Democrats Website

How MDR can give MSPs the edge in a competitive market

Chatbots Are Pushing Sanctioned Russian Propaganda

UN Cybercrime Treaty wins dozens of signatories, to go with its many critics

Mem3nt0 mori The Hacking Team is back!

Reaper Unified Application Security Testing with AI Support

~ 26 Oct 2025 ~

Shaq's new ride gets jaq'ed in haq attaq

~ 25 Oct 2025 ~

Amazon Explains How Its AWS Outage Took Down the Web

MPs urge government to stop Britain's phone theft wave through tech

Smishing Triad Linked to 194,000 Malicious Domains in Global Phishing Operation

~ 24 Oct 2025 ~

DHS Wants a Fleet of AI-Powered Surveillance Trucks

Microsoft Issues Emergency Patch for Actively Exploited Critical WSUS Vulnerability

Friday Squid Blogging: El Pulpo The Squid

APT36 Targets Indian Government with Golang-Based DeskRAT Malware Campaign

Sneaky Mermaid attack in Microsoft 365 Copilot steals data

The Cybersecurity Perception Gap: Why Executives and Practitioners See Risk Differently

3,000 YouTube Videos Exposed as Malware Traps in Massive Ghost Network Operation

Self-Spreading 'GlassWorm' Infects VS Code Extensions in Widespread Supply Chain Attack

Microsoft drops surprise Windows Server patch before weekend downtime

Cybersecurity Awareness Month 2025: Cyber-risk thrives in the shadows

Digital ID is now less about illegal working, more about rummaging through drawers

Part Four of The Kryptos Sculpture

Shield AI shows off not-at-all-terrifying autonomous VTOL combat drone

Iran's MuddyWater wades into 100+ government networks in latest spying spree

NetExec Network Execution Toolkit for Windows and Active Directory

Cyber exec with lavish lifestyle charged with selling secrets to Russia

~ 23 Oct 2025 ~

How Hacked Card Shufflers Allegedly Enabled a Mob-Fueled Poker Scam That Rocked the NBA

Playtimes over: Crooks swipe Toys R Us Canada customer data and dump it online

North Korean Hackers Lure Defense Engineers With Fake Jobs to Steal Drone Secrets

Secure AI at Scale and Speed Learn the Framework in this Free Webinar

ThreatsDay Bulletin: $176M Crypto Fine, Hacking Formula 1, Chromium Vulns, AI Hijack & More

Why Organizations Are Abandoning Static Secrets for Managed Identities

Harden your identity defense with improved protection, deeper correlation, and richer context

Trump's workforce cuts blamed as America's cyber edge dulls

Google nukes 3,000 YouTube videos that sowed malware disguised as cracked software

Jingle Thief Hackers Exploit Cloud Infrastructure to Steal Millions in Gift Cards

Veeder-Root TLS4B Automatic Tank Gauge System

Delta Electronics ASDA-Soft

AutomationDirect Productivity Suite

ASKI Energy ALS-Mini-S8 and ALS-Mini-S4

Over 250 Magento Stores Hit Overnight as Hackers Exploit New Adobe Commerce Flaw

Critical Lanscope Endpoint Manager Bug Exploited in Ongoing Cyberattacks, CISA Confirms

Serious F5 Breach

This Privacy Browser Has Dangerous Hidden Features

SpaceX pulls plug on 2,500 Starlink terminals tied to Myanmar fraud farms

Gotta fly: Lazarus targets the UAV sector

~ 22 Oct 2025 ~

Iran-Linked MuddyWater Targets 100+ Organisations in Global Espionage Campaign

Ukraine Aid Groups Targeted Through Fake Zoom Meetings and Weaponized PDF Files

No, ICE (Probably) Didnt Buy Guided Missile Warheads

Chinese Threat Actors Exploit ToolShell SharePoint Flaw Weeks After Microsoft's July Patch

Bridging the Remediation Gap: Introducing Pentera Resolve

Canada Fines Cybercrime Friendly Cryptomus $176M

Fake Nethereum NuGet Package Used Homoglyph Trick to Steal Crypto Wallet Keys

The Long Tail of the AWS Outage

The CISO imperative: Building resilience in an era of accelerated cyberthreats

This free IGA tool boosts your identity security

Why You Should Swap Passwords for Passphrases

Researchers Identify PassiveNeuron APT Using Neursite and NeuralExecutor Malware

Forking confusing: Vulnerable Rust crate exposes uv Python packager

TARmageddon Flaw in Async-Tar Rust Library Could Enable Remote Code Execution

Failures in Face Recognition

Jaguar Land Rover cyber-meltdown tipped to cost the UK almost 2B

TP-Link Patches Four Omada Gateway Flaws, Two Allow Remote Code Execution

Deep analysis of the flaw in BetterBank reward logic

SnakeStealer: How it preys on personal data and how you can protect yourself

UK data regulator defends decision not to investigate MoD Afghan data breach

Post-Quantum Cryptography in 2025 Migration Paths, Early Movers and CISO/RedTeam Impact

~ 21 Oct 2025 ~

Meta Rolls Out New Tools to Protect WhatsApp and Messenger Users from Scams

PolarEdge Targets Cisco, ASUS, QNAP, Synology Routers in Expanding Botnet Campaign

Securing AI to Benefit from AI

The new Microsoft Security Store unites partners andinnovation

Restructuring risk operations: building a business-aligned cyber strategy

Google Identifies Three New Russian Malware Families Created by COLDRIVER Hackers

Hackers Used Snappybee Malware and Citrix Flaw to Breach European Telecom Network

Siemens SIMATIC S7-1200 CPU V1/V2 Devices

Siemens RUGGEDCOM ROS Devices

Rockwell Automation Compact GuardLogix 5370

Rockwell Automation 1783-NATR

Raisecomm RAX701-GC Series

CloudEdge Online Cameras and App

Muji's minimalist calm shattered as ransomware takes down logistics partner

A Cybersecurity Merit Badge

Feds flag active exploitation of patched Windows SMB vuln

The evolving landscape of email phishing attacks: how threat actors are reusing and refining established techniques

A shot in the dark: Can malware vaccines stop ransomware's rampage?

PassiveNeuron: a sophisticated campaign targeting servers of high-profile organizations

Zero Trust Everywhere: a new era in cybersecurity for European organizations

Anti-fraud body leaks dozens of email addresses in invite mishap

Five New Exploited Bugs Land in CISA's Catalog Oracle and Microsoft Among Targets

~ 20 Oct 2025 ~

What to Know About the Shocking Louvre Jewelry Heist

Weekly Recap: F5 Breached, Linux Rootkits, Pixnapping Attack, EtherHiding & More

Analysing ClickFix: 3 Reasons Why Copy/Paste Attacks Are Driving Security Breaches

131 Chrome Extensions Caught Hijacking WhatsApp Web for Massive Spam Campaign

Inside the attack chain: Threat activity targeting Azure Blob Storage

What the Huge AWS Outage Reveals About the Internet

Cybersecurity Awareness Month 2025: Building resilience against ransomware

MSS Claims NSA Used 42 Cyber Tools in Multi-Stage Attack on Beijing Time Systems

Agentic AIs OODA Loop Problem