Port 22

~ 25 Jul 2025 ~

The Age-Checked Internet Has Arrived

evilreplay Real-Time Browser Session Hijack Without Cookie Theft

~ 24 Jul 2025 ~

Critical Mitel Flaw Lets Hackers Bypass Login, Gain Full Access to MiVoice MX-ONE Systems

Fire Ant Exploits VMware Flaws to Compromise ESXi Hosts and vCenter Environments

Laptop farmer behind $17M North Korean IT worker scam locked up for 8.5 years

Euro healthcare giant AMEOS Group shuts down IT systems after mystery attack

CastleLoader Malware Infects 469 Devices Using Fake GitHub Repos and ClickFix Phishing

Sophos and SonicWall Patch Critical RCE Flaws Affecting Firewalls and SMA 100 Devices

No login? No problem: Cisco ISE flaw gave root access before fix arrived, say researchers

Phishers Target Aviation Execs to Scam Customers

So much for watermarks: UnMarker tool nukes AI provenance tags

Watch This Webinar to Uncover Hidden Flaws in Login, AI, and Digital Trust and Fix Them

Microsoft: SharePoint attacks now officially include ransomware infections

Pentests once a year? Nope. Its time to build an offensive SOC

China-Based APTs Deploy Fake Dalai Lama Apps to Spy on Tibetan Community

Storm-2603 Exploits SharePoint Flaws to Deploy Warlock Ransomware on Unpatched Systems

A Premium Luggage Service's Web Bugs Exposed the Travel Plans of Every UserIncluding Diplomats

Coyote malware abuses Microsoft's UI Automation to hunt banking creds

The EFF is 35, but the battle to defend internet freedom is far from over

Compromised Amazon Q extension told AI to delete everything and it shipped

Europol Arrests XSS Forum Admin in Kyiv After 12-Year Run Operating Cybercrime Marketplace

Network Thermostat X-Series WiFi Thermostats

Mitsubishi Electric CNC Series

LG Innotek Camera Model LNV5110R

Honeywell Experion PKS

How Solid Protocol Restores Digital Agency

Eau no! Dior tells customers their data was swiped in cyber snafu

Hackers Deploy Stealth Backdoor in WordPress Mu-Plugins to Maintain Admin Access

Not pretty, not Windows-only: npm phishing attack laces popular packages with malware

ToolShell: An all-you-can-eat buffet for threat actors

Rogue CAPTCHAs: Look out for phony verification pages spreading malware

~ 23 Jul 2025 ~

Threat Actor Mimo Targets Magento and Docker to Deploy Crypto Miners and Proxyware

Microsoft Put Older Versions of SharePoint on Life Support. Hackers Are Taking Advantage

IRL Com recruits teens for real-life stabbings, shootings, FBI warns

Nothing to see here: Brave browser blocks privacy-busting Microsoft Recall

New Coyote Malware Variant Exploits Windows UI Automation to Steal Banking Credentials

Microsoft SharePoint victim count hits 400+ orgs in ongoing attacks

Kerberoasting Detections: A New Approach to a Decade-Old Challenge

VMware prevents some perpetual license holders from downloading patches

Three questions you should always be able to answer about your security environment

Google Launches OSS Rebuild to Expose Malicious Code in Widely Used Open-Source Packages

$380M lawsuit claims intruder got Clorox's passwords from Cognizant simply by asking

Copilot Vision on Windows 11 sends data to Microsoft servers

CISA Warns: SysAid Flaws Under Active Attack Enable Remote File Access and SSRF

Google Sues the Badbox Botnet Operators

CISA Orders Urgent Patching After Chinese Hackers Exploit SharePoint Flaws in Live Attacks

China warns citizens to beware backdoored devices, on land and under the sea

Fake E-commerce Platforms as Attack Vectors & Threats in 2025

~ 22 Jul 2025 ~

Microsoft Links Ongoing SharePoint Exploits to Three Chinese Hacker Groups

Funding for program to stop next Stuxnet from hitting US expired Sunday

Cisco Confirms Active Exploits Targeting ISE Flaws Enabling Unauthenticated Root Access

Credential Theft and Remote Access Surge as AllaKore, PureRAT, and Hijack Loader Proliferate

Arch Linux users told to purge Firefox forks after AUR malware scare

Surprise, surprise: Chinese spies, IP stealers, other miscreants attacking Microsoft SharePoint servers

How to Advance from SOC Manager to CISO?

Silicon Valley engineer admits theft of US missile tech secrets

Humans can be tracked with unique 'fingerprint' based on how their bodies block Wi-Fi signals

Microsoft patches critical SharePoint 2016 zero-days amid active exploits

Hackers Exploit SharePoint Zero-Day Since July 7 to Steal Keys, Maintain Persistent Access

Microsoft Sentinel data lake: Unify signals, cut costs, and power agentic AI

Disrupting active exploitation of on-premises SharePoint vulnerabilities

UK to ban ransomware payments by public sector organizations

Schneider Electric System Monitor Application

Schneider Electric EcoStruxure Power Operation

Schneider Electric EcoStruxure

Schneider Electric EcoStruxture IT Data Center Expert

Lantronix Provisioning Manager

DuraComm DP-10iN-100-MU

Encryption Backdoors and the Fourth Amendment

Open source's superior security is a matter of eyeballs: Be kind to the brains behind them

Why is your data worth so much? | Unlocked 403 cybersecurity podcast (S2E4)

~ 21 Jul 2025 ~

Iran-Linked DCHSpy Android Malware Masquerades as VPN Apps to Spy on Dissidents

Dell scoffs at breach, says miscreants only stole fake data

China-Linked Hackers Launch Targeted Espionage Campaign on African IT Infrastructure

The Citizen Labs Submission to the UN on Universal Birth Registration and the Use of Digital Technologies

Chasing Shadows: Chronicles of Counter-Intelligence from the Citizen Lab

Another massive security snafu hits Microsoft, but don't expect it to stick

Canadas Outdated Laws Leave Spyware Oversight Dangerously Weak

Weekly Recap: SharePoint 0-Day, Chrome Exploit, macOS Spyware, NVIDIA Toolkit RCE and More

Assessing the Role of AI in Zero Trust

How WIRED Analyzed the Epstein Video

Microsoft Fix Targets Attacks on SharePoint Zero-Day

Four new Android spyware samples linked to Iran's intel agency

PoisonSeed Hackers Bypass FIDO Keys Using QR Phishing and Cross-Device Sign-In Abuse

Another Supply Chain Vulnerability

Microsoft Releases Urgent Patch for SharePoint RCE Flaw Exploited in Ongoing Cyber Attacks

Hard-Coded Credentials Found in HPE Instant On Devices Allow Admin Access

3,500 Websites Hijacked to Secretly Mine Crypto Using Stealth JavaScript and WebSocket Tactics

Rumble in the jungle: APT41s new target in Africa

Alaska Airlines grounds itself due to mysterious IT problem

Japan discovers object out beyond Pluto that rewrites the Planet 9 theory

CredMaster Anonymous AWSBacked Password Spraying Toolkit

Microsoft patches failed to fix on-prem SharePoint, which is now under zero-day attack

~ 20 Jul 2025 ~

EncryptHub Targets Web3 Developers Using Fake AI Platforms to Deploy Fickle Stealer Malware

Critical Unpatched SharePoint Zero-Day Actively Exploited, Breaches 75+ Global Organizations

Malware Injected into 6 npm Packages After Maintainer Tokens Stolen in Phishing Attack

Hackers Exploit Critical CrushFTP Flaw to Gain Admin Access on Unpatched Servers

UK uncovers novel Microsoft snooping malware, blames and sanctions GRU cyberspies

~ 19 Jul 2025 ~

At Least 750 US Hospitals Faced Disruptions During Last Years CrowdStrike Outage, Study Finds

Chinas Salt Typhoon Hackers Breached the US National Guard for Nearly a Year