Port 22

~ 30 Jun 2025 ~

Leveraging Credentials As Unique Identifiers: A Pragmatic Approach To NHI Inventories

Weekly Recap: Airline Hacks, Citrix 0-Day, Outlook Malware, Banking Trojans and more

Sinaloa drug cartel hired a cybersnoop to identify and kill FBI informants

How Cybersecurity Fears Affect Confidence in Voting Systems

Your browser has ad tech's fingerprints all over it, but there's a clean-up squad in town

Canada orders Chinese CCTV biz Hikvision to quit the country ASAP

OnionC2 Tor Powered Rust Command and Control Framework

It's 2025 and almost half of you are still paying ransomware operators

~ 28 Jun 2025 ~

FBI Warns of Scattered Spider's Expanding Attacks on Airlines Using Social Engineering

Ex-NATO hacker: 'In the cyber world, there's no such thing as a ceasefire'

GIFTEDCROOK Malware Evolves: From Browser Stealer to Intelligence-Gathering Tool

Facebooks New AI Tool Asks to Upload Your Photos for Story Ideas, Sparking Privacy Concerns

ICE Rolls Facial Recognition Tools Out to Officers' Phones

This month in security with Tony Anscombe June 2025 edition

~ 27 Jun 2025 ~

Crims are posing as insurance companies to steal health records and payment info

Over 1,000 SOHO Devices Hacked in China-linked LapDogs Cyber Espionage Campaign

Friday Squid Blogging: What to Do When You Find a Squid Egg Mop

PUBLOAD and Pubshell Malware Used in Mustang Panda's Tibet-Specific Attack

Unveiling RIFT: Enhancing Rust malware analysis through pattern matching

Cisco punts network-security integration as key for agentic AI

Aloha, you mightve been pwned: Hawaiian Airlines discloses cybersecurity event

Business Case for Agentic AI SOC Analysts

Chinese Group Silver Fox Uses Fake Websites to Deliver Sainbox RAT and Hidden Rootkit

US Supreme Court Upholds Texas Porn ID Law

So you CAN turn an entire car into a video game controller

Data spill in aisle 5: Grocery giant Ahold Delhaize says 2.2M affected after cyberattack

MOVEit Transfer Faces Increased Threats as Scanning Surges and CVE Flaws Are Targeted

OneClik Malware Targets Energy Sector Using Microsoft ClickOnce and Golang Backdoors

The Age of Integrity

Sububy A Modular Ruby Suite for Subdomain Enumeration

~ 26 Jun 2025 ~

Critical Open VSX Registry Flaw Exposes Millions of Developers to Supply Chain Attacks

FBI used bitcoin wallet records to peg notorious IntelBroker as UK national

Critical RCE Flaws in Cisco ISE and ISE-PIC Allow Unauthenticated Attackers to Gain Root Access

What if Microsoft just turned you off? Security pro counts the cost of dependency

New FileFix Method Emerges as a Threat Following 517% Rise in ClickFix Attacks

Cisco fixes two critical make-me-root bugs on Identity Services Engine components

The Hidden Risks of SaaS: Why Built-In Protections Aren't Enough for Modern Data Resilience

Building security that lasts: Microsofts journey towards durability at scale

Iranian APT35 Hackers Targeting Israeli Tech Experts with AI-Powered Phishing Attacks

Cyber Criminals Exploit Open-Source Tools to Compromise Financial Institutions Across Africa

Glasgow City Council online services crippled following cyberattack

TrendMakers Sight Bulb Pro

Mitsubishi Electric Air Conditioning Systems

CISA Adds 3 Flaws to KEV Catalog, Impacting AMI MegaRAC, D-Link, Fortinet

Qilin ransomware attack on NHS supplier contributed to patient fatality

White House Bans WhatsApp

WhatsApp Adds AI-Powered Message Summaries for Faster Chat Previews

ESET Threat Report H1 2025

UK to buy nuclear-capable F-35As that can't be refueled from RAF tankers

Frozen supermarket chain deploys facial recognition tech

That WhatsApp from an Israeli infosec expert could be a Iranian phish

~ 25 Jun 2025 ~

nOAuth Vulnerability Still Affects 9% of Microsoft Entra SaaS Apps Two Years After Discovery

'They're Not Breathing': Inside the Chaos of ICE Detention Center 911 Calls

Citrix bleeds again: This time a zero-day exploited - patch now

Citrix Releases Emergency Patches for Actively Exploited CVE-2025-6543 in NetScaler ADC

Citrix Bleed 2 Flaw Enables Token Theft; SAP GUI Flaws Risk Sensitive Data Exposure

Amazon's Ring can now use AI to 'learn the routines of your residence'

Computer vision research feeds surveillance tech as patent links spike 5

Supply chain attacks surge with orgs 'flying blind' about dependencies

Microsoft Named a Leader in the 2025 IDC CNAPP MarketScape: Key Takeaways for Security Buyers

Pro-Iranian Hacktivist Group Leaks Personal Records from the 2024 Saudi Games

Beware the Hidden Risk in Your Entra Environment

French cybercrime police arrest five suspected BreachForums admins

SonicWall NetExtender Trojan and ConnectWise Exploits Used in Remote Access Attacks

North Korea-linked Supply Chain Attack Targets Developers with 35 Malicious npm Packages

What LLMs Know About Their Users

Microsoft Extends Windows 10 Security Updates for One Year with New Enrollment Options

AI and collaboration tools: how cyberattackers are targeting SMBs in 2025

UK govt dept website that campaigns against encryption hijacked to advertise ... payday loans

Post-Quantum Cryptography Implementation Enterprise-Readiness Analysis

New U.S. Visa Rule Requires Applicants to Set Social Media Account Privacy to Public

~ 24 Jun 2025 ~

Don't panic, but it's only a matter of time before critical 'CitrixBleed 2' is under attack

Researchers Find Way to Shut Down Cryptominer Campaigns Using Bad Shares and XMRogue

Hackers Target Over 70 Microsoft Exchange Servers to Steal Credentials via Keyloggers

Beware of fake SonicWall VPN app that steals users' credentials

Between Buzz and Reality: The CTEM Conversation We All Need

Microsoft is named a Leader in The Forrester Wave: Security Analytics Platforms, 2025

Hackers Exploit Misconfigured Docker APIs to Mine Cryptocurrency via Tor Network

The vulnerability management gap no one talks about

U.S. House Bans WhatsApp on Official Devices Over Security and Data Protection Issues

APT28 Uses Signal Chat to Deploy BEARDSHELL Malware and COVENANT in Ukraine

Schneider Electric Modicon Controllers

Schneider Electric EVLink WallBox

Parsons AccuWeather Widget

MICROSENS NMP Web+

Kaleris Navis N4 Terminal Operating System

Delta Electronics CNCSoft

ControlID iDSecure On-Premises

Four REvil ransomware crooks walk free, escape gulag fate, after admitting guilt

Heres a Subliminal Channel You Havent Considered Before

China-linked Salt Typhoon Exploits Critical Cisco Vulnerability to Target Canadian Telecom

'Psylo' browser tries to obscure digital fingerprints by giving every tab its own IP address

~ 23 Jun 2025 ~

Typhoon-like gang slinging TLS certificate 'signed' by the Los Angeles Police Department

Echo Chamber Jailbreak Tricks LLMs Like OpenAI and Google into Generating Harmful Content

DHS Warns Pro-Iranian Hackers Likely to Target U.S. Networks After Iranian Nuclear Strikes

XDigo Malware Exploits Windows LNK Flaw in Eastern European Government Attacks

Iran cyberattacks against US biz more likely following air strikes

How AI-Enabled Workflow Automation Can Help SOCs Reduce Burnout

Telegram Purged Chinese Crypto Scam MarketsThen Watched as They Rebuilt

Canadas Secret Wars: Cold War Spies to Digital Surveillance with Ron Deibert & Donald Mahar