Port 22

~ 13 Aug 2025 ~

SIGINT During World War II

Marc Andreessen wades into the UK's Online Safety Act furor

Microsoft wares may be UK public sector's only viable option

Secure chat darling Matrix admits pair of 'high severity' protocol flaws need painful fixes

New trends in phishing and scams: how AI and social media are changing the game

Ransomware crew spills Saint Paul's 43GB of secrets after city refuses to cough up cash

Crypto crasher Do Kwon admits guilt over failed not-so-stablecoin that erased $41 billion

~ 12 Aug 2025 ~

Researchers Spot XZ Utils Backdoor in Dozens of Docker Hub Images, Fueling Supply Chain Risks

Microsoft's Patch Tuesday baker's dozen: 12 critical bugs plus a SharePoint RCE

Fortinet SSL VPNs Hit by Global Brute-Force Wave Before Attackers Shift to FortiManager

Microsoft Patch Tuesday, August 2025 Edition

Cybercrime Groups ShinyHunters, Scattered Spider Join Forces in Extortion Attacks on Businesses

Manpower franchise discloses data theft after RansomHub posts alleged stolen data

New Curly COMrades APT Using NGEN COM Hijacking in Georgia, Moldova Attacks

Major outage at Pennsylvania Attorney General's Office blamed on 'cyber incident'

The Ultimate Battle: Enterprise Browsers vs. Secure Browser Extensions

Dows 125-year legacy: Innovating with AI to secure a long future

BlackSuit ransomware crew loses servers, domains, and $1m in global shakedown

Supply-chain dependencies: Check your resilience blind spot

Dutch NCSC Confirms Active Exploitation of Citrix NetScaler CVE-2025-6543 in Critical Sectors

Data Brokers Are Hiding Their Opt-Out Pages From Google Search

Oh, great.Three notorious cybercrime gangs appear to be collaborating

Schneider Electric EcoStruxure Power Monitoring Expert

Johnson Controls iSTAR Ultra, iSTAR Ultra SE, iSTAR Ultra G2, iSTAR Ultra G2 SE, iSTAR Edge G2

AVEVA PI Integrator

Ashlar-Vellum Cobalt, Xenon, Argon, Lithium, Cobalt Share

Hyundai: Want cyber-secure car locks? That'll be 49, please

The Incriminating Video Scam

How the always-on generation can level up its cybersecurity game

The White House could end UK's decade-long fight to bust encryption

Poisoned telemetry can turn AIOps into AI Oops, researchers show

~ 11 Aug 2025 ~

New TETRA Radio Encryption Flaws Expose Law Enforcement Communications

Researchers Spot Surge in Erlang/OTP SSH RCE Exploits, 70% Target OT Firewalls

Russia's RomCom among those exploiting a WinRAR 0-day in highly-targeted attacks

WinRAR zero-day exploited in espionage attacks against high-value targets

Weekly Recap: BadCam Attack, WinRAR 0-Day, EDR Killer, NVIDIA Flaws, Ransomware Attacks & More

US scrambles to recoup $1M+ nicked by NORKs

6 Lessons Learned: Focusing Security Where Business Value Lives

Red teams are safe from robots for now, as AI makes better shield than spear

Wikimedia Foundation loses first court battle to swerve Online Safety Act regulation

Intel chief Lip-Bu Tan to visit White House after Trump calls for him to step down

Deepfake detectors are slowly coming of age, at a time of dire need

WinRAR Zero-Day Under Active Exploitation Update to Latest Version Immediately

UK retail giant M&S restores Click & Collect months after cyber attack, some services still down

Automatic License Plate Readers Are Coming to Schools

What Does Palantir Actually Do?

Inside the Multimillion-Dollar Gray Market for Video Game Cheats

Your CV is not fit for the 21st century time to get it up to scratch

Update WinRAR tools now: RomCom and others exploiting zero-day vulnerability

xsshunter-express Self-Hosted Blind XSS Payload Capture and Analysis

New Win-DDoS Flaws Let Attackers Turn Public Domain Controllers into DDoS Botnet via RPC, LDAP

~ 10 Aug 2025 ~

Trend Micro offers weak workaround for already-exploited critical vuln in management console

Researchers Detail Windows EPM Poisoning Exploit Chain Leading to Domain Privilege Escalation

DEF CON hackers plug security holes in US water systems amid tsunami of threats

How to Protect Yourself From Portable Point-of-Sale Scams

The inside story of the Telemessage saga, and how you can view the data

Linux-Based Lenovo Webcams Flaw Can Be Remotely Exploited for BadUSB Attacks

Researchers Reveal ReVault Attack Targeting Dell ControlVault3 Firmware in 100+ Laptop Models

~ 9 Aug 2025 ~

Researchers Uncover GPT-5 Jailbreak and Zero-Click AI Agent Attacks Exposing Cloud and IoT Systems

A Special Diamond Is the Key to a Fully Open Source Quantum Sensor

CyberArk and HashiCorp Flaws Enable Remote Vault Takeover Without Credentials

The US Court Records System Has Been Hacked

~ 8 Aug 2025 ~

Friday Squid Blogging: New Vulnerability in Squid HTTP Proxy Server

Ex-NSA Chief Paul Nakasone Has a Warning for the Tech World

AI Tools Fuel Brazilian Phishing Scam While Efimer Trojan Steals Crypto from 5,000 Victims

KrebsOnSecurity in New Most Wanted HBO Max Series

Hackers Went Looking for a Backdoor in High-Security Safesand Now Can Open Them in Seconds

Chinese biz using AI to hit US politicians, influencers with propaganda

A Misconfiguration That Haunts Corporate Streaming Platforms Could Expose Sensitive Data

Leaked Credentials Up 160%: What Attackers Are Doing With Them

RubyGems, PyPI Hit by Malicious Packages Stealing Credentials, Crypto, Forcing Security Changes

Star leaky app of the week: StarDict

Black Hat USA 2025: Is a high cyber insurance premium about your risk, or your insurers?

Ex-White House cyber, counter-terrorism guru: Microsoft considers security an annoyance, not a necessity

It Looks Like a School Bathroom Smoke Detector. A Teen Hacker Showed It Could Be an Audio Bug

GreedyBear Steals $1M in Crypto Using 150+ Malicious Firefox Wallet Extensions

Infosec hounds spot prompt injection vuln in Google Gemini apps

Google Project Zero Changes Its Disclosure Policy

UK secretly allows facial recognition scans of passport, immigration databases

UK proxy traffic surges as users consider VPN alternatives amid Online Safety Act

Scammers mass-mailing the Efimer Trojan to steal crypto

Android adware: What is it, and how do I get it off my device?

Prohibition never works, but that didn't stop the UK's Online Safety Act

Veles Googles Open Source Secret Scanner for GCP Key Detection

~ 7 Aug 2025 ~

SocGholish Malware Spread via Ad Tools; Delivers Access to LockBit, Evil Corp, and Others

Why blow up satellites when you can just hack them?

Leak Reveals the Workaday Lives of North Korean IT Scammers

German security researchers say 'Windows Hell No' to Microsoft biometrics for biz

Malicious Go, npm Packages Deliver Cross-Platform Malware, Trigger Remote Data Wipes

Mysterious Crime Spree Targeted National Guard Equipment Stashes

Encryption Made for Police and Military Radios May Be Easily Cracked

Microsoft, CISA warn yet another Exchange server bug can lead to 'total domain compromise'

Microsoft Discloses Exchange Server Flaw Enabling Silent Cloud Access in Hybrid Setups

6,500 Axis Servers Expose Remoting Protocol, 4,000 in U.S. Vulnerable to Exploits

Black Hat USA 2025: Policy compliance and the myth of the silver bullet

The AI-Powered Security Shift: What 2025 Is Teaching Us About Cloud Defense

SonicWall Confirms Patched Vulnerability Behind Recent VPN Attacks, Not a Zero-Day

Announcing public preview: Phishing triage agent in Microsoft Defender

Black Hat's network ops center brings rivals together for a common cause

CISA releases malware analysis for Sharepoint Server attack