Port 22

~ 31 Jul 2025 ~

Modernize your identity defense with Microsoft Identity Threat Detection and Response

AI-Driven Trends in Endpoint Security: What the 2025 Gartner Magic Quadrant Reveals

Kremlin goons caught abusing ISPs to spy on Moscow-based diplomats, Microsoft says

The Kremlin's Most Devious Hacking Group Is Using Russian ISPs to Plant Spyware

Frozen in transit: Secret Blizzards AiTM campaign against diplomats

UNC2891 Breaches ATM Network via 4G Raspberry Pi, Tries CAKETAP Rootkit for Fraud

Alert Fatigue, Data Overload, and the Fall of Traditional SIEMs

Silk Typhoon spun a web of patents for offensive cyber tools, report says

Brit watchdog pushes to rein in Microsoft and AWS with 'strategic market status'

NHS disability equipment provider on brink of collapse a year after cyberattack

Hackers Exploit Critical WordPress Theme Flaw to Hijack Sites via Remote Plugin Install

Rockwell Automation Lifecycle Services with VMware

Gralp Systems Gralp FMUS series

Cheating on Quantum Computing Benchmarks

Banning VPNs to protect kids? Good luck with that

This month in security with Tony Anscombe July 2025 edition

Internet exchange points are ignored, vulnerable, and absent from infrastructure protection plans

Lethal Cambodia-Thailand border clash linked to cyber-scam slave camps

The TSA likes facial recognition at airports. Passengers and politicians, not so much

~ 30 Jul 2025 ~

Hackers Use Facebook Ads to Spread JSCEAL Malware via Fake Cryptocurrency Trading Apps

FunkSec Ransomware Decryptor Released Free to Public After Group Goes Dormant

Scammers Unleash Flood of Slick Online Gaming Sites

Critical Dahua Camera Flaws Enable Remote Hijack via ONVIF and File Upload Exploits

Enterprises neglect AI security and attackers have noticed

Chinese Firms Linked to Silk Typhoon Filed 15+ Patents for Cyber Espionage Tools

Users left scrambling for a plan B as Dropbox drops Dropbox Passwords

Minnesota governor calls in the troops after St Paul cyberattack

Product Walkthrough: A Look Inside Pillar's AI Security Platform

Apple Patches Safari Vulnerability Also Exploited as Zero-Day in Google Chrome

Palo Alto Networks inks $25b deal to buy identity-security shop CyberArk

Google Launches DBSC Open Beta in Chrome and Enhances Patch Transparency via Project Zero

Hackers Exploit SAP Vulnerability to Breach Linux Systems and Deploy Auto-Color Malware

Ransomware gang sets deadline to leak 3.5 TB of Ingram Micro data

Scattered Spider Hacker Arrests Halt Attacks, But Copycat Threats Sustain Security Pressure

Measuring the Attack/Defense Balance

Cobalt Strike Beacon delivered via GitHub and social media

Leveraging OSINT from the Dark Web A Practical How-To

~ 29 Jul 2025 ~

CISA caves to Wyden, agrees to release US telco insecurity report - but wont say when

Wiz Uncovers Critical Access Bypass Flaw in AI-Powered Vibe Coding Platform Base44

FBI: Watch out for these signs Scattered Spider is spinning its web around your org

PyPI Warns of Ongoing Phishing Campaign Using Fake Verification Emails and Lookalike Domain

Targeted Across Borders: Digital Transnational Repression, Gender Dimensions, and the Role of Host States

Chaos RaaS Emerges After BlackSuit Takedown, Demanding $300K from U.S. Victims

How the Browser Became the Main Cyber Battleground

Cybercriminals Use Fake Apps to Steal Data and Blackmail Users Across Asias Mobile Networks

Why React Didn't Kill XSS: The New JavaScript Injection Playbook

Raspberry Pi RP2350 A4 update fixes old bugs and dares you to break it again

Samsung HVAC DMS

National Instruments LabVIEW

Delta Electronics DTN Soft

War Games: MoD asks soldiers with 1337 skillz to compete in esports

Aeroflot Hacked

Age Verification Laws Send VPN Use Soaringand Threaten the Open Internet

CISA Adds PaperCut NG/MF CSRF Vulnerability to KEV Catalog Amid Active Exploitation

The hidden risks of browser extensions and how to stay safe

~ 28 Jul 2025 ~

Hackers Breach Toptal GitHub, Publish 10 Malicious npm Packages With 5,000 Downloads

Microsoft spotlights Apple bug patched in March as SharePoint exploits continue

Security pros are drowning in threat-intel data and it's making everything more dangerous

That Time Tom Lehrer Pranked the NSA

Weekly Recap SharePoint Breach, Spyware, IoT Hijacks, DPRK Fraud, Crypto Drains and More

Email Security Is Stuck in the Antivirus Era: Why It Needs a Modern Approach

Sploitlight: Analyzing a Spotlight-based macOS TCC vulnerability

Majority of 1.4M customers caught in Allianz Life data heist

Aeroflot aeroflops over 'IT issues' after attackers claim year-long compromise

Scattered Spider Hijacks VMware ESXi to Deploy Ransomware on Critical U.S. Infrastructure

Microsoft SharePoint Zero-Day

Critical Flaws in Niagara Framework Threaten Smart Buildings and Industrial Systems Worldwide

Argus Ultimate Reconnaissance Toolkit for Offensive Recon Operations

US spy satellite agency breached, but insists no classified secrets spilled

~ 26 Jul 2025 ~

Congress tries to outlaw AI that jacks up prices based on what it knows about you

Blame a leak for Microsoft SharePoint attacks, researcher insists

~ 25 Jul 2025 ~

Friday Squid Blogging: Stable Quasi-Isodynamic Designs

U.S. Sanctions Firm Behind N. Korean IT Scheme; Arizona Woman Jailed for Running Laptop Farm

Senator to Google: Give us info from telco Salt Typhoon probes

Marcus Michaelsen on the Impacts of Transnational Repression: Interview by Stockholm Center for Freedom

Patchwork Targets Turkish Defense Firms with Spear-Phishing Using Malicious LNK Files

Cyber Espionage Campaign Hits Russian Aerospace Sector Using EAGLET Backdoor

Soco404 and Koske Malware Target Cloud Services with Cross-Platform Cryptomining Attacks

Overcoming Risks from Chinese GenAI Tool Usage

Freelance dev shop Toptal caught serving malware after GitHub account break-in

Microsoft admits it 'cannot guarantee' data sovereignty

Subliminal Learning in AIs

Advisor to Brit tech contractors Qdos confirms client data leak

SharePoint under fire: ToolShell attacks hit organizations worldwide

ToolShell: a story of five vulnerabilities in Microsoft SharePoint

DNS security is important but DNSSEC may be a failed experiment

The Age-Checked Internet Has Arrived

evilreplay Real-Time Browser Session Hijack Without Cookie Theft

~ 24 Jul 2025 ~

Critical Mitel Flaw Lets Hackers Bypass Login, Gain Full Access to MiVoice MX-ONE Systems

Fire Ant Exploits VMware Flaws to Compromise ESXi Hosts and vCenter Environments

Laptop farmer behind $17M North Korean IT worker scam locked up for 8.5 years

Euro healthcare giant AMEOS Group shuts down IT systems after mystery attack

CastleLoader Malware Infects 469 Devices Using Fake GitHub Repos and ClickFix Phishing

Sophos and SonicWall Patch Critical RCE Flaws Affecting Firewalls and SMA 100 Devices

No login? No problem: Cisco ISE flaw gave root access before fix arrived, say researchers

Phishers Target Aviation Execs to Scam Customers

So much for watermarks: UnMarker tool nukes AI provenance tags

Watch This Webinar to Uncover Hidden Flaws in Login, AI, and Digital Trust and Fix Them

Microsoft: SharePoint attacks now officially include ransomware infections

Pentests once a year? Nope. Its time to build an offensive SOC