Port 22

~ 26 Jun 2025 ~

That WhatsApp from an Israeli infosec expert could be a Iranian phish

~ 25 Jun 2025 ~

nOAuth Vulnerability Still Affects 9% of Microsoft Entra SaaS Apps Two Years After Discovery

'They're Not Breathing': Inside the Chaos of ICE Detention Center 911 Calls

Citrix bleeds again: This time a zero-day exploited - patch now

Citrix Releases Emergency Patches for Actively Exploited CVE-2025-6543 in NetScaler ADC

Citrix Bleed 2 Flaw Enables Token Theft; SAP GUI Flaws Risk Sensitive Data Exposure

Amazon's Ring can now use AI to 'learn the routines of your residence'

Computer vision research feeds surveillance tech as patent links spike 5

Supply chain attacks surge with orgs 'flying blind' about dependencies

Microsoft Named a Leader in the 2025 IDC CNAPP MarketScape: Key Takeaways for Security Buyers

Pro-Iranian Hacktivist Group Leaks Personal Records from the 2024 Saudi Games

Beware the Hidden Risk in Your Entra Environment

French cybercrime police arrest five suspected BreachForums admins

SonicWall NetExtender Trojan and ConnectWise Exploits Used in Remote Access Attacks

North Korea-linked Supply Chain Attack Targets Developers with 35 Malicious npm Packages

What LLMs Know About Their Users

Microsoft Extends Windows 10 Security Updates for One Year with New Enrollment Options

AI and collaboration tools: how cyberattackers are targeting SMBs in 2025

UK govt dept website that campaigns against encryption hijacked to advertise ... payday loans

Post-Quantum Cryptography Implementation Enterprise-Readiness Analysis

New U.S. Visa Rule Requires Applicants to Set Social Media Account Privacy to Public

~ 24 Jun 2025 ~

Don't panic, but it's only a matter of time before critical 'CitrixBleed 2' is under attack

Researchers Find Way to Shut Down Cryptominer Campaigns Using Bad Shares and XMRogue

Hackers Target Over 70 Microsoft Exchange Servers to Steal Credentials via Keyloggers

Beware of fake SonicWall VPN app that steals users' credentials

Between Buzz and Reality: The CTEM Conversation We All Need

Microsoft is named a Leader in The Forrester Wave: Security Analytics Platforms, 2025

Hackers Exploit Misconfigured Docker APIs to Mine Cryptocurrency via Tor Network

The vulnerability management gap no one talks about

U.S. House Bans WhatsApp on Official Devices Over Security and Data Protection Issues

APT28 Uses Signal Chat to Deploy BEARDSHELL Malware and COVENANT in Ukraine

Schneider Electric Modicon Controllers

Schneider Electric EVLink WallBox

Parsons AccuWeather Widget

MICROSENS NMP Web+

Kaleris Navis N4 Terminal Operating System

Delta Electronics CNCSoft

ControlID iDSecure On-Premises

Four REvil ransomware crooks walk free, escape gulag fate, after admitting guilt

Heres a Subliminal Channel You Havent Considered Before

China-linked Salt Typhoon Exploits Critical Cisco Vulnerability to Target Canadian Telecom

'Psylo' browser tries to obscure digital fingerprints by giving every tab its own IP address

~ 23 Jun 2025 ~

Typhoon-like gang slinging TLS certificate 'signed' by the Los Angeles Police Department

Echo Chamber Jailbreak Tricks LLMs Like OpenAI and Google into Generating Harmful Content

DHS Warns Pro-Iranian Hackers Likely to Target U.S. Networks After Iranian Nuclear Strikes

XDigo Malware Exploits Windows LNK Flaw in Eastern European Government Attacks

Iran cyberattacks against US biz more likely following air strikes

How AI-Enabled Workflow Automation Can Help SOCs Reduce Burnout

Telegram Purged Chinese Crypto Scam MarketsThen Watched as They Rebuilt

Canadas Secret Wars: Cold War Spies to Digital Surveillance with Ron Deibert & Donald Mahar

Google Adds Multi-Layered Defenses to Secure GenAI from Prompt Injection Attacks

Navigating cyber risks with Microsoft Security Exposure Management eBook

Second attack on McLaren Health Care in a year affects 743k people

Weekly Recap: Chrome 0-Day, 7.3 Tbps DDoS, MFA Bypass Tricks, Banking Trojan and More

True Costs of Misinformation: The Global Spread of Misinformation Laws

A Trip to Ancient BABYLON: Unearthing a 2017 Pegasus Persistence Exploit

Experts count staggering costs incurred by UK retail amid cyberattack hell

Largest DDoS Attack to Date

Taiwan Is Rushing to Make Its Own Drones Before It's Too Late

SparkKitty, SparkCats little brother: A new Trojan spy found in the App Store and Google Play

AutoPwnKey AV Evasion via Simulated User Interaction

Former US Army Sergeant pleads guilty after amateurish attempt at selling secrets to China

~ 22 Jun 2025 ~

What Satellite Images Reveal About the US Bombing of Iran's Nuclear Sites

Truth Social Crashes as Trump Live-Posts Iran Bombing

~ 21 Jun 2025 ~

Scattered Spider Behind Cyberattacks on M&S and Co-op, Causing Up to $592M in Damages

Israel Says Iran Is Hacking Security Cameras for Spying

~ 20 Jun 2025 ~

Qilin Ransomware Adds "Call Lawyer" Feature to Pressure Victims for Larger Ransoms

Netflix, Apple, BofA websites hijacked with fake help-desk numbers

Friday Squid Blogging: Gonate Squid Video

Looks like Aflac is the latest insurance giant snagged in Scattered Spiders web

Qilin ransomware top dogs treat their minions to on-call lawyers for fierier negotiations

Iran's State TV Hijacked Mid-Broadcast Amid Geopolitical Tensions; $90M Stolen in Crypto Heist

6 Steps to 24/7 In-House SOC Success

Massive 7.3 Tbps DDoS Attack Delivers 37.4 TB in 45 Seconds, Targeting Hosting Provider

67 Trojanized GitHub Repositories Found in Campaign Targeting Gamers and Developers

Surveillance in the US

Attack on Oxford City Council exposes 21 years of election worker data

GitPhish OAuth Device Code Phishing for GitHub Repos, Secrets, and CI/CD

~ 19 Jun 2025 ~

New Android Malware Surge Hits Devices via Overlays, Virtualization Fraud and NFC Theft

Boffins devise voice-altering tech to jam 'vishing' schemes

BlueNoroff Deepfake Zoom Scam Hits Crypto Employee with MacOS Backdoor Malware

Secure Vibe Coding: The Complete New Guide

Uncle Sam seeks time in tower dump data grab case after judge calls it 'unconstitutional'

Uncover LOTS Attacks Hiding in Trusted Tools Learn How in This Free Expert Session

Russian APT29 Exploits Gmail App Passwords to Bypass 2FA in Targeted Phishing Campaign

Glazed and confused: Hole lotta highly sensitive data nicked from Krispy Kreme

UK gov asks university boffins to pinpoint cyber growth areas where it should splash cash

Meta Adds Passkey Login Support to Facebook for Android and iOS Users

Self-Driving Car Video Footage

New Linux Flaws Enable Full Root Access via PAM and Udisks Across Major Distributions

Sneaky Serpentine#Cloud slithers through Cloudflare tunnels to inject orgs with Python-based malware

Irans internet goes offline for hours amid claims of enemy abuse

~ 18 Jun 2025 ~

New Malware Campaign Uses Cloudflare Tunnels to Deliver RATs via Phishing Chains

Minecraft cheaters never win ... but they may get malware

1,500+ Minecraft Players Infected by Java Malware Masquerading as Game Mods on GitHub

Asana's cutting-edge AI feature ran into a little data leakage problem

Irans Internet Blackout Adds New Dangers for Civilians Amid Israeli Bombings

Same Sea, New Phish: Russian Government-Linked Social Engineering Targets App-Specific Passwords

FedRAMP at Startup Speed: Lessons Learned

Water Curse Hijacks 76 GitHub Accounts to Deliver Multi-Stage Malware Campaign