Port 22

~ 26 Sep 2025 ~

UK and US security agencies order urgent fixes as Cisco firewall bugs exploited in wild

UK to roll out mandatory digital ID for right to work by 2029

Brits warned as illegal robo-callers with offshored call centers fined half a million

~ 25 Sep 2025 ~

Urgent: Cisco ASA Zero-Day Duo Under Attack; CISA Triggers Emergency Mitigation Directive

Vane Viper Generates 1 Trillion DNS Queries to Power Global Malware and Ad Fraud Network

Salesforce Patches Critical ForcedLeak Bug Exposing CRM Data via AI Prompt Injection

North Korea's Lazarus Group shares its malware with IT work scammers

North Korean Hackers Use New AkdoorTea Backdoor to Target Global Crypto Developers

CTEM's Core: Prioritization and Validation

Threatsday Bulletin: Rootkit Patch, Federal Breach, OnePlus SMS Leak, TikTok Scandal & More

Callous crims break into preschool network, publish toddlers' data

Introducing Microsoft Marketplace Thousands of solutions. Millions of customers. One Marketplace.

Tech Overtakes Gaming as Top DDoS Attack Target, New Gcore Radar Report Finds

XCSSET evolves again: Analyzing the latest updates to XCSSETs inventory

Malicious Rust Crates Steal Solana and Ethereum Keys 8,424 Downloads Confirmed

Dingtian DT-R002

Cisco Warns of Actively Exploited SNMP Vulnerability Allowing RCE or DoS in IOS Software

Zero-day deja vu as another Cisco IOS bug comes under attack

Malicious-Looking URL Creation Service

EU starting registration of fingerprints and faces for short-stay foreigners

Massive npm infection: the Shai-Hulud worm and patient zero

Empty shelves, empty coffers: Co-op pegs cyber hit at 80m

Check your own databases before asking to see our passport photos, Home Office tells UK cops

Three in four European companies are hooked on US tech

~ 24 Sep 2025 ~

Chinese Hackers RedNovember Target Global Governments Using Pantegana and Cobalt Strike

UNC5221 Uses BRICKSTORM Backdoor to Infiltrate U.S. Legal and Technology Sectors

Two Critical Flaws Uncovered in Wondershare RepairIt Exposing User Data and AI Models

New string of phishing attacks targets Python developers

How One Bad Password Ended a 158-Year-Old Business

Retail at risk:How one alert uncovered a persistent cyberthreat

New YiBackdoor Malware Shares Major Code Overlaps with IcedID and Latrodectus

iframe Security Exposed: The Blind Spot Fueling Payment Skimmer Attacks

Google warns China-linked spies lurking in 'numerous' enterprises since March

UK agency makes arrest in airport cyberattack investigation

Hackers Exploit Pandoc CVE-2025-51591 to Target AWS IMDS and Steal EC2 IAM Credentials

Cybercriminals cash out with casino giant's employee data

AI vs. AI: Detecting an AI-obfuscated phishing campaign

State-Sponsored Hackers Exploiting Libraesva Email Security Gateway Vulnerability

Feds Tie Scattered Spider Duo to $115M in Ransoms

US Disrupts Massive Cell Phone Array in New York

Campaigners urge UK PM Starmer to dump digital ID wheeze before it's announced

Politicos: There is a good strong case for government intervention on JLR cyberattack

~ 23 Sep 2025 ~

Two New Supermicro BMC Bugs Allow Malicious Firmware to Evade Root of Trust Security

Eurojust Arrests 5 in 100M Cryptocurrency Investment Fraud Spanning 23 Countries

U.S. Secret Service Seizes 300 SIM Servers, 100K Cards Threatening U.S. Officials Near UN

Nearly half of businesses suffered deepfaked phone calls against staff

SonicWall releases rootkit-busting firmware update following wave of attacks

SolarWinds Releases Hotfix for Critical CVE-2025-26399 Remote Code Execution Flaw

SIM Farms Are a Spam Plague. A Giant One in New York Threatened US Infrastructure, Feds Say

Third time's the charm? SolarWinds (again) patches critical Web Help Desk RCE

Lean Teams, Higher Stakes: Why CISOs Must Rethink Incident Remediation

ShadowV2 Botnet Exploits Misconfigured AWS Docker Containers for DDoS-for-Hire Service

OnePlus leaves researchers on read over Android bug that exposes texts

Microsoft Purview delivered 30% reduction in data breach likelihood

SIM city: Feds say 100,000-card farms could have killed cell towers in NYC

DHS Has Been Collecting US Citizens DNA for Years

Kaspersky: RevengeHotels checks back in with AI-coded malware

GitHub Mandates 2FA and Short-Lived Tokens to Strengthen npm Supply Chain Security

OpenSSF warns that open source infrastructure doesn't run on thoughts and prayers

BadIIS Malware Spreads via SEO Poisoning Redirects Traffic, Plants Web Shells

GitHub moves to tighten npm security amid phishing, malware plague

Oracle gets to store US users' TikTok data, says Trump

Workers fear for their jobs as JLR's latest shutdown extended

Viessmann Vitogate 300

Schneider Electric SESU

Mitsubishi Electric MELSEC-Q Series CPU Module

AutomationDirect CLICK PLUS

How to Use 1Password's Travel Mode at the Border (2025)

Apples New Memory Integrity Enforcement

Suspected Iran-backed attackers targeting European aerospace sector with novel malware

UK chancellor Putin the blame on Russia for cyber chaos, but evidence says otherwise

EV charging biz zaps customers with data leak scare

~ 22 Sep 2025 ~

ComicForm and SectorJ149 Hackers Deploy Formbook Malware in Eurasian Cyberattacks

Cops cuff another teen over alleged Scattered Spider attack that broke Vegas casinos

Weekly Recap: Chrome 0-Day, AI Hacking Tools, DDR5 Bit-Flips, npm Worm & More

How to Gain Control of AI Agents and Non-Human Identities

EUs cyber agency blames ransomware as Euro airport check-in chaos continues

Car giant Stellantis says customer data nicked after partner vendor pwned

Microsoft Patches Critical Entra ID Flaw Enabling Global Admin Impersonation Across Tenants

Details About Chinese Surveillance and Propaganda Companies

FOMO? Brit banking biz rolls out AI tools, talks up security

Trump says Michael Dell is part of the team buying TikTok, with Larry Ellison and maybe some Murdochs

A Cyberattack on Jaguar Land Rover Is Causing a Supply Chain Disaster

Tech troubles create aviation chaos on both sides of the Atlantic

Ransomware attack linked to museum break-in and theft of golden exhibits

~ 21 Sep 2025 ~

DPRK Hackers Use ClickFix to Deliver BeaverTail Malware in Crypto Job Scams

~ 20 Sep 2025 ~

LastPass Warns of Fake Repositories Infecting macOS with Atomic Infostealer

Researchers Uncover GPT-4-Powered MalTerminal Malware Creating Ransomware, Reverse Shell

ShadowLeak Zero-Click Flaw Leaks Gmail Data via OpenAI ChatGPT Deep Research Agent

Security News This Week: A Dangerous Worm Is Eating Its Way Through Software Packages

~ 19 Sep 2025 ~

UNC1549 Hacks 34 Devices in 11 Telecom Firms via LinkedIn Job Lures and MINIBIKE Malware

Friday Squid Blogging: Giant Squid vs. Blue Whale

SystemBC Powers REM Proxy With 1,500 Daily VPS Victims Across 80 C2 Servers

Fortra Releases Critical Patch for CVSS 10.0 GoAnywhere MFT Vulnerability

17,500 Phishing Domains Target 316 Brands Across 74 Countries in Global PhaaS Surge

ChatGPT joins human league, now solves CAPTCHAs for the right prompt

Ivanti EPMM holes let miscreants plant shady listeners, CISA says

How To Automate Alert Triage With AI Agents and Confluence SOPs Using Tines

Ding ding: Fortra rings the perfect-10 bell over latest GoAnywhere MFT bug

Russian Hackers Gamaredon and Turla Collaborate to Deploy Kazuar Backdoor in Ukraine