Port 22

~ 30 Sep 2025 ~

Details of a Scam

Britain's policing minister punts facial recog nationwide

5.5B Bitcoin fraudster pleads guilty after years on the run

Greg Kroah-Hartman explains the Cyber Resilience Act for open source developers

Feds cut funding to program that shared cyber threat info with local governments

~ 29 Sep 2025 ~

EvilAI Malware Masquerades as AI Tools to Infiltrate Global Organizations

One line of malicious npm code led to massive Postmark email heist

Asahi runs dry as online attackers take down Japanese brewer

Weekly Recap: Cisco 0-Day, Record DDoS, LockBit 5.0, BMC Bugs, ShadowV2 Botnet & More

The State of AI in the SOC 2025 - Insights from Recent Study

UK may already be at war with Russia, ex-MI5 head suggests

Microsoft Flags AI-Driven Phishing: LLM-Crafted SVG Files Outsmart Email Security

First Malicious MCP Server Found Stealing Emails in Rogue Postmark-MCP Package

Abusing Notions AI Agent for Data Theft

UK minister suggests government could ditch 'dangerous' Elon Musk's X

How to Use a Password Manager to Share Your Logins After You Die (2025)

Harrods blames its supplier after crims steal 430k customers data in fresh attack

Jaguar Land Rover gets 1.5B government jump-start after cyber breakdown

Tile Tracking Tags Can Be Exploited by Tech-Savvy Stalkers, Researchers Say

Digital ID, same place, different time: In this timeline, the result might surprise us

Submarine cable security is all at sea, and UK govt 'too timid' to act, says report

When AI is trained for treachery, it becomes the perfect agent

Trump demands Microsoft fire its head of global affairs

Dutch teen duo arrested over alleged 'Wi-Fi sniffing' for Russia

~ 28 Sep 2025 ~

Datacenter fire takes 647 South Korean government services offline

How a Travel YouTuber Captured Nepals Revolution for the World

~ 27 Sep 2025 ~

China-Linked PlugX and Bookworm Malware Attacks Target Asian Telecom and ASEAN Networks

An App Used to Dox Charlie Kirk Critics Doxed Its Own Users Instead

Inside the Nuclear Bunkers, Mines, and Mountains Being Retrofitted as Data Centers

Hunt for RedNovember: Beijing hacked critical orgs in year-long snooping campaign

Alibaba unveils $53B global AI plan but it will need GPUs to back it up

~ 26 Sep 2025 ~

Researchers Expose SVG and PureRAT Phishing Threats Targeting Ukraine and Vietnam

Friday Squid Blogging: Jigging for Squid

Cyber threat-sharing law set to shut down, along with US government

Heritage Foundation Uses Bogus Stat to Push a Trans Terrorism Classification

New COLDRIVER Malware Campaign Joins BO Team and Bearlyfy in Russia-Focused Cyberattacks

Crash Tests for Security: Why BAS Is Proof of Defense, Not Assumptions

Microsoft spots fresh XCSSET malware strain hiding in Apple dev projects

Salesforce facing multiple lawsuits after Salesloft breach

Fortra GoAnywhere CVSS 10 Flaw Exploited as 0-Day a Week Before Public Disclosure

New macOS XCSSET Variant Targets Firefox with Clipper and Persistence Module

An attacker's playground: Crims exploit GoAnywhere perfect-10 bug

LockBit's new variant is 'most dangerous yet,' hitting Windows, Linux and VMware ESXi

Prompt injection and a $5 domain trick Salesforce Agentforce into leaking sales

Volvo North America confirms staff data stolen following ransomware attack on IT supplier

Cisco ASA Firewall Zero-Day Exploits Deploy RayInitiator and LINE VIPER Malware

Digital Threat Modeling Under Authoritarianism

UK and US security agencies order urgent fixes as Cisco firewall bugs exploited in wild

UK to roll out mandatory digital ID for right to work by 2029

Brits warned as illegal robo-callers with offshored call centers fined half a million

~ 25 Sep 2025 ~

Urgent: Cisco ASA Zero-Day Duo Under Attack; CISA Triggers Emergency Mitigation Directive

Vane Viper Generates 1 Trillion DNS Queries to Power Global Malware and Ad Fraud Network

Salesforce Patches Critical ForcedLeak Bug Exposing CRM Data via AI Prompt Injection

North Korea's Lazarus Group shares its malware with IT work scammers

North Korean Hackers Use New AkdoorTea Backdoor to Target Global Crypto Developers

CTEM's Core: Prioritization and Validation

Threatsday Bulletin: Rootkit Patch, Federal Breach, OnePlus SMS Leak, TikTok Scandal & More

Callous crims break into preschool network, publish toddlers' data

Introducing Microsoft Marketplace Thousands of solutions. Millions of customers. One Marketplace.

Tech Overtakes Gaming as Top DDoS Attack Target, New Gcore Radar Report Finds

XCSSET evolves again: Analyzing the latest updates to XCSSETs inventory

Malicious Rust Crates Steal Solana and Ethereum Keys 8,424 Downloads Confirmed

Dingtian DT-R002

Cisco Warns of Actively Exploited SNMP Vulnerability Allowing RCE or DoS in IOS Software

Zero-day deja vu as another Cisco IOS bug comes under attack

Malicious-Looking URL Creation Service

EU starting registration of fingerprints and faces for short-stay foreigners

Massive npm infection: the Shai-Hulud worm and patient zero

Empty shelves, empty coffers: Co-op pegs cyber hit at 80m

Check your own databases before asking to see our passport photos, Home Office tells UK cops

Three in four European companies are hooked on US tech

~ 24 Sep 2025 ~

Chinese Hackers RedNovember Target Global Governments Using Pantegana and Cobalt Strike

UNC5221 Uses BRICKSTORM Backdoor to Infiltrate U.S. Legal and Technology Sectors

Two Critical Flaws Uncovered in Wondershare RepairIt Exposing User Data and AI Models

New string of phishing attacks targets Python developers

How One Bad Password Ended a 158-Year-Old Business

Retail at risk:How one alert uncovered a persistent cyberthreat

New YiBackdoor Malware Shares Major Code Overlaps with IcedID and Latrodectus

iframe Security Exposed: The Blind Spot Fueling Payment Skimmer Attacks

Google warns China-linked spies lurking in 'numerous' enterprises since March

UK agency makes arrest in airport cyberattack investigation

Hackers Exploit Pandoc CVE-2025-51591 to Target AWS IMDS and Steal EC2 IAM Credentials

Cybercriminals cash out with casino giant's employee data

AI vs. AI: Detecting an AI-obfuscated phishing campaign

State-Sponsored Hackers Exploiting Libraesva Email Security Gateway Vulnerability

Feds Tie Scattered Spider Duo to $115M in Ransoms

US Disrupts Massive Cell Phone Array in New York

Campaigners urge UK PM Starmer to dump digital ID wheeze before it's announced

Politicos: There is a good strong case for government intervention on JLR cyberattack

~ 23 Sep 2025 ~

Two New Supermicro BMC Bugs Allow Malicious Firmware to Evade Root of Trust Security

Eurojust Arrests 5 in 100M Cryptocurrency Investment Fraud Spanning 23 Countries

U.S. Secret Service Seizes 300 SIM Servers, 100K Cards Threatening U.S. Officials Near UN

Nearly half of businesses suffered deepfaked phone calls against staff

SonicWall releases rootkit-busting firmware update following wave of attacks

SolarWinds Releases Hotfix for Critical CVE-2025-26399 Remote Code Execution Flaw

SIM Farms Are a Spam Plague. A Giant One in New York Threatened US Infrastructure, Feds Say

Third time's the charm? SolarWinds (again) patches critical Web Help Desk RCE

Lean Teams, Higher Stakes: Why CISOs Must Rethink Incident Remediation

ShadowV2 Botnet Exploits Misconfigured AWS Docker Containers for DDoS-for-Hire Service

OnePlus leaves researchers on read over Android bug that exposes texts