Port 22

~ 19 Nov 2025 ~

IT threat evolution in Q3 2025. Non-mobile statistics

Vaping Is Everywhere in SchoolsSparking a Bathroom Surveillance Boom

PlushDaemon compromises network devices for adversary-in-the-middle attacks

Fortinet Warns of New FortiWeb CVE-2025-58034 Vulnerability Exploited in the Wild

Tens of thousands more ASUS routers pwned by suspected, evolving China operation

Selling technology investments to the board: a strategic guide for CISOs and CIOs

China recruiting spies in the UK with fake headhunters and sites like LinkedIn

Dark Web Search Engines in 2025 Enterprise Monitoring, APIs and IOC Hunting

Sneaky 2FA Phishing Kit Adds BitB Pop-ups Designed to Mimic the Browser Address Bar

~ 18 Nov 2025 ~

Self-replicating botnet attacks Ray clusters

Meta Expands WhatsApp Security Research with New Proxy Tool and $4M in Bounties This Year

Researchers Detail Tuoni C2's Role in an Attempted 2025 Real-Estate Cyber Intrusion

Iranian Hackers Use DEEPROOT and TWOSTROKE Malware in Aerospace and Defense Attacks

FCC looks to torch Biden-era cyber rules sparked by Salt Typhoon mess

Take fight to the enemy, US cyber boss says

Google Chrome bug exploited as an 0-day - patch now or risk full system compromise

Learn How Leading Companies Secure Cloud Workloads and Infrastructure at Scale

Beyond IAM Silos: Why the Identity Security Fabric is Essential for Securing AI and Non-Human Identities

Seven npm Packages Use Adspect Cloaking to Trick Victims Into Crypto Scam Pages

Ambient and autonomous security for the agentic era

Agents built into your workflow: Get Security Copilot with Microsoft 365 E5

A Simple WhatsApp Security Flaw Exposed 3.5 Billion Phone Numbers

Microsoft Mitigates Record 5.72 Tbps DDoS Attack Driven by AISURU Botnet

Zoomers are officially worse at passwords than 80-year-olds

AI and Voter Engagement

Shelly Pro 4PM

Shelly Pro 3EM

Schneider Electric PowerChute Serial Shutdown

Schneider Electric EcoStruxure Machine SCADA Expert & Pro-face BLUE Open Studio

METZ CONNECT EWIO2

Google Issues Security Fix for Actively Exploited Chrome V8 Zero-Day Vulnerability

~ 17 Nov 2025 ~

New EVALUSION ClickFix Campaign Delivers Amatera Stealer and NetSupport RAT

'Largest-ever' cloud DDoS attack pummels Azure with 3.64B packets per second

Pentagon and soldiers let too many secrets slip on social networks, watchdog says

Security researcher calls BS on Coinbase breach disclosure timeline

Weekly Recap: Fortinet Exploited, China's AI Hacks, PhaaS Empire Falls & More

Selling your identity to North Korean IT scammers isn't a sustainable side hustle

5 Reasons Why Attackers Are Phishing Over LinkedIn

Collaborative research by Microsoft and NVIDIA on real-time immunity

Dragon Breath Uses RONINGLOADER to Disable Security Tools and Deploy Gh0st RAT

Game over: Europol storms gaming platforms in extremist content sweep

Overconfidence is the new zero-day as teams stumble through cyber simulations

Eurofiber admits crooks swiped data from French unit after cyberattack

More Prompt||GTFO

UK prosecutors seize 4.11M in crypto from Twitter mega-hack culprit

Rust Adoption Drives Android Memory Safety Bugs Below 20% for First Time

What if your romantic AI chatbot cant keep a secret?

Jaguar Land Rover hack cost India's Tata Motors around $2.4 billion and counting

mcp-scan Real-Time Guardrail Monitoring and Dynamic Proxy for MCP Servers

~ 16 Nov 2025 ~

Logitech leaks data after zero-day attack

Microsoft Patch Tuesday, November 2025 Edition

~ 15 Nov 2025 ~

RondoDox Exploits Unpatched XWiki Servers to Pull More Devices Into Its Botnet

Five U.S. Citizens Plead Guilty to Helping North Korean IT Workers Infiltrate 136 Companies

A Major Leak Spills a Chinese Hacking Contractors Tools and Targets

~ 14 Nov 2025 ~

North Korean Hackers Turn JSON Services into Covert Malware Delivery Channels

Friday Squid Blogging: Pilot Whales Eat a Lot of Squid

Researchers Find Serious AI Bugs Exposing Meta, Nvidia, and Microsoft Inference Frameworks

Fortinet finally cops to critical make-me-admin bug under active exploitation

DOJ Issued Seizure Warrant to Starlink Over Satellite Internet Systems Used at Scam Compound

Iranian Hackers Launch SpearSpecter Spy Operation on Defense & Government Targets

Crims poison 150K+ npm packages with token-farming malware

Upcoming Speaking Engagements

FBI flags scam targeting Chinese speakers with bogus surgery bills

Ransomware's Fragmentation Reaches a Breaking Point While LockBit Returns

Chinese Hackers Use Anthropic's AI to Launch Automated Cyber Espionage Campaign

CISA flags imminent threat as Akira ransomware starts hitting Nutanix AHV

Fortinet FortiWeb Flaw Actively Exploited in the Wild Before Company's Silent Patch

The Role of Humans in an AI-Powered World

Clop claims it hacked 'the NHS.' Which bit? Your guess is as good as theirs

Russian Hackers Create 4,300 Fake Travel Sites to Steal Hotel Guests' Payment Data

Kubernetes overlords decide Ingress NGINX isnt worth saving

~ 13 Nov 2025 ~

Chinese spies told Claude to break into about 30 critical orgs. Some attacks succeeded

Ransomed CTO falls on sword, refuses to pay extortion demand

Fake Chrome Extension Safery Steals Ethereum Wallet Seed Phrases Using Sui Blockchain

When Attacks Come Faster Than Patches: Why 2026 Will be the Year of Machine-Speed Security

Operation Endgame Dismantles Rhadamanthys, Venom RAT, and Elysium Botnet in Global Crackdown

Ubuntu 25.10's Rusty sudo holes quickly welded shut

ThreatsDay Bulletin: Cisco 0-Days, AI Bug Bounties, Crypto Heists, State-Linked Leaks and 20 More Stories

Google Sues to Disrupt Chinese SMS Phishing Triad

Extra, extra, read all about it: Washington Post clobbered in Clop caper

CISA Flags Critical WatchGuard Fireware Flaw Exposing 54,000 Fireboxes to No-Login Attacks

Book Review: The Business of Secrets

Rhadamanthys malware admin rattled as cops seize a thousand-plus servers

Siemens Spectrum Power 4

Siemens Solid Edge

Siemens Software Center and Solid Edge

Siemens SICAM P850 family and SICAM P855 family

Siemens LOGO! 8 BM Devices

Siemens COMOS

Siemens Altair Grid Engine

Rockwell Automation Verve Asset Manager

Rockwell Automation Studio 5000 Simulation Interface

Rockwell Automation FactoryTalk Policy Manager

Rockwell Automation FactoryTalk DataMosaix Private Cloud

Rockwell Automation AADvance-Trusted SIS Workstation

Mitsubishi Electric MELSEC iQ-F Series

General Industrial Controls Lynx+ Gateway

Brightpick Mission Control / Internal Logic Control

AVEVA Edge

AVEVA Application Server IDE