Port 22

~ 9 Jul 2025 ~

McDonalds AI Hiring Bot Exposed Millions of Applicants' Data to Hackers Using the Password 123456

DoNot APT Expands Operations, Targets European Foreign Ministries with LoptikMod Malware

US sanctions alleged North Korean IT sweatshop leader

AMD warns of new Meltdown, Spectre-like bugs affecting CPUs

U.S. Sanctions North Korean Andariel Hacker Behind Fraudulent IT Worker Scheme

How To Automate Ticket Creation, Device Identification and Threat Triage With Tines

The cloud-native imperative for effective cyber resilience

Microsoft expands Zero Trust workshop to cover network, SecOps, and more

Reframing investments in security as investments in the business

Chinese Hacker Xu Zewei Arrested for Ties to Silk Typhoon Group and U.S. Cyber Attacks

Microsoft Patches 130 Vulnerabilities, Including Critical Flaws in SPNEGO and SQL Server

Qantas begins telling some customers that mystery attackers have their home address

Yet Another Strava Privacy Leak

Ingram Micro restarts orders for some following ransomware attack

Privacy campaigners pour cold water on London cops' 1,000 facial recognition arrests

Iranian ransomware crew reemerges, promises big bucks for attacks on US or Israel

Emerging Darknet Marketplaces of 2025 Anatomy Tactics & Trends

Microsoft Patch Tuesday, July 2025 Edition

~ 8 Jul 2025 ~

Hackers Use Leaked Shellter Tool License to Spread Lumma Stealer and SectopRAT Malware

Microsoft enjoys first Patch Tuesday of 2025 with no active exploits

Anatsa Android Banking Trojan Hits 90,000 Users with Fake PDF App on Google Play

Massive browser hijacking campaign infects 2.3M Chrome, Edge users

Enhancing Microsoft 365 security by eliminating high-privilege access

Malicious Pull Request Targets 6,000+ Developers via Vulnerable Ethcode VS Code Extension

5 Ways Identity-based Attacks Are Breaching Retail

RondoDox Botnet Exploits Flaws in TBK DVRs and Four-Faith Routers to Launch DDoS Attacks

BaitTrap: Over 17,000 Fake News Websites Caught Fueling Investment Fraud Globally

The cloud-native imperative for effective cyber resilience

Researchers Uncover Batavia Windows Spyware Stealing Documents from Russian Firms

SUSE launching region-locked support for the sovereignty-conscious

Emerson ValveLink Products

Suspected Chinese cybersnoop grounded in Italy after US tipoff

CISA Adds Four Critical Vulnerabilities to KEV Catalog Due to Active Exploitation

Approach to mainframe penetration testing on z/OS. Deep dive into RACF

Is your password ecosystem ready for the regulators?

Suspected Scattered Spider domains target everyone from manufacturers to Chipotle

~ 7 Jul 2025 ~

SEO Poisoning Campaign Targets 8,500+ SMB Users with Malware Disguised as AI Tools

CitrixBleed 2 exploits are on the loose as security researchers yell and wave their hands

Weekly Recap: Chrome 0-Day, Ivanti Exploits, MacOS Stealers, Crypto Heists and More

Manufacturing Security: Why Default Passwords Must Go

Learn how to build an AI-powered, unified SOC in new Microsoft e-book

A Match Made in the Heavens: The Surveillance State and the New Space Economy

Phishing platforms, infostealers blamed as identity attacks soar

Hiding Prompt Injections in Academic Papers

TAG-140 Deploys DRAT V2 RAT, Targeting Indian Government, Defense, and Rail Sectors

Batavia spyware steals data from Russian organizations

Caracal Rust eBPF Rootkit for Stealthy Post-Exploitation

~ 6 Jul 2025 ~

Stalkerware firm gets scooped by SQL-slinging security snoop

Ingram Micro confirms ransomware behind multi-day outage

~ 5 Jul 2025 ~

Massive spike in use of .es domains for phishing abuse

Taiwan NSB Alerts Public on Data Risks from TikTok, Weibo, and RedNote Over China Ties

Alert: Exposed JDWP Interfaces Lead to Crypto Mining, Hpingbot Targets SSH for DDoS

Android May Soon Warn You About Fake Cell Towers

~ 4 Jul 2025 ~

Friday Squid Blogging: How Squid Skin Distorts Light

NightEagle APT Exploits Microsoft Exchange Flaw to Target China's Military and Tech Sectors

The G7 condemned transnational repression, but will Canada meet its own commitments?

Your AI Agents Might Be Leaking Data Watch this Webinar to Learn How to Stop It

Critical Sudo Vulnerabilities Let Local Users Gain Root Access on Linux, Impacting Major Distros

Google Ordered to Pay $314M for Misusing Android Users' Cellular Data Without Permission

How to get into cybersecurity | Unlocked 403 cybersecurity podcast (S2E3)

Task scams: Why you should never pay to get paid

Windows_EndPoint_Audit Endpoint Security Auditing Toolkit

~ 3 Jul 2025 ~

Massive Android Fraud Operations Uncovered: IconAds, Kaleidoscope, SMS Malware, NFC Scams

The Person in Charge of Testing Tech for US Spies Has Resigned

Trump Officials Want to Prosecute Over the ICEBlock App. Lawyers Say Thats Unconstitutional

CBP Wants New Tech to Search for Hidden Data on Seized Phones

Over 40 Malicious Firefox Extensions Target Cryptocurrency Wallets, Stealing User Assets

Big Techs Mixed Response to U.S. Treasury Sanctions

Microsoft Windows Firewall complains about Microsoft code

The Hidden Weaknesses in AI SOC Tools that No One Talks About

Chinese Hackers Exploit Ivanti CSA Zero-Days in Attacks on French Government, Telecoms

Young Consulting finds even more folks affected in breach mess now over 1 million

Meta calls 200M EU fine over pay-or-consent ad model 'unlawful'

Mitsubishi Electric MELSOFT Update Manager

Mitsubishi Electric MELSEC iQ-F Series

Hitachi Energy Relion 670/650 and SAM600-IO Series

Hitachi Energy MicroSCADA X SYS600

Ransomware crew Hunters International shuts down, hands out keys to victims

Surveillance Used by a Drug Cartel

Critical Cisco Vulnerability in Unified CM Grants Root Access via Static Credentials

The Promise and Peril of Digital Security in the Age of Dictatorship

How government cyber cuts will affect you and your business

Let's Encrypt rolls out free security certs for IP addresses

ChatGPT creates phishers paradise by recommending the wrong URLs for major companies

~ 2 Jul 2025 ~

North Korean Hackers Target Web3 with Nim Malware and Use ClickFix in BabyShark Campaign

Cisco scores a perfect 10 - sadly for a critical flaw in its comms platform

CISA warns the Signal clone used by natsec staffers is being attacked, so patch now

A Group of Young Cybercriminals Poses the Most Imminent Threat of Cyberattacks Right Now

23andMe's new owner says your DNA is safe this time

That Network Traffic Looks Legit, But it Could be Hiding a Serious Threat

Hackers Using PDFs to Impersonate Microsoft, DocuSign, and More in Callback Phishing Campaigns

U.S. Sanctions Russian Bulletproof Hosting Provider for Supporting Cybercriminals Behind Ransomware

US drops sanctions on second Russian bulletproof hosting vehicle this year

Vercel's v0 AI Tool Weaponized by Cybercriminals to Rapidly Create Fake Login Pages at Scale

Ubuntu Disables Spectre/Meltdown Protections

Cl0p cybercrime gang's data exfiltration tool found vulnerable to RCE attacks

Gamaredon in 2024: Cranking out spearphishing campaigns against Ukraine with an evolved toolset

UK eyes new laws as cable sabotage blurs line between war and peace

Australian airline Qantas reveals data theft impacting six million customers

Malvertising and TDS Cloaking Tactics Uncovered