Port 22

~ 4 Nov 2025 ~

Microsoft Detects "SesameOp" Backdoor Using OpenAI's API as a Stealth Command Channel

How social engineering works | Unlocked 403 cybersecurity podcast (S2E6)

China's president Xi Jinping jokes about backdoors in Xiaomi smartphones

AN0M, the backdoored secure messaging app for criminals, is still producing arrests after four years

~ 3 Nov 2025 ~

Malicious VSX Extension "SleepyDuck" Uses Ethereum to Keep Its Command Server Alive

MIT Sloan quietly shelves AI ransomware study after researcher calls BS

Ransomware negotiator, pay thyself!

AWS, Nvidia, Crowdstrike seek security startups to enter the arena

Cybercriminals Exploit Remote Monitoring Tools to Infiltrate Logistics and Freight Networks

Weekly Recap: Lazarus Hits Web3, Intel/AMD TEEs Cracked, Dark Web Leak Tool & More

Cybercrooks team up with organized crime to steal pricey cargo

The Evolution of SOC Operations: How Continuous Exposure Management Transforms Security Operations

SesameOp: Novel backdoor uses OpenAI Assistants API for command and control

Researchers Uncover BankBot-YNRK and DeliveryRAT Android Trojans Stealing Financial Data

New HttpTroy Backdoor Poses as VPN Invoice in Targeted Cyberattack on South Korea

Metropolitan Police hails facial recognition tech after record year for arrests

AI Summarization Optimization

The race to shore up Europes power grids against cyberattacks and sabotage

An Anarchists Conviction Offers a Grim Foreshadowing of Trumps War on the Left

Hack Exposes Kansas Citys Secret Police Misconduct List

Ground zero: 5 things to do after discovering a cyberattack

gitlab-runner-research PoC for abusing self-hosted GitLab runners

~ 2 Nov 2025 ~

Attackers targeting unpatched Cisco kit notice malware implant removal, install it again

Alleged Jabber Zeus Coder MrICQ in U.S. Custody

~ 1 Nov 2025 ~

ASD Warns of Ongoing BADCANDY Attacks Exploiting Cisco IOS XE Vulnerability

~ 31 Oct 2025 ~

OpenAI Unveils Aardvark: GPT-5 Agent That Finds and Fixes Code Flaws Automatically

Nation-State Hackers Deploy New Airstalk Malware in Suspected Supply Chain Attack

Friday Squid Blogging: Giant Squid at the Smithsonian

China-Linked Hackers Exploit Windows Shortcut Flaw to Target European Diplomats

China-Linked Tick Group Exploits Lanscope Zero-Day to Hijack Corporate Systems

The MSP Cybersecurity Readiness Guide: Turning Security into Growth

Russia finally bites the cybercrooks it raised, arresting suspected Meduza infostealer devs

CISA and NSA Issue Urgent Guidance to Secure WSUS and Microsoft Exchange Servers

Attackers dig up $11M in Garden Finance crypto exploit

Eclipse Foundation Revokes Leaked Open VSX Tokens Following Wiz Discovery

CISA Flags VMware Zero-Day Exploited by China-Linked Hackers in Active Attacks

Resilience, not sovereignty, defines OpenStack's next chapter

Will AI Strengthen or Undermine Democracy?

This month in security with Tony Anscombe October 2025 edition

A New Security Layer for macOS Takes Aim at Admin Errors Before Hackers Do

How to Hack a Poker Game

NHS left with sick PCs as suppliers resist Windows 11 treatment

Europe preps Digital Euro to enter circulation in 2029

mcp-scanner Python MCP Scanner for Prompt-Injection and Insecure Agents

~ 30 Oct 2025 ~

Google's Built-In AI Defenses on Android Now Block 10 Billion Scam Messages a Month

Russian Ransomware Gangs Weaponize Open-Source AdaptixC2 for Advanced Attacks

New "Brash" Exploit Crashes Chromium Browsers Instantly with a Single Malicious URL

Suspected Chinese snoops weaponize unpatched Windows flaw to spy on European diplomats

Proton trains new service to expose corporate infosec cover-ups

The 5 generative AI security threats you need to know about detailed in new e-book

The Death of the Security Checkbox: BAS Is the Power Behind Real Defense

How Anti-Cybercrime Laws Are Being Weaponized to Repress Journalism: Columbia Journalism Review

ICE Wants to Build a Shadow Deportation Network in Texas

Docker Compose vulnerability opens door to host-level writes patch pronto

ThreatsDay Bulletin: DNS Poisoning Flaw, Supply-Chain Heist, Rust Malware Trick and New RATs Rising

PhantomRaven Malware Found in 126 npm Packages Stealing GitHub Tokens From Devs

Submission to the Standing Committee on Public Safety and National Security of Bill C-8

NASA's Quiet Supersonic Jet Takes Flight

Invisible npm malware pulls a disappearing act then nicks your tokens

Cyberpunks mess with Canada's water, energy, and farm systems

International Standards Organization ISO 15118-2

Hitachi Energy TropOS

The AI-Designed Bioweapon Arms Race

Postcode Lottery's lucky dip turns into data slip as players draw each other's info

France jacks into the Matrix for state messaging and pays too

Fraud prevention: How to help older family members avoid scams

~ 29 Oct 2025 ~

Experts Reports Sharp Increase in Automated Botnet Attacks Targeting PHP Servers and IoT Devices

New AI-Targeted Cloaking Attack Tricks AI Crawlers Into Citing Fake Info as Verified Facts

The Microsoft Azure Outage Shows the Harsh Reality of Cloud Failures

This security hole can crash billions of Chromium browsers, and Google hasn't patched it yet

Preparing for the Digital Battlefield of 2026: Ghost Identities, Poisoned Accounts, & AI Agent Havoc

Russian Hackers Target Ukrainian Organizations Using Stealthy Living-Off-the-Land Tactics

Ex-L3Harris Cyber Boss Pleads Guilty to Selling Trade Secrets to Russian Firm

EY exposes 4TB+ SQL database to open internet for who knows how long

Discover Practical AI Tactics for GRC Join the Free Expert Webinar

10 npm Packages Caught Stealing Developer Credentials on Windows, macOS, and Linux

Active Exploits Hit Dassault and XWiki CISA Confirms Critical Flaws Under Attack

Marketing giant Dentsu warns staff after Merkle data raid

Sole trader dispatched almost 1M spam texts to hard-up Brits, says watchdog

Signals Post-Quantum Cryptographic Implementation

Cybersecurity Awareness Month 2025: When seeing isn't believing

UK government on the lookout for bargain-priced CTO

9 in 10 Exchange servers in Germany still running out-of-support software

Australian police building AI to translate emoji used by crimefluencers

Deepfake-as-a-Service 2025 How Voice Cloning and Synthetic Media Fraud Are Changing Enterprise Defenses

Aisuru Botnet Shifts from DDoS to Residential Proxies

New TEE.Fail Side-Channel Attack Extracts Secrets from Intel and AMD DDR5 Secure Enclaves

~ 28 Oct 2025 ~

New Android Trojan 'Herodotus' Outsmarts Anti-Fraud Systems by Typing Like a Human

Researchers Expose GhostCall and GhostHire: BlueNoroff's New Malware Chains

Why Early Threat Detection Is a Must for Long-Term Business Growth

Is Your Google Workspace as Secure as You Think it is?

CBP Searched a Record Number of Phones at the US Border Over the Past Year

Clearview AI faces criminal heat for ignoring EU data fines

Chrome Zero-Day Exploited to Deliver Italian Memento Labs' LeetAgent Spyware

AI browsers face a security flaw as inevitable as death and taxes

Schneider Electric EcoStruxure

Beatings, killings, and lasting fear: The human toll of MoD's Afghan data breach

Social Engineering Peoples Credit Card Details

Google says reports of a Gmail breach have been greatly exaggerated

Chatbots parrot Putin's propaganda about the illegal invasion of Ukraine