Port 22

~ 7 Jan 2026 ~

Job Opportunity: Citizen Lab Research Officer in the Area of Spyware and Digital Targeted Threats

Critical n8n Vulnerability (CVSS 10.0) Allows Unauthenticated Attackers to Take Full Control

ESA calls cops as crims lift off 500 GB of files, say security black hole still open

Stalkerware slinger pleads guilty for selling snooper software to suspicious spouses

Webinar: Learn How AI-Powered Zero Trust Detects Attacks with No Files or Indicators

Explore the latest Microsoft Incident Response proactive services for enhanced resilience

n8n Warns of CVSS 10.0 RCE Vulnerability Affecting Self-Hosted and Cloud Versions

The Future of Cybersecurity Includes Non-Human Employees

Veeam Patches Critical RCE Vulnerability with CVSS 9.0 in Backup & Replication

Microsoft scraps Exchange Online spam clamp after customers cry foul

Microsoft Warns Misconfigured Email Routing Can Enable Internal Domain Phishing

Ministry of Justice splurged 50M on security still missed Legal Aid Agency cyberattack

The Wegmans Supermarket Chain Is Probably Using Facial Recognition

Jaguar Land Rover wholesale volumes plummet 43% in cyberattack aftermath

HSBC app takes a dim view of sideloaded Bitwarden installations

Ongoing Attacks Exploiting Critical RCE Vulnerability in Legacy D-Link DSL Routers

HackerOne 'ghosted' me for months over $8,500 bug bounty, says researcher

~ 6 Jan 2026 ~

Two Chrome Extensions Caught Stealing ChatGPT and DeepSeek Chats from 900,000 Users

Grok Is Pushing AI Undressing Mainstream

Unpatched Firmware Flaw Exposes TOTOLINK EX200 to Full Remote Device Takeover

Brightspeed investigates breach as crims post stolen data for sale

Phishing actors exploit complex routing and misconfigurations to spoof domains

Civil Society and Access to Justice: Challenges of Seeking Remedy in the Global Fight Against Spyware

Fake Booking Emails Redirect Hotel Staff to Fake BSoD Pages Delivering DCRat

Meet the Man Hunting Spies in Your Smartphone

Meet the Man Hunting Spies in Your Smartphone: MIT Tech Review

What is Identity Dark Matter?

Introducing the Microsoft Defender Experts Suite: Elevate your security with expert-led services

VS Code Forks Recommend Missing Extensions, Creating Supply Chain Risk in Open VSX

A Cyberattack Was Part of the US Assault on Venezuela

Fake Windows BSODs check in at Europe's hotels to con staff into running malware

Crypto wallet shop Ledger confirms customer data lifted in Global-e snafu

Students bag extended Christmas break after cyber hit on school IT

New n8n Vulnerability (9.9 CVSS) Lets Authenticated Users Execute System Commands

UK injects just 210M into cyber plan to stop Whitehall getting pwnd

Critical AdonisJS Bodyparser Flaw (CVSS 9.2) Enables Arbitrary File Write on Servers

One criminal, 50 hacked organizations, and all because MFA wasn't turned on

~ 5 Jan 2026 ~

Russia-Aligned Hackers Abuse Viber to Target Ukrainian Military and Government

Kimwolf Android Botnet Infects Over 2 Million Devices via Exposed ADB and Proxy Networks

Congrats, cybercrims: You just fell into a honeypot

Weekly Recap: IoT Exploits, Wallet Breaches, Rogue Extensions, AI Abuse & More

Playing Koi: Palo Alto isn't saying if it will buy security start-up

The State of Cybersecurity in 2025:Key Segments, Insights, and Innovations

Bitfinex Hack Convict Ilya Lichtenstein Released Early Under U.S. First Step Act

Gmail preparing to drop POP3 mail fetching

New VVS Stealer Malware Targets Discord Accounts via Obfuscated Python Code

Telegram Hosting Worlds Largest Darknet Market

New Zealand orders review into ManageMyHealth cyberattack

~ 4 Jan 2026 ~

Trump admin sends heart emoji to commercial spyware makers with lifted Predator sanctions

8 WhatsApp Features to Boost Your Security and Privacy

Palo Alto Networks security-intel boss calls AI agents 2026's biggest insider threat

~ 3 Jan 2026 ~

How to Protect Your iPhone or Android Device From Spyware

~ 2 Jan 2026 ~

Friday Squid Blogging: Squid Found in Light Fixture

Bitfinex crypto thief who was serving five years thanks Trump for early release

Transparent Tribe Launches New RAT Attacks Against Indian Government and Academia

Cybercrook claims to be selling infrastructure info about three major US utilities

The ROI Problem in Attack Surface Management

Brit lands invite-only Aussie visa after uncovering vuln in government systems

Cybercriminals Abuse Google Cloud Email Feature in Multi-Stage Phishing Campaign

The Kimwolf Botnet is Stalking Your Local Network

LockBit takedown architect gets New Year award from King Charles

Flock Exposes Its AI-Enabled Surveillance Cameras

How Protesters Became Content for the Cops

Cisco XDR in 30: Turning Security Signals Into Confident Action

~ 1 Jan 2026 ~

ThreatsDay Bulletin: GhostAd Drain, macOS Attacks, Proxy Botnets, Cloud Exploits, and 12+ Stories

RondoDox Botnet Exploits Critical React2Shell Flaw to Hijack IoT Devices and Web Servers

How To Browse Faster and Get More Done Using Adapt Browser

~ 31 Dec 2025 ~

Trust Wallet Chrome Extension Hack Drains $8.5M via Shai-Hulud Supply Chain Attack

DarkSpectre Browser Extension Campaigns Exposed After Impacting 8.8 Million Users Worldwide

IBM Warns of Critical API Connect Bug Allowing Remote Authentication Bypass

Researchers Spot Modified Shai-Hulud Worm Testing Payload on npm Registry

European Space Agency hit again as cybercrims claim 200 GB data up for sale

LinkedIn Job Scams

Fears Mount That US Federal Cybersecurity Is Stagnatingor Worse

U.S. Treasury Lifts Sanctions on Three Individuals Linked to Intellexa and Predator Spyware

Discovering the Dimensions of a New Cold War

Hong Kongs newest anti-scam technology is over-the-counter banking

Cybersecurity pros admit to moonlighting as ransomware scum

New Yorks incoming mayor bans Raspberry Pi at his inauguration party

~ 30 Dec 2025 ~

CSA Issues Alert on Critical SmarterMail Bug Allowing Remote Code Execution

An early end to the holidays: 'Heartbleed of MongoDB' is now under active exploit

Silver Fox Targets Indian Users With Tax-Themed Emails Delivering ValleyRAT Malware

How to Integrate AI into Modern SOC Workflows

Mustang Panda Uses Signed Kernel-Mode Rootkit to Load TONESHELL Backdoor

Using AI-Generated Images to Get Refunds

Korean telco failed at femtocell security, exposed customers to snooping and fraud

~ 29 Dec 2025 ~

Indian cops cuff ex-Coinbase rep over selling customer info to crims

Happy 16th Birthday, KrebsOnSecurity.com!

Crims disconnect Wired subscribers from their privacy, publish deets online

Weekly Recap: MongoDB Attacks, Wallet Breaches, Android Spyware, Insider Crime & More

27 Malicious npm Packages Used as Phishing Infrastructure to Steal Login Credentials

MongoDB Vulnerability CVE-2025-14847 Under Active Exploitation Worldwide

Are We Ready to Be Governed by Artificial Intelligence?

Traditional Security Frameworks Leave Organizations Exposed to AI-Specific Attack Vectors

The Worst Hacks of 2025

The New Surveillance State Is You

The Most Dangerous People on the Internet in 2025

The HoneyMyte APT evolves with a kernel-mode rootkit and a ToneShell backdoor

This month in security with Tony Anscombe December 2025 edition

Europe's cloud challenge: Building an Airbus for the digital age