Port 22

~ 22 Jul 2025 ~

Credential Theft and Remote Access Surge as AllaKore, PureRAT, and Hijack Loader Proliferate

Arch Linux users told to purge Firefox forks after AUR malware scare

Surprise, surprise: Chinese spies, IP stealers, other miscreants attacking Microsoft SharePoint servers

How to Advance from SOC Manager to CISO?

Silicon Valley engineer admits theft of US missile tech secrets

Humans can be tracked with unique 'fingerprint' based on how their bodies block Wi-Fi signals

Microsoft patches critical SharePoint 2016 zero-days amid active exploits

Hackers Exploit SharePoint Zero-Day Since July 7 to Steal Keys, Maintain Persistent Access

Microsoft Sentinel data lake: Unify signals, cut costs, and power agentic AI

Disrupting active exploitation of on-premises SharePoint vulnerabilities

UK to ban ransomware payments by public sector organizations

Schneider Electric System Monitor Application

Schneider Electric EcoStruxure Power Operation

Schneider Electric EcoStruxure

Schneider Electric EcoStruxture IT Data Center Expert

Lantronix Provisioning Manager

DuraComm DP-10iN-100-MU

Encryption Backdoors and the Fourth Amendment

Open source's superior security is a matter of eyeballs: Be kind to the brains behind them

Why is your data worth so much? | Unlocked 403 cybersecurity podcast (S2E4)

~ 21 Jul 2025 ~

Iran-Linked DCHSpy Android Malware Masquerades as VPN Apps to Spy on Dissidents

Dell scoffs at breach, says miscreants only stole fake data

China-Linked Hackers Launch Targeted Espionage Campaign on African IT Infrastructure

The Citizen Labs Submission to the UN on Universal Birth Registration and the Use of Digital Technologies

Chasing Shadows: Chronicles of Counter-Intelligence from the Citizen Lab

Another massive security snafu hits Microsoft, but don't expect it to stick

Canadas Outdated Laws Leave Spyware Oversight Dangerously Weak

Weekly Recap: SharePoint 0-Day, Chrome Exploit, macOS Spyware, NVIDIA Toolkit RCE and More

Assessing the Role of AI in Zero Trust

How WIRED Analyzed the Epstein Video

Microsoft Fix Targets Attacks on SharePoint Zero-Day

Four new Android spyware samples linked to Iran's intel agency

PoisonSeed Hackers Bypass FIDO Keys Using QR Phishing and Cross-Device Sign-In Abuse

Another Supply Chain Vulnerability

Microsoft Releases Urgent Patch for SharePoint RCE Flaw Exploited in Ongoing Cyber Attacks

Hard-Coded Credentials Found in HPE Instant On Devices Allow Admin Access

3,500 Websites Hijacked to Secretly Mine Crypto Using Stealth JavaScript and WebSocket Tactics

Rumble in the jungle: APT41s new target in Africa

Alaska Airlines grounds itself due to mysterious IT problem

Japan discovers object out beyond Pluto that rewrites the Planet 9 theory

CredMaster Anonymous AWSBacked Password Spraying Toolkit

Microsoft patches failed to fix on-prem SharePoint, which is now under zero-day attack

~ 20 Jul 2025 ~

EncryptHub Targets Web3 Developers Using Fake AI Platforms to Deploy Fickle Stealer Malware

Critical Unpatched SharePoint Zero-Day Actively Exploited, Breaches 75+ Global Organizations

Malware Injected into 6 npm Packages After Maintainer Tokens Stolen in Phishing Attack

Hackers Exploit Critical CrushFTP Flaw to Gain Admin Access on Unpatched Servers

UK uncovers novel Microsoft snooping malware, blames and sanctions GRU cyberspies

~ 19 Jul 2025 ~

At Least 750 US Hospitals Faced Disruptions During Last Years CrowdStrike Outage, Study Finds

Chinas Salt Typhoon Hackers Breached the US National Guard for Nearly a Year

Ex-IDF cyber chief on Iran, Scattered Spider, and why social engineering worries him more than 0-days

China's Massistant Tool Secretly Extracts SMS, GPS Data, and Images From Confiscated Phones

~ 18 Jul 2025 ~

UNG0002 Group Hits China, Hong Kong, Pakistan Using LNK Files and RATs in Twin Campaigns

Ivanti Zero-Days Exploited to Drop MDifyLoader and Launch In-Memory Cobalt Strike Attacks

Friday Squid Blogging: The Giant Squid Nebula

CERT-UA Discovers LAMEHUG Malware Linked to APT28, Using LLM for Phishing Campaign

Google Sues 25 Chinese Entities Over BADBOX 2.0 Botnet Affecting 10M Android Devices

Critical NVIDIA Container Toolkit Flaw Allows Privilege Escalation on AI Cloud Services

Microsoft at Black Hat USA 2025: A unified approach to modern cyber defense

From Backup to Cyber Resilience: Why IT Leaders Must Rethink Backup in the Age of Ransomware

How Chinas Patriotic Honkers Became the Nations Elite Cyber Spies

As companies race to add AI, terms of service changes are going to freak a lot of people out

New Mobile Phone Forensics Tool

Poor Passwords Tattle on AI Hiring Bot Maker Paradox.ai

PsMapExec PowerShell Command Mapping for Lateral Movement

~ 17 Jul 2025 ~

Google sues 25 alleged BadBox 2.0 botnet operators, all of whom are in China

Hackers Use GitHub Repositories to Host Amadey Malware and Data Stealers, Bypassing Filters

Hackers Exploit Apache HTTP Server Flaw to Deploy Linuxsys Cryptocurrency Miner

Watch out, another max-severity, make-me-root Cisco bug on the loose

Europol Disrupts NoName057(16) Hacktivist Group Linked to DDoS Attacks Against Ukraine

CTEM vs ASM vs Vulnerability Management: What Security Leaders Need to Know in 2025

Transparency on Microsoft Defender for Office 365 email security effectiveness

Chinese Hackers Target Taiwan's Semiconductor Sector with Cobalt Strike, Custom Backdoors

Leviton AcquiSuite and Energy Monitoring Hub

Hackers Are Finding New Ways to Hide Malware in DNS Records

Quantum code breaking? You'd get further with an 8-bit computer, an abacus, and a dog

Cisco Warns of Critical ISE Flaw Allowing Unauthenticated Attackers to Execute Root Code

Security Vulnerabilities in ICEBlock

GhostContainer backdoor: malware compromising Exchange servers of high-value organizations in Asia

Microsoft offers vintage Exchange and Skype server users six more months of security updates

~ 16 Jul 2025 ~

Hackers Leverage Microsoft Teams to Spread Matanbuchus 3.0 Malware to Targeted Firms

Ukrainian hackers claim to have destroyed major Russian drone maker's entire network

UNC6148 Backdoors Fully-Patched SonicWall SMA 100 Series Devices with OVERSTEP Rootkit

Operation Eastwood shutters 100+ servers used to DDoS websites supporting Ukraine

DHS Faces New Pressure Over DNA Taken From Immigrant Children

Critical Golden dMSA Attack in Windows Server 2025 Enables Cross-Domain Attacks and Persistent Access

Microsoft is named a Leader in the 2025 Gartner Magic Quadrant for Endpoint Protection Platforms

Hacking Trains

AI Agents Act Like Employees With Root AccessHere's How to Regain Control

Adoption Agency Data Exposure Revealed Information About Children and Parents

Protecting customers from Octo Tempest attacks across multiple industries

Urgent: Google Releases Critical Chrome Update for CVE-2025-6558 Exploit Active in the Wild

New Konfety Malware Variant Evades Detection by Manipulating APKs and Dynamic Code

Deepfakes. Fake Recruiters. Cloned CFOs Learn How to Stop AI-Driven Attacks in Real Time

Crims hijacking fully patched SonicWall VPNs to deploy stealthy backdoor and rootkit

Google AI "Big Sleep" Stops Exploitation of Critical SQLite Vulnerability Before Hackers Act

Retailer Co-op: Attackers snatched all 6.5M member records

Turbulence at Air Serbia, the latest airline under cyber siege

Security shop Adarma ceases trading, confirms it will enter administration

Defending Against Malicious Botnets in 2025 Automated Traffic Threats and Mitigation

~ 15 Jul 2025 ~

Curl creator mulls nixing bug bounty awards to stop AI slop