Port 22

~ 11 Dec 2025 ~

Siemens SINEMA Remote Connect Server

Siemens IAM Client

Siemens Gridscale X Prepay

Siemens Energy Services

Siemens Building X - Security Manager Edge Controller

Siemens Advanced Licensing (SALT) Toolkit

OpenPLC_V3

10K Docker images spray live cloud creds across the internet

Active Attacks Exploit Gladinet's Hard-Coded Keys for Unauthorized Access and Code Execution

Locks, SOCs and a cat in a box: What Schrdinger can teach us about cybersecurity

Users report chaos as Legal Aid Agency stumbles back online after cyberattack

It didnt take long: CVE-2025-55182 is now under active exploitation

React2Shell Exploitation Delivers Crypto Miners and New Malware Across Multiple Sectors

.NET SOAPwn Flaw Opens Door for File Writes and Remote Code Execution via Rogue WSDL

~ 10 Dec 2025 ~

700+ self-hosted Gits battered in 0-day attacks with no fix imminent

Three PCIe Encryption Weaknesses Expose PCIe 5.0+ Systems to Faulty Data Handling

From awareness to action: Building a security-first culture for the agentic AI era

US extradites Ukrainian woman accused of hacking meat processing plant for Russia

Microsoft wont fix .NET RCE bug affecting slew of enterprise apps, researchers say

Webinar: How Attackers Exploit Cloud Misconfigurations Across AWS, AI Models, and Kubernetes

Warning: WinRAR Vulnerability CVE-2025-6218 Under Active Attack by Multiple Threat Groups

Clarity in complexity: New insights for transparent email security

2 Men Linked to Chinas Salt Typhoon Hacker Group Likely Trained in a Cisco Academy

Protecting value at risk - the role of a risk operations center

A Complete Guide to the Jeffrey Epstein Document Dumps

Seeking symmetry during ATT&CK season: How to harness todays diverse analyst and tester landscape to paint a security masterpiece

Microsoft Issues Security Fixes for 56 Flaws, Including Active Exploit and Two Zero-Days

Crisis in Icebergen: How NATO crafts stories to sharpen cyber skills

FBI Warns of Fake Video Scams

Fortinet, Ivanti, and SAP Issue Urgent Patches for Authentication and Code Execution Flaws

~ 9 Dec 2025 ~

North Korea-linked Actors Exploit React2Shell to Deploy New EtherRAT Malware

Microsoft reports 7.8-rated zero day, plus 56 more in December Patch Tuesday

Microsoft Patch Tuesday, December 2025 Edition

How to answer the door when the AI agents come knocking

Shai-Hulud 2.0: Guidance for detecting, investigating, and defending against the supply chain attack

Four Threat Clusters Using CastleLoader as GrayBravo Expands Its Malware Service Infrastructure

Storm-0249 Escalates Ransomware Attacks with ClickFix, Fileless PowerShell, and DLL Sideloading

Porsche panic in Russia as pricey status symbols forget how to car

How to Streamline Zero Trust Using the Shared Signals Framework

Changing the physics of cyber defense

Google Adds Layered Defenses to Chrome to Block Indirect Prompt Injection Threats

STAC6565 Targets Canada in 80% of Attacks as Gold Blade Deploys QWCrypt Ransomware

As humanoid robots enter the mainstream, security pros flag the risk of botnets on legs

Researchers Find Malicious VS Code, Go, npm, and Rust Packages Stealing Developer Data

UK to Europe: The time to counter Russia's information war machine is now

AI vs. Human Drivers

Universal Boot Loader (U-Boot)

Multiple India-based CCTV Cameras

Festo LX Appliance

Goodbye, dark Telegram: Blocks are pushing the underground out

UK finally vows to look at 35-year-old Computer Misuse Act

The big catch: How whaling attacks target top executives

Whitehall rejects 1.8B digital ID price tag but won't say what it will cost

Researchers spot 700 percent increase in hypervisor ransomware attacks

~ 8 Dec 2025 ~

Experts Confirm JS#SMUGGLER Uses Compromised Sites to Deploy NetSupport RAT

193 cybercrims arrested, accused of plotting 'violence-as-a-service'

Weekly Recap: USB Malware, React2Shell, WhatsApp Worms, AI IDE Bugs & More

How Can Retailers Cyber-Prepare for the Most Vulnerable Time of the Year?

Stronger together: New Beazley collaboration enhances cyber resilience

Android Malware FvncBot, SeedSnatcher, and ClayRat Gain Stronger Data Theft Features

Sneeit WordPress RCE Exploited in the Wild While ICTBroadcast Bug Fuels Frost Botnet Attacks

UK moves to strengthen undersea cable defenses as Russian snooping ramps up

Home Office kept police facial recognition flaws to itself, UK data watchdog fumes

MuddyWater Deploys UDPGangster Backdoor in Targeted Turkey-Israel-Azerbaijan Campaign

Substitution Cipher Based on The Voynich Manuscript

Barts Health seeks High Court block after Clop pillages NHS trust data

Block all AI browsers for the foreseeable future: Gartner

Chinas first reusable rocket explodes, but its onboard Ethernet network flew

Apache warns of 10.0-rated flaw in Tika metadata ingestion tool

~ 6 Dec 2025 ~

Researchers Uncover 30+ Flaws in AI Coding Tools Enabling Data Theft and RCE Attacks

Critical React2Shell Flaw Added to CISA KEV After Confirmed Active Exploitation

Drones to Diplomas: How Russias Largest Private University is Linked to a $25M Essay Mill

The US Won't Sanction China for Salt Typhoon Hacking

Security News This Week: Oh Crap, Kohlers Toilet Cameras Arent Really End-to-End Encrypted

Death to one-time text codes: Passkeys are the new hotness in MFA

~ 5 Dec 2025 ~

Crims using social media images, videos in 'virtual kidnapping' scams

Zero-Click Agentic Browser Attack Can Delete Entire Google Drive Using Crafted Emails

Friday Squid Blogging: Vampire Squid Genome

Novel clickjacking attack relies on CSS and SVG

Critical XXE Bug CVE-2025-66516 (CVSS 10.0) Hits Apache Tika, Requires Urgent Patch

Cloudflare blames Friday outage on borked fix for React2shell vuln

Microsoft named a leader in the 2025 Gartner Magic Quadrant for Email Security

Chinese Hackers Have Started Exploiting the Newly Disclosed React2Shell Vulnerability

Intellexa Leaks Reveal Zero-Days and Ads-Based Vector for Predator Spyware Delivery

"Getting to Yes": An Anti-Sales Guide for MSPs

Asus supplier hit by ransomware attack as gang flaunts alleged 1 TB haul

Beijing-linked hackers are hammering max-severity React bug, AWS warns

CISA Reports PRC Hackers Using BRICKSTORM for Long-Term Access in U.S. Systems

UK pushes ahead with facial recognition expansion despite civil liberties backlash

JPCERT Confirms Active Command Injection Attacks on Array AG Gateways

Bots, bias, and bunk: How can you tell what's real on the net?

New Anonymous Phone Service

An AI for an AI: Anthropic says AI agents require AI defense

Signalgate Inspector General Report Wants Just One Change to Avoid a Repeat Debacle

~ 4 Dec 2025 ~

SMS Phishers Pivot to Points, Taxes, Fake Retailers

Silver Fox Uses Fake Microsoft Teams Installer to Spread ValleyRAT Malware in China

PRC spies Brickstromed their way into critical US networks and remained hidden for years

PRC spies Brickstormed their way into critical US networks and remained hidden for years

Cloudflare Has Blocked 416 Billion AI Bot Requests Since July 1

Hegseth needs to go to secure messaging school, report says