Port 22

~ 19 Aug 2025 ~

GodRAT New RAT targeting financial institutions

US spy chief claims UK backed down over Apple backdoor demand

The need for speed: Why organizations are turning to rapid, trustworthy MDR

More customers asking for Google's Data Boundary, says Cloud Experience boss

Browser wars are back, predicts Palo Alto, thanks to AI

Noodlophile Malware Campaign Expands Global Reach with Copyright Phishing Lures

~ 18 Aug 2025 ~

Facial recognition works better in the lab than on the street, researchers show

Microsoft Windows Vulnerability Exploited to Deploy PipeMagic RansomExx Malware

Pot calls kettle black as China dubs US 'surveillance empire' over chip tracking

Weekly Recap: NFC Fraud, Curly COMrades, N-able Exploits, Docker Backdoors & More

Malicious PyPI and npm Packages Discovered Exploiting Dependencies in Supply Chain Attacks

Microsoft's Nuance coughs up $8.5M to rid itself of MOVEit breach suit

Wazuh for Regulatory Compliance

Dissecting PipeMagic: Inside the architecture of a modular backdoor framework

Workday warns of CRM breach after social engineers make off with business contact details

Eavesdropping on Phone Conversations Through Vibrations

Boffins say tool can sniff 5G traffic, launch 'attacks' without using rogue base stations

Every question you ask, every comment you make, I'll be recording you

Evolution of the PipeMagic backdoor: from the RansomExx incident to CVE-2025-29824

Investors beware: AI-powered financial scams swamp social media

Someone's poking the bear with infostealers targeting Russian crypto developers

LostMyPassword Dual Use Password Recovery and Credential Dumping Tool

~ 17 Aug 2025 ~

P2P payment service Zelle sued for enabling payment fraud hell

~ 16 Aug 2025 ~

Election workers fear threats and intimidation without feds' support in 2026

ERMAC V3.0 Banking Trojan Source Code Leak Exposes Full Malware Infrastructure

Russian Group EncryptHub Exploits MSC EvilTwin Vulnerability to Deploy Fickle Stealer Malware

Russia Is Cracking Down on End-to-End Encrypted Calls

~ 15 Aug 2025 ~

Taiwan Web Servers Breached by UAT-7237 Using Customized Open-Source Hacking Tools

Typhoon-adjacent Chinese crew broke into Taiwanese web host

Friday Squid Blogging: Squid-Shaped UFO Spotted Over Texas

Mobile Phishers Target Brokerage Accounts in Ramp and Dump Cashout Scheme

Cisco's Secure Firewall Management Center now not-so secure, springs a CVSS 10 RCE hole

U.S. Sanctions Garantex and Grinex Over $100M in Ransomware-Linked Illicit Crypto Transactions

Zero Trust + AI: Privacy in the Age of Agentic AI

Cisco Warns of CVSS 10.0 FMC RADIUS Flaw Allowing Remote Code Execution

Cyberattack on Dutch prosecution service is keeping speed cameras offline

Trojans Embedded in .svg Files

Telco giant Colt suffers attack, takes systems offline

LLM chatbots trivial to weaponise for data theft, say boffins

Should UK.gov save money by looking for open source alternatives to Microsoft? You decide

MailSniper PowerShell Tool for Exchange Mailbox Search and Credential Discovery

~ 14 Aug 2025 ~

Ransomware crews don't care about your endpoint security they've already killed it

New HTTP/2 'MadeYouReset' Vulnerability Enables Large-Scale DoS Attacks

An Analysis of Chinese Censorship Bias in LLM

Hidden Links: Analyzing Secret Families of VPN Apps

What WeChat Knows: Pervasive First-Party Tracking in a Billion-User Super-App Ecosystem

Psst: wanna buy a legit FBI email account for $40?

Hackers Found Using CrossC2 to Expand Cobalt Strike Beacons Reach to Linux and macOS

'MadeYouReset' HTTP/2 flaw lets attackers DoS servers

Lock down your critical infrastructure, CISA begs admins

Have You Turned Off Your Virtual Oven?

New Android Malware Wave Hits Banking via NFC Relay Fraud, Call Hijacking, and Root Exploits

BtcTurk suspends operations amid alleged $49M hot wallet heist

Simple Steps for Attack Surface Reduction

Law and water: Russia blamed for US court system break-in and Norwegian dam drama

Google Requires Crypto App Licenses in 15 Regions as FBI Warns of $9.9M Scam Losses

Siemens Wibu CodeMeter Runtime

Siemens Web Installer

Siemens Third-Party Components in SINEC OS

Siemens SIPROTEC 5

Siemens SIPROTEC 4 and SIPROTEC 4 Compact

Siemens SINUMERIK

Siemens SINEC Traffic Analyzer

Siemens SINEC Traffic Analyzer

Siemens SINEC OS

Siemens SIMOTION SCOUT, SIMOTION SCOUT TIA, and SINAMICS STARTER

Siemens Simcenter Femap

Siemens SIMATIC S7-PLCSIM

Siemens SIMATIC RTLS Locating Manager

Siemens SIMATIC RTLS Locating Manager

Siemens SICAM Q100/Q200

Siemens RUGGEDCOM ROX II

Siemens RUGGEDCOM ROX II

Siemens RUGGEDCOM CROSSBOW Station Access Controller

Siemens RUGGEDCOM APE1808

Siemens Opcenter Quality

Siemens Engineering Platforms

Siemens COMOS

Siemens BFCClient

Rockwell FactoryTalk Linx

Rockwell FactoryTalk Linx

Rockwell Automation Studio 5000 Logix Designer

Rockwell Automation Micro800

Rockwell Automation FLEX 5000 I/O

Rockwell Automation FactoryTalk Viewpoint

Rockwell Automation FactoryTalk Viewpoint

Rockwell Automation FactoryTalk Action Manager

Rockwell Automation ControlLogix Ethernet Modules

Rockwell Automation ArmorBlock 5000 I/O - Webserver

Rockwell Automation 1756-ENT2R, 1756-EN4TR, 1756-EN4TRXT

Italian hotels breached en masse since June, government confirms

LLM Coding Integrity Breach

The First Federal Cybersecurity Disaster of Trump 2.0 Has Arrived

Stock in the Channel pulls website amid cyberattack

CISA Adds Two N-able N-central Flaws to Known Exploited Vulnerabilities Catalog

The 9 billion question: To Microsoft or not to Microsoft?

~ 13 Aug 2025 ~

New PS1Bot Malware Campaign Uses Malvertising to Deploy Multi-Stage In-Memory Attacks

Fortinet discloses critical bug with working exploit code amid surge in brute-force attempts

Zoom and Xerox Release Critical Security Updates Fixing Privilege Escalation and RCE Flaws

Data Brokers Face New Pressure for Hiding Opt-Out Pages From Google