Port 22

~ 19 Sep 2025 ~

Scattered Spider teen cuffed after buying games and meals with extortion bitcoin

U.K. Arrests Two Teen Scattered Spider Hackers Linked to August 2024 TfL Cyber Attack

One token to pwn them all: Entra ID bug could have granted access to every tenant

Surveying the Global Spyware Market

OpenAI plugs ShadowLeak bug in ChatGPT that let miscreants raid inboxes

Threat landscape for industrial automation systems in Q2 2025

Charities warn Ofcom too soft on Online Safety Act violators

CISA Warns of Two Malware Strains Exploiting Ivanti EPMM CVE-2025-4427 and CVE-2025-4428

Gamaredon X Turla collab

MI6 reveals 'Silent Courier' dark web portal upgrade it hopes will help it recruit new spies

~ 18 Sep 2025 ~

These Are the 15 New York Officials ICE and NYPD Arrested in Manhattan

SonicWall Urges Password Resets After Cloud Backup Breach Affecting Under 5% of Customers

CountLoader Broadens Russian Ransomware Operations With Multi-Version Malware Loader

Google pushes emergency patch for Chrome 0-day - check your browser version now

SilentSync RAT Delivered via Two Malicious PyPI Packages Targeting Python Developers

Microsoft Defender delivered242% return on investment over threeyears

How CISOs Can Drive Effective AI Governance

Crims bust through SonicWall to grab sensitive config data

This Microsoft Entra ID Vulnerability Could Have Been Catastrophic

Cybercriminals pwn 850k+ Americans' healthcare data

Two 'Scattered Spider' teens charged over attack on Londons transport network

Cloudflare DDoSed itself with React useEffect hook blunder

Westermo Network Technologies WeOS 5

Westermo Network Technologies WeOS 5

Schneider Electric Saitel DR & Saitel DP Remote Terminal Unit

Hitachi Energy Service Suite

Hitachi Energy Asset Suite

Dover Fueling Solutions ProGauge MagLink LX4 Devices

Cognex In-Sight Explorer and In-Sight Camera Firmware

Insight Partners confirms ransomware hit, more than 12,000 caught in data dragnet

Google Patches Chrome Zero-Day CVE-2025-10585 as Active V8 Exploit Threatens Millions

Time-of-Check Time-of-Use Attacks Against LLMs

Cybercriminals Have a Weird New Way to Target You With Scam Texts

Panda-monium: China-backed cyber crew spoof Congressman to dig for dirt on US trade talks

Small businesses, big targets: Protecting your business against ransomware

Russian fake-news network, led by an ex-Florida sheriff's deputy, storms back into action with 200+ new sites

TA558 Uses AI-Generated Scripts to Deploy Venom RAT in Brazil Hotel Attacks

~ 17 Sep 2025 ~

Scattered Spider gang feigns retirement, breaks into bank instead

Chinese TA415 Uses VS Code Remote Tunnels to Spy on U.S. Economic Policy Experts

From Quantum Hacks to AI Defenses Expert Guide to Building Unbreakable Cyber Resilience

Rethinking AI Data Security: A Buyer's Guide

Axiom Space aims for the International Space Station with its Orbital Data Center Node

Scattered Spider Resurfaces With Financial Sector Attacks Despite Retirement Claims

BreachForums kingpin goes from walk-free deal to 3-year stretch

DOJ Resentences BreachForums Founder to 3 Years for Cybercrime and Possession of CSAM

UK telco Colts recovery from August cyberattack pushes into November

Hacking Electronic Safes

RaccoonO365 Phishing Network Shut Down After Microsoft and Cloudflare Disrupt 338 Domains

UEFI Secure Boot for Linux Arm64 where do we stand?

Ruh-roh. DDR5 memory vulnerable to new Rowhammer attack

Australia to let Big Tech choose its own adventure to enact kids social media ban

~ 16 Sep 2025 ~

Chaos Mesh Critical GraphQL Flaws Enable RCE and Full Kubernetes Cluster Takeover

Microsoft blocks bait for fastest-growing 365 phish kit, seizes 338 domains

SlopAds Fraud Ring Exploits 224 Android Apps to Drive 2.3 Billion Daily Ad Bids

Exposing Pegasus: How the State Spies on You

Criminals broke into the system Google uses to share info with cops

John Scott-Railton on U.K.s Age-Verification Laws

New FileFix Variant Delivers StealC Malware Through Multilingual Phishing Site

Apple 0-day likely used in spy attacks affected devices as old as iPhone 8

A DHS Data Hub Exposed Sensitive Intel to Thousands of Unauthorized Users

Apple Backports Fix for CVE-2025-43300 Exploited in Sophisticated Spyware Attack

Securing the Agentic Era: Introducing Astrix's AI Agent Control Plane

Microsoft Purview innovations for your Fabric data: Unify data security and governance for the AI era

How to Set Up and Use a Burner Phone

Self-propagating worm fuels latest npm supply chain compromise

Self-Replicating Worm Hits 180+ Software Packages

5 Best VPN Services (2025), Tested and Reviewed

Phoenix RowHammer Attack Bypasses Advanced DDR5 Memory Protections in 109 Seconds

'FileFix' attacks use fake Facebook security alerts to trick victims into running infostealers

Siemens SIMATIC NET CP, SINEMA, and SCALANCE

Siemens RUGGEDCOM, SINEC NMS, and SINEMA

Siemens OpenSSL Vulnerability in Industrial Products

Siemens Multiple Industrial Products

Schneider Electric Altivar Products, ATVdPAC Module, ILC992 InterLink Converter

Hitachi Energy RTU500 Series

Delta Electronics DIALink

HybridPetya: The Petya/NotPetya copycat comes with a twist

Microsoft Still Uses RC4

JLR stuck in neutral as losses skyrocket amid cyberattack cleanup

40 npm Packages Compromised in Supply Chain Attack Using bundle.js to Steal Credentials

RevengeHotels: a new wave of attacks leveraging LLMs and VenomRAT

China slaps 1-hour deadline on reporting serious cyber incidents

Mustang Panda Deploys SnakeDisk USB Worm to Deliver Yokai Backdoor on Thailand IPs

~ 15 Sep 2025 ~

Careless engineer stored recovery codes in plaintext, got whole org pwned

Russia Tests Hypersonic Missile at NATOs Doorstepand Shares the Video

6 Browser-Based Attacks Security Teams Need to Prepare For Right Now

Weekly Recap: Bootkit Malware, AI-Powered Attacks, Supply Chain Breaches, Zero-Days & More

Security begins with visibility: How IGA brings hidden access risks to light

Former FinWise employee may have accessed nearly 700K customer records

AI-Powered Villager Pen Testing Tool Hits 11,000 PyPI Downloads Amid Abuse Concerns

Nork snoops whip up fake South Korean military ID with help from ChatGPT

China turns the screws on Nvidia with antitrust probe

HiddenGh0st, Winos and kkRAT Exploit SEO, GitHub Pages in Chinese Malware Attacks

Lawsuit About WhatsApp Security

Jaguar Land Rover supply chain workers must get Covid-style support, says union

Shiny tools, shallow checks: how the AI hype opens the door to malicious MCP servers

UK Lords take aim at Ofcom's 'child-protection' upgrades to Online Safety Act

Cyber-scam camp operators shift operations to vulnerable countries as sanctions strike

~ 14 Sep 2025 ~

15 ransomware gangs go dark to enjoy 'golden parachutes'

Upcoming Speaking Engagements