Port 22

~ 18 Nov 2025 ~

Seven npm Packages Use Adspect Cloaking to Trick Victims Into Crypto Scam Pages

Ambient and autonomous security for the agentic era

Agents built into your workflow: Get Security Copilot with Microsoft 365 E5

A Simple WhatsApp Security Flaw Exposed 3.5 Billion Phone Numbers

Microsoft Mitigates Record 5.72 Tbps DDoS Attack Driven by AISURU Botnet

Zoomers are officially worse at passwords than 80-year-olds

AI and Voter Engagement

Shelly Pro 4PM

Shelly Pro 3EM

Schneider Electric PowerChute Serial Shutdown

Schneider Electric EcoStruxure Machine SCADA Expert & Pro-face BLUE Open Studio

METZ CONNECT EWIO2

Google Issues Security Fix for Actively Exploited Chrome V8 Zero-Day Vulnerability

~ 17 Nov 2025 ~

New EVALUSION ClickFix Campaign Delivers Amatera Stealer and NetSupport RAT

'Largest-ever' cloud DDoS attack pummels Azure with 3.64B packets per second

Pentagon and soldiers let too many secrets slip on social networks, watchdog says

Security researcher calls BS on Coinbase breach disclosure timeline

Weekly Recap: Fortinet Exploited, China's AI Hacks, PhaaS Empire Falls & More

Selling your identity to North Korean IT scammers isn't a sustainable side hustle

5 Reasons Why Attackers Are Phishing Over LinkedIn

Collaborative research by Microsoft and NVIDIA on real-time immunity

Dragon Breath Uses RONINGLOADER to Disable Security Tools and Deploy Gh0st RAT

Game over: Europol storms gaming platforms in extremist content sweep

Overconfidence is the new zero-day as teams stumble through cyber simulations

Eurofiber admits crooks swiped data from French unit after cyberattack

More Prompt||GTFO

UK prosecutors seize 4.11M in crypto from Twitter mega-hack culprit

Rust Adoption Drives Android Memory Safety Bugs Below 20% for First Time

What if your romantic AI chatbot cant keep a secret?

Jaguar Land Rover hack cost India's Tata Motors around $2.4 billion and counting

mcp-scan Real-Time Guardrail Monitoring and Dynamic Proxy for MCP Servers

~ 16 Nov 2025 ~

Logitech leaks data after zero-day attack

Microsoft Patch Tuesday, November 2025 Edition

~ 15 Nov 2025 ~

RondoDox Exploits Unpatched XWiki Servers to Pull More Devices Into Its Botnet

Five U.S. Citizens Plead Guilty to Helping North Korean IT Workers Infiltrate 136 Companies

A Major Leak Spills a Chinese Hacking Contractors Tools and Targets

~ 14 Nov 2025 ~

North Korean Hackers Turn JSON Services into Covert Malware Delivery Channels

Friday Squid Blogging: Pilot Whales Eat a Lot of Squid

Researchers Find Serious AI Bugs Exposing Meta, Nvidia, and Microsoft Inference Frameworks

Fortinet finally cops to critical make-me-admin bug under active exploitation

DOJ Issued Seizure Warrant to Starlink Over Satellite Internet Systems Used at Scam Compound

Iranian Hackers Launch SpearSpecter Spy Operation on Defense & Government Targets

Crims poison 150K+ npm packages with token-farming malware

Upcoming Speaking Engagements

FBI flags scam targeting Chinese speakers with bogus surgery bills

Ransomware's Fragmentation Reaches a Breaking Point While LockBit Returns

Chinese Hackers Use Anthropic's AI to Launch Automated Cyber Espionage Campaign

CISA flags imminent threat as Akira ransomware starts hitting Nutanix AHV

Fortinet FortiWeb Flaw Actively Exploited in the Wild Before Company's Silent Patch

The Role of Humans in an AI-Powered World

Clop claims it hacked 'the NHS.' Which bit? Your guess is as good as theirs

Russian Hackers Create 4,300 Fake Travel Sites to Steal Hotel Guests' Payment Data

Kubernetes overlords decide Ingress NGINX isnt worth saving

~ 13 Nov 2025 ~

Chinese spies told Claude to break into about 30 critical orgs. Some attacks succeeded

Ransomed CTO falls on sword, refuses to pay extortion demand

Fake Chrome Extension Safery Steals Ethereum Wallet Seed Phrases Using Sui Blockchain

When Attacks Come Faster Than Patches: Why 2026 Will be the Year of Machine-Speed Security

Operation Endgame Dismantles Rhadamanthys, Venom RAT, and Elysium Botnet in Global Crackdown

Ubuntu 25.10's Rusty sudo holes quickly welded shut

ThreatsDay Bulletin: Cisco 0-Days, AI Bug Bounties, Crypto Heists, State-Linked Leaks and 20 More Stories

Google Sues to Disrupt Chinese SMS Phishing Triad

Extra, extra, read all about it: Washington Post clobbered in Clop caper

CISA Flags Critical WatchGuard Fireware Flaw Exposing 54,000 Fireboxes to No-Login Attacks

Book Review: The Business of Secrets

Rhadamanthys malware admin rattled as cops seize a thousand-plus servers

Siemens Spectrum Power 4

Siemens Solid Edge

Siemens Software Center and Solid Edge

Siemens SICAM P850 family and SICAM P855 family

Siemens LOGO! 8 BM Devices

Siemens COMOS

Siemens Altair Grid Engine

Rockwell Automation Verve Asset Manager

Rockwell Automation Studio 5000 Simulation Interface

Rockwell Automation FactoryTalk Policy Manager

Rockwell Automation FactoryTalk DataMosaix Private Cloud

Rockwell Automation AADvance-Trusted SIS Workstation

Mitsubishi Electric MELSEC iQ-F Series

General Industrial Controls Lynx+ Gateway

Brightpick Mission Control / Internal Logic Control

AVEVA Edge

AVEVA Application Server IDE

NHS supplier ends probe into ransomware attack that contributed to patient death

Over 46,000 Fake npm Packages Flood Registry in Worm-Like Spam Attack

How password managers can be hacked and how to stay safe

~ 12 Nov 2025 ~

DHS Kept Chicago Police Records for Months in Violation of Domestic Espionage Rules

Google sues 25 China-based scammers behind Lighthouse 'phishing for dummies' kit

Google Sues China-Based Hackers Behind $1 Billion Lighthouse Phishing Platform

Amazon Uncovers Attacks Exploited Cisco ISE and Citrix NetScaler as Zero-Day Flaws

[Webinar] Learn How Leading Security Teams Reduce Attack Surface Exposure with DASR

Attackers turned Citrix, Cisco 0-day exploits into custom-malware hellscape

Active Directory Under Siege: Why Critical Infrastructure Needs Stronger Security

Microsoft Fixes 63 Security Flaws, Including a Windows Kernel Zero-Day Under Active Attack

Google Launches 'Private AI Compute' Secure AI Processing with On-Device-Level Privacy

On Hacking Back

Bitcoin bandit's 5B bubble bursts as cops wrap seven-year chase

UK's Cyber Security and Resilience Bill makes Parliamentary debut

Aviation watchdog says organized drone attacks will shut UK airports sooner or later

This Is the Platform Google Claims Is Behind a 'Staggering Scam Text Operation

China hates crypto and scams, but is now outraged USA acquired bitcoin from a scammer