Port 22

~ 4 Dec 2025 ~

Cloudflare Has Blocked 416 Billion AI Bot Requests Since July 1

Hegseth needs to go to secure messaging school, report says

Twins who hacked State Dept hired to work for gov again, now charged with deleting databases

FBI Says DC Pipe Bomb Suspect Brian Cole Kept Buying Bomb Parts After January 6

Huge Trove of Nude Images Leaked by AI Image Generator Startup's Exposed Database

ThreatsDay Bulletin: Wi-Fi Hack, npm Worm, DeFi Theft, Phishing Blasts and 15 More Stories

Cybersecurity strategies to prioritize now

A New Anonymous Phone Carrier Lets You Sign Up With Nothing but a Zip Code

5 Threats That Reshaped Web Security This Year [2025]

Microsoft quietly shuts down Windows shortcut flaw after years of espionage abuse

GoldFactory Hits Southeast Asia with Modified Banking Apps Driving 11,000+ Infections

Aisuru botnet turns Q3 into a terabit-scale stress test for the entire internet

Record 29.7 Tbps DDoS Attack Linked to AISURU Botnet with up to 4 Million Infected Hosts

Sunbird DCIM dcTrack and Power IQ

SolisCloud Monitoring Platform

Mitsubishi Electric GX Works2

MAXHUB Pivot

Johnson Controls OpenBlue Mobile Web Application for OpenBlue Workplace

Johnson Controls iSTAR

Advantech iView

The Louisiana Department of Wildlife and Fisheries Is Detaining People for ICE

Phishing, privileges and passwords: Why identity is critical to improving cybersecurity posture

TLS 1.3 includes welcome improvements, but still allows long-lived secrets

Rust core library partly polished for industrial safety spec

~ 3 Dec 2025 ~

Critical RSC Bugs in React and Next.js Allow Unauthenticated Remote Code Execution

Microsoft Silently Patches Windows LNK Flaw After Years of Active Exploitation

WordPress King Addons Flaw Under Active Attack Lets Hackers Make Admin Accounts

'Exploitation is imminent' as 39 percent of cloud environs have max-severity React hole

Brazil Hit by Banking Trojan Spread via WhatsApp Worm and RelayNFC NFC Relay Fraud

Shai Hulud 2.0, now with a wiper flavor

Discover the AI Tools Fueling the Next Cybercrime Wave Watch the Webinar

Chopping AI Down to Size: Turning Disruptive Technology into a Strategic Advantage

Picklescan Bugs Allow Malicious PyTorch Models to Evade Scans and Execute Code

Malicious Rust Crate Delivers OS-Specific Malware to Web3 Developer Systems

Exploits and vulnerabilities in Q3 2025

Heres your worst nightmare: E-tailer can only resume partial sales 45 days after ransomware attack

Indian government reveals GPS spoofing at eight major airports

Russia Wants This Mega Missile to Intimidate the West, but It Keeps Crashing

~ 2 Dec 2025 ~

India Orders Messaging Apps to Work Only With Active SIM Cards to Prevent Fraud and Misuse

Researchers Capture Lazarus APT's Remote-Worker Scheme Live on Camera

GlassWorm Returns with 24 Malicious Extensions Impersonating Popular Developer Tools

Malicious npm Package Uses Hidden Prompt and Script to Evade AI Security Tools

Your Data Might Determine How Much You Pay for Eggs

Iran-Linked Hackers Hits Israeli Sectors with New MuddyViper Backdoor in Targeted Attacks

Two Android 0-day bugs disclosed and fixed, plus 105 more to patch

University of Pennsylvania joins list of victims from Clop's Oracle EBS raid

SecAlerts Cuts Through the Noise with a Smarter, Faster Way to Track Vulnerabilities

How to build forward-thinking cybersecurity teams for tomorrow

Europol nukes Cryptomixer laundering hub, seizing 25M in Bitcoin

Kensington and Chelsea confirms IT outage was a data breach after all

FTC schools edtech outfit after intruder walked off with 10M student records

Google Patches 107 Android Flaws, Including Two Framework Bugs Exploited in the Wild

Like Social Media, AI Requires Difficult Choices

Iskra iHUB and iHUB Lite

Industrial Video & Control Longwatch

Kaspersky Security Bulletin 2025. Statistics

MuddyWater: Snakes by the riverbank

India demands smartphone makers install a government app on every handset

~ 1 Dec 2025 ~

India Orders Phone Makers to Pre-Install Sanchar Saathi App to Tackle Telecom Fraud

ShadyPanda Turns Popular Browser Extensions with 4.3 Million Installs Into Spyware

Stealthy browser extensions waited years before infecting 4.3M Chrome, Edge users with backdoors and spyware

Weekly Recap: Hot CVEs, npm Worm Returns, Firefox RCE, M365 Email Raid & More

Four arrested in South Korea over massive IP camera snooping spree

Webinar: The "Agentic" Trojan Horse: Why the New AI Browsers War is a Nightmare for Security Teams

Dutch study finds teen cybercrime is mostly just a phase

New Albiriox MaaS Malware Targets 400+ Apps for On-Device Fraud and Screen Control

Flock Uses Overseas Gig Workers to Build Its Surveillance AI

South Korea's answer to Amazon admits breach exposed 33.7M customers

Banning VPNs

French Football Federation faces own-goal after club software data breach

Tomiris Shifts to Public-Service Implants for Stealthier C2 in Attacks on Government Targets

Oversharing is not caring: Whats at stake if your employees post too much online

Google and Apple ordered to stop fake government TXTs

Swiss government says give M365, and all SaaS, a miss as it lacks end-to-end encryption

~ 30 Nov 2025 ~

CISA Adds Actively Exploited XSS Bug CVE-2021-26829 in OpenPLC ScadaBR to KEV

~ 29 Nov 2025 ~

The WIRED Guide to Digital Opsec for Teens

~ 28 Nov 2025 ~

Legacy Python Bootstrap Scripts Create Domain-Takeover Risk in Multiple PyPI Packages

North Korean Hackers Deploy 197 npm Packages to Spread Updated OtterCookie Malware

Friday Squid Blogging: Flying Neon Squid Found on Israeli Beach

The AI Hype-Machine: Canadas Ill-Advised National Sprint on Artificial Intelligence

Why Organizations Are Turning to RPAM

PostHog admits Shai-Hulud 2.0 was its biggest ever security bungle

Brit telco Brsk confirms breach as bidding begins for 230K+ customer records

GrapheneOS bails on OVHcloud over France's privacy stance

Prompt Injection Through Poetry

MS Teams Guest Access Can Remove Defender Protection When Users Join External Tenants

This month in security with Tony Anscombe November 2025 edition

The AI hype-machine: Canadas ill-advised national sprint on artificial intelligence

Avoiding the kitchen sink: A guide to mixed methods approaches within digital rights governance

TryHackMe races to add women to Christmas cyber challenge roster after backlash

OBR drags in cyber bigwig after Budget leak blunder

UK digital ID plan gets a price tag at last 1.8B

Poems Can Trick AI Into Helping You Make a Nuclear Weapon

Tomiris wreaks Havoc: New tools and techniques of the APT group

Korean web giant Naver acquired crypto exchange Upbit, which reported a $30m heist a day later

~ 27 Nov 2025 ~

Bloody Wolf Expands Java-based NetSupport RAT Attacks in Kyrgyzstan and Uzbekistan

Microsoft to Block Unauthorized Scripts in Entra ID Logins with 2026 CSP Update

Zendesk users targeted as Scattered Lapsus$ Hunters spin up fake support sites

OpenAI cuts off Mixpanel after analytics leak exposes API users

ThreatsDay Bulletin: AI Malware, Voice Bot Flaws, Crypto Laundering, IoT Attacks and 20 More Stories