Port 22

~ 2 Sep 2025 ~

Huawei counts cost of Western bans as UK business withers

Cookies and how to bake them: what they are for, associated risks, and what session hijacking has to do with it

Frostbyte10 bugs put thousands of refrigerators at major grocery chains at risk

Reg readers have spoken: 93% back move away from Microsoft in UK public sector

Europe Putin the blame on Russia after GPS jamming disrupts presidents plane

In the rush to adopt hot new tech, security is often forgotten. AI is no exception

~ 1 Sep 2025 ~

Android Droppers Now Deliver SMS Stealers and Spyware, Not Just Banking Trojans

The Ongoing Fallout from a Breach at AI Chatbot Maker Salesloft

Weekly Recap: WhatsApp 0-Day, Docker Bug, Salesforce Breach, Fake CAPTCHAs, Spyware App & More

When Browsers Become the Attack Surface: Rethinking Security for Scattered Spider

ScarCruft Uses RokRAT Malware in Operation HanKook Phantom Targeting South Korean Academics

Norway's 10B UK frigate deal could delay Royal Navy ships

DDoS is the neglected cybercrime that's getting bigger. Let's kill it off

China Is About to Show Off Its New High-Tech Weapons to the World

LegalPwn: Tricking LLMs by burying badness in lawyerly fine print

Traffic to government domains often crosses national borders, or flows through risky bottlenecks

WhatsApp warns of 'attack against specific targeted users'

TagNabIt AWS Cloud Resource Enumeration via Metadata Tags

~ 30 Aug 2025 ~

Attackers Abuse Velociraptor Forensic Tool to Deploy Visual Studio Code for C2 Tunneling

DOGE Put Everyones Social Security Data at Risk, Whistleblower Claims

WhatsApp Issues Emergency Update for Zero-Click Exploit Targeting iOS and macOS Devices

~ 29 Aug 2025 ~

Researchers Warn of Sitecore Exploit Chain Linking Cache Poisoning and Remote Code Execution

SSA Whistleblowers Resignation Email Mysteriously Disappeared From Inboxes

Friday Squid Blogging: Catching Humboldt Squid

Researcher who found McDonald's free-food hack turns her attention to Chinese restaurant robots

Amazon Disrupts APT29 Watering Hole Campaign Abusing Microsoft Device Code Authentication

Abandoned Sogou Zhuyin Update Server Hijacked, Weaponized in Taiwan Espionage Campaign

AWS catches Russia's Cozy Bear clawing at Microsoft credentials

Can Your Security Stack See ChatGPT? Why Network Visibility Matters

Click Studios Patches Passwordstate Authentication Bypass Vulnerability in Emergency Access Page

FreePBX Servers Targeted by Zero-Day Flaw, Emergency Patch Now Available

Feds Seize $6.4M VerifTools Fake-ID Marketplace, but Operators Relaunch on New Domain

Enterprise password management outfit Passwordstate patches Emergency Access bug

Google Warns Salesloft OAuth Breach Extends Beyond Salesforce, Impacting All Integrations

UK government dragged for incomplete security reforms after Afghan leak fallout

Baggage Tag Scam

How attackers adapt to built-in macOS protection

TamperedChef Malware Disguised as Fake PDF Editors Steals Credentials and Cookies

RedExt Browser Extension-Based C2 Framework for Red Team Recon

~ 28 Aug 2025 ~

FBI cyber cop: Salt Typhoon pwned 'nearly every American'

Researchers Find VS Code Flaw Allowing Attackers to Republish Deleted Extensions Under Same Names

DHS says it needs $100M worth of counter-drone tech to protect America

Salt Typhoon Exploits Cisco, Ivanti, Palo Alto Flaws to Breach 600 Organizations Worldwide

Not in my browser! Vivaldi capo doubles down on generative AI ban

FBI, Dutch cops seize fake ID marketplace that sold identity docs for $9

How does China keep stealing our stuff, wonders DoD group responsible for keeping foreign agents out

Affiliates Flock to Soulless Scam Gambling Machine

Webinar: Why Top Teams Are Prioritizing Code-to-Cloud Mapping in Our 2025 AppSec

Hidden Vulnerabilities of Project Management Tools & How FluentPro Backup Secures Them

16 billion credentials exposed: why your business needs a password manager now

Malicious Nx Packages in s1ngularity Attack Leaked 2,349 GitHub, Cloud, and AI Credentials

SK Telecom walloped with $97M fine after schoolkid security blunders let attackers run riot

U.S. Treasury Sanctions DPRK IT-Worker Scheme, Exposing $600K Crypto Transfers and $1M+ Profits

TransUnion admits 4.5M affected after third-party support app breached

Thousands of Citrix NetScaler boxes still sitting ducks despite patches

Ransomware crooks knock Swedish municipalities offline for measly sum of $168K

Schneider Electric Saitel DR & Saitel DP Remote Terminal Unit

Mitsubishi Electric MELSEC iQ-F Series CPU Module

Mitsubishi Electric MELSEC iQ-F Series CPU Module

GE Vernova CIMPLICITY

Delta Electronics COMMGR

Delta Electronics CNCSoft-G2

Euro banks block billions in rogue PayPal direct debits after fraud glitch

Law firm email blunder exposes Church of England abuse victim details

The UK May Be Dropping Its Backdoor Mandate

This month in security with Tony Anscombe August 2025 edition

If you thought China's Salt Typhoon was booted off critical networks, think again

Storm-0501 Exploits Entra ID to Exfiltrate and Delete Azure Data in Hybrid Cloud Attacks

~ 27 Aug 2025 ~

ChatGPT hates LA Chargers fans

Someone Created First AI-Powered Ransomware Using OpenAI's gpt-oss:20b Model

Anthropic Disrupts AI-Powered Cyberattacks Automating Theft and Extortion Across Critical Sectors

Sting nails two front firms in Nork IT worker scam

Crims laud Claude to plant ransomware and fake IT expertise

ShadowSilk Hits 36 Government Targets in Central Asia and APAC Using Telegram Bots

Putin on the code: DoD reportedly relies on utility written by Russian dev

Nx NPM packages poisoned in AI-assisted supply chain attack

This Is the Group That's Been Swatting US Universities

The 5 Golden Rules of Safe AI Adoption

The intruder is in the house: Storm-0501 attacked Azure, stole data, demanded payment via Teams

Storm-0501s evolving techniques lead to cloud-based ransomware

Salesloft OAuth Breach via Drift AI Chat Agent Exposes Salesforce Customer Data

Microsoft ranked number one in modern endpoint security market share third year in a row

Blind Eagles Five Clusters Target Colombia Using RATs, Phishing Lures, and Dynamic DNS Infra

Salesforce data missing? It might be due to Salesloft breach, Google says

The Era of AI-Generated Ransomware Has Arrived

We Are Still Unable to Secure LLMs from Malicious Inputs

Exploits and vulnerabilities in Q2 2025

Who are you again? Infosec experiencing 'Identity crisis' amid rising login attacks

Dont let back to school become back to (cyber)bullying

BGPs security problems are notorious. Attempts to fix that are a work in progress

Google issued State-backed attack in progress warnings after spotting web hijack scheme

Cybersecurity Workforce Trends in 2025 Skills Gap, Diversity and SOC Readiness

~ 26 Aug 2025 ~

First known AI-powered ransomware uncovered by ESET Research

Citrix Patches Three NetScaler Flaws, Confirms Active Exploitation of CVE-2025-7775

New Sni5Gect Attack Crashes Phones and Downgrades 5G to 4G without Rogue Base Station

First AI-powered ransomware spotted, but it's not active yet

Azure apparatchik shows custom silicon keeping everything locked down

DOGE accused of duplicating critical Social Security database on unsecured cloud

ZipLine attack uses 'Contact Us' forms, White House butler pic to invade sensitive industries

MixShell Malware Delivered via Contact Forms Targets U.S. Supply Chain Manufacturers