Port 22

~ 20 Nov 2025 ~

LLM-generated malware is improving, but don't expect autonomous attacks tomorrow

Mozilla Says Its Finally Done With Two-Faced Onerep

ThreatsDay Bulletin: 0-Days, LinkedIn Spies, Crypto Crimes, IoT Flaws and New Malware Waves

CTM360 Exposes a Global WhatsApp Hijacking Campaign: HackOnChat

Fired techie admits sabotaging ex-employer, causing $862K in damage

New Sturnus Android Trojan Quietly Captures Encrypted Chats and Hijacks Devices

TP-Link accuses rival Netgear of 'smear campaign' over alleged China ties

Education boards left gates wide open for PowerSchool mega-breach, say watchdogs

Iran-Linked Hackers Mapped Ship AIS Data Days Before Real-World Missile Strike Attempt

Scam USPS and E-Z Pass Texts and Websites

Opto 22 GRV-EPIC and groov RIO

ICAM365 CCTV Camera Multiple Models

Festo MSE6-C2M/D2M/E2M

Festo Didactic products

Emerson Appleton UPSMON-PRO

Automated Logic WebCTRL Premium Server

Palo Alto kit sees massive surge in malicious activity amid mystery traffic flood

Inside the dark web job market

Blockchain and Node.js abused by Tsundere: an emerging botnet

With the Rise of AI, Cisco Sounds an Urgent Alarm About the Risks of Aging Tech

The OSINT playbook: Find your weak spots before attackers do

TamperedChef Malware Spreads via Fake Software Installers in Ongoing Global Campaign

Palo Alto CEO tips nation-states to weaponize quantum computing by 2029

US, UK, Australia sanction Lockbit gangs hosting provider

~ 19 Nov 2025 ~

Fortinet 'fesses up to second 0-day within a week

WIRED Roundup: DHSs Privacy Breach, AI Romantic Affairs, and Google Sues Text Scammers

Hackers Actively Exploiting 7-Zip Symbolic LinkBased RCE Vulnerability (CVE-2025-11001)

Python-Based WhatsApp Worm Spreads Eternidade Stealer Across Brazilian Devices

WrtHug Exploits Six ASUS WRT Flaws to Hijack Tens of Thousands of EoL Routers Worldwide

Amazon security boss: Hostile countries use cyber targeting for physical military strikes

Application Containment: How to Use Ringfencing to Prevent the Weaponization of Trusted Software

EdgeStepper Implant Reroutes DNS Queries to Deploy Malware via Hijacked Software Updates

ServiceNow AI Agents Can Be Tricked Into Acting Against Each Other via Second-Order Prompts

The Cloudflare Outage May Be a Security Roadmap

Researchers claim 'largest leak ever' after uncovering WhatsApp enumeration flaw

Legal Restrictions on Vulnerability Disclosure

IT threat evolution in Q3 2025. Mobile statistics

IT threat evolution in Q3 2025. Non-mobile statistics

Vaping Is Everywhere in SchoolsSparking a Bathroom Surveillance Boom

PlushDaemon compromises network devices for adversary-in-the-middle attacks

Fortinet Warns of New FortiWeb CVE-2025-58034 Vulnerability Exploited in the Wild

Tens of thousands more ASUS routers pwned by suspected, evolving China operation

Selling technology investments to the board: a strategic guide for CISOs and CIOs

China recruiting spies in the UK with fake headhunters and sites like LinkedIn

Dark Web Search Engines in 2025 Enterprise Monitoring, APIs and IOC Hunting

Sneaky 2FA Phishing Kit Adds BitB Pop-ups Designed to Mimic the Browser Address Bar

~ 18 Nov 2025 ~

Self-replicating botnet attacks Ray clusters

Meta Expands WhatsApp Security Research with New Proxy Tool and $4M in Bounties This Year

Researchers Detail Tuoni C2's Role in an Attempted 2025 Real-Estate Cyber Intrusion

Iranian Hackers Use DEEPROOT and TWOSTROKE Malware in Aerospace and Defense Attacks

FCC looks to torch Biden-era cyber rules sparked by Salt Typhoon mess

Take fight to the enemy, US cyber boss says

Google Chrome bug exploited as an 0-day - patch now or risk full system compromise

Learn How Leading Companies Secure Cloud Workloads and Infrastructure at Scale

Beyond IAM Silos: Why the Identity Security Fabric is Essential for Securing AI and Non-Human Identities

Seven npm Packages Use Adspect Cloaking to Trick Victims Into Crypto Scam Pages

Ambient and autonomous security for the agentic era

Agents built into your workflow: Get Security Copilot with Microsoft 365 E5

A Simple WhatsApp Security Flaw Exposed 3.5 Billion Phone Numbers

Microsoft Mitigates Record 5.72 Tbps DDoS Attack Driven by AISURU Botnet

Zoomers are officially worse at passwords than 80-year-olds

AI and Voter Engagement

Shelly Pro 4PM

Shelly Pro 3EM

Schneider Electric PowerChute Serial Shutdown

Schneider Electric EcoStruxure Machine SCADA Expert & Pro-face BLUE Open Studio

METZ CONNECT EWIO2

Google Issues Security Fix for Actively Exploited Chrome V8 Zero-Day Vulnerability

~ 17 Nov 2025 ~

New EVALUSION ClickFix Campaign Delivers Amatera Stealer and NetSupport RAT

'Largest-ever' cloud DDoS attack pummels Azure with 3.64B packets per second

Pentagon and soldiers let too many secrets slip on social networks, watchdog says

Security researcher calls BS on Coinbase breach disclosure timeline

Weekly Recap: Fortinet Exploited, China's AI Hacks, PhaaS Empire Falls & More

Selling your identity to North Korean IT scammers isn't a sustainable side hustle

5 Reasons Why Attackers Are Phishing Over LinkedIn

Collaborative research by Microsoft and NVIDIA on real-time immunity

Dragon Breath Uses RONINGLOADER to Disable Security Tools and Deploy Gh0st RAT

Game over: Europol storms gaming platforms in extremist content sweep

Overconfidence is the new zero-day as teams stumble through cyber simulations

Eurofiber admits crooks swiped data from French unit after cyberattack

More Prompt||GTFO

UK prosecutors seize 4.11M in crypto from Twitter mega-hack culprit

Rust Adoption Drives Android Memory Safety Bugs Below 20% for First Time

What if your romantic AI chatbot cant keep a secret?

Jaguar Land Rover hack cost India's Tata Motors around $2.4 billion and counting

mcp-scan Real-Time Guardrail Monitoring and Dynamic Proxy for MCP Servers

~ 16 Nov 2025 ~

Logitech leaks data after zero-day attack

Microsoft Patch Tuesday, November 2025 Edition

~ 15 Nov 2025 ~

RondoDox Exploits Unpatched XWiki Servers to Pull More Devices Into Its Botnet

Five U.S. Citizens Plead Guilty to Helping North Korean IT Workers Infiltrate 136 Companies

A Major Leak Spills a Chinese Hacking Contractors Tools and Targets

~ 14 Nov 2025 ~

North Korean Hackers Turn JSON Services into Covert Malware Delivery Channels

Friday Squid Blogging: Pilot Whales Eat a Lot of Squid

Researchers Find Serious AI Bugs Exposing Meta, Nvidia, and Microsoft Inference Frameworks

Fortinet finally cops to critical make-me-admin bug under active exploitation

DOJ Issued Seizure Warrant to Starlink Over Satellite Internet Systems Used at Scam Compound

Iranian Hackers Launch SpearSpecter Spy Operation on Defense & Government Targets

Crims poison 150K+ npm packages with token-farming malware

Upcoming Speaking Engagements

FBI flags scam targeting Chinese speakers with bogus surgery bills