Port 22

~ 8 Dec 2025 ~

Chinas first reusable rocket explodes, but its onboard Ethernet network flew

Apache warns of 10.0-rated flaw in Tika metadata ingestion tool

~ 6 Dec 2025 ~

Researchers Uncover 30+ Flaws in AI Coding Tools Enabling Data Theft and RCE Attacks

Critical React2Shell Flaw Added to CISA KEV After Confirmed Active Exploitation

Drones to Diplomas: How Russias Largest Private University is Linked to a $25M Essay Mill

The US Won't Sanction China for Salt Typhoon Hacking

Security News This Week: Oh Crap, Kohlers Toilet Cameras Arent Really End-to-End Encrypted

Death to one-time text codes: Passkeys are the new hotness in MFA

~ 5 Dec 2025 ~

Crims using social media images, videos in 'virtual kidnapping' scams

Zero-Click Agentic Browser Attack Can Delete Entire Google Drive Using Crafted Emails

Friday Squid Blogging: Vampire Squid Genome

Novel clickjacking attack relies on CSS and SVG

Critical XXE Bug CVE-2025-66516 (CVSS 10.0) Hits Apache Tika, Requires Urgent Patch

Cloudflare blames Friday outage on borked fix for React2shell vuln

Microsoft named a leader in the 2025 Gartner Magic Quadrant for Email Security

Chinese Hackers Have Started Exploiting the Newly Disclosed React2Shell Vulnerability

Intellexa Leaks Reveal Zero-Days and Ads-Based Vector for Predator Spyware Delivery

"Getting to Yes": An Anti-Sales Guide for MSPs

Asus supplier hit by ransomware attack as gang flaunts alleged 1 TB haul

Beijing-linked hackers are hammering max-severity React bug, AWS warns

CISA Reports PRC Hackers Using BRICKSTORM for Long-Term Access in U.S. Systems

UK pushes ahead with facial recognition expansion despite civil liberties backlash

JPCERT Confirms Active Command Injection Attacks on Array AG Gateways

Bots, bias, and bunk: How can you tell what's real on the net?

New Anonymous Phone Service

An AI for an AI: Anthropic says AI agents require AI defense

Signalgate Inspector General Report Wants Just One Change to Avoid a Repeat Debacle

~ 4 Dec 2025 ~

SMS Phishers Pivot to Points, Taxes, Fake Retailers

Silver Fox Uses Fake Microsoft Teams Installer to Spread ValleyRAT Malware in China

PRC spies Brickstromed their way into critical US networks and remained hidden for years

PRC spies Brickstormed their way into critical US networks and remained hidden for years

Cloudflare Has Blocked 416 Billion AI Bot Requests Since July 1

Hegseth needs to go to secure messaging school, report says

Twins who hacked State Dept hired to work for gov again, now charged with deleting databases

FBI Says DC Pipe Bomb Suspect Brian Cole Kept Buying Bomb Parts After January 6

Huge Trove of Nude Images Leaked by AI Image Generator Startup's Exposed Database

ThreatsDay Bulletin: Wi-Fi Hack, npm Worm, DeFi Theft, Phishing Blasts and 15 More Stories

Cybersecurity strategies to prioritize now

A New Anonymous Phone Carrier Lets You Sign Up With Nothing but a Zip Code

5 Threats That Reshaped Web Security This Year [2025]

Microsoft quietly shuts down Windows shortcut flaw after years of espionage abuse

GoldFactory Hits Southeast Asia with Modified Banking Apps Driving 11,000+ Infections

Aisuru botnet turns Q3 into a terabit-scale stress test for the entire internet

Record 29.7 Tbps DDoS Attack Linked to AISURU Botnet with up to 4 Million Infected Hosts

Sunbird DCIM dcTrack and Power IQ

SolisCloud Monitoring Platform

Mitsubishi Electric GX Works2

MAXHUB Pivot

Johnson Controls OpenBlue Mobile Web Application for OpenBlue Workplace

Johnson Controls iSTAR

Advantech iView

The Louisiana Department of Wildlife and Fisheries Is Detaining People for ICE

Phishing, privileges and passwords: Why identity is critical to improving cybersecurity posture

TLS 1.3 includes welcome improvements, but still allows long-lived secrets

Rust core library partly polished for industrial safety spec

~ 3 Dec 2025 ~

Critical RSC Bugs in React and Next.js Allow Unauthenticated Remote Code Execution

Microsoft Silently Patches Windows LNK Flaw After Years of Active Exploitation

WordPress King Addons Flaw Under Active Attack Lets Hackers Make Admin Accounts

'Exploitation is imminent' as 39 percent of cloud environs have max-severity React hole

Brazil Hit by Banking Trojan Spread via WhatsApp Worm and RelayNFC NFC Relay Fraud

Shai Hulud 2.0, now with a wiper flavor

Discover the AI Tools Fueling the Next Cybercrime Wave Watch the Webinar

Chopping AI Down to Size: Turning Disruptive Technology into a Strategic Advantage

Picklescan Bugs Allow Malicious PyTorch Models to Evade Scans and Execute Code

Malicious Rust Crate Delivers OS-Specific Malware to Web3 Developer Systems

Exploits and vulnerabilities in Q3 2025

Heres your worst nightmare: E-tailer can only resume partial sales 45 days after ransomware attack

Indian government reveals GPS spoofing at eight major airports

Russia Wants This Mega Missile to Intimidate the West, but It Keeps Crashing

~ 2 Dec 2025 ~

India Orders Messaging Apps to Work Only With Active SIM Cards to Prevent Fraud and Misuse

Researchers Capture Lazarus APT's Remote-Worker Scheme Live on Camera

GlassWorm Returns with 24 Malicious Extensions Impersonating Popular Developer Tools

Malicious npm Package Uses Hidden Prompt and Script to Evade AI Security Tools

Your Data Might Determine How Much You Pay for Eggs

Iran-Linked Hackers Hits Israeli Sectors with New MuddyViper Backdoor in Targeted Attacks

Two Android 0-day bugs disclosed and fixed, plus 105 more to patch

University of Pennsylvania joins list of victims from Clop's Oracle EBS raid

SecAlerts Cuts Through the Noise with a Smarter, Faster Way to Track Vulnerabilities

How to build forward-thinking cybersecurity teams for tomorrow

Europol nukes Cryptomixer laundering hub, seizing 25M in Bitcoin

Kensington and Chelsea confirms IT outage was a data breach after all

FTC schools edtech outfit after intruder walked off with 10M student records

Google Patches 107 Android Flaws, Including Two Framework Bugs Exploited in the Wild

Like Social Media, AI Requires Difficult Choices

Iskra iHUB and iHUB Lite

Industrial Video & Control Longwatch

Kaspersky Security Bulletin 2025. Statistics

MuddyWater: Snakes by the riverbank

India demands smartphone makers install a government app on every handset

~ 1 Dec 2025 ~

India Orders Phone Makers to Pre-Install Sanchar Saathi App to Tackle Telecom Fraud

ShadyPanda Turns Popular Browser Extensions with 4.3 Million Installs Into Spyware

Stealthy browser extensions waited years before infecting 4.3M Chrome, Edge users with backdoors and spyware

Weekly Recap: Hot CVEs, npm Worm Returns, Firefox RCE, M365 Email Raid & More

Four arrested in South Korea over massive IP camera snooping spree

Webinar: The "Agentic" Trojan Horse: Why the New AI Browsers War is a Nightmare for Security Teams

Dutch study finds teen cybercrime is mostly just a phase

New Albiriox MaaS Malware Targets 400+ Apps for On-Device Fraud and Screen Control

Flock Uses Overseas Gig Workers to Build Its Surveillance AI

South Korea's answer to Amazon admits breach exposed 33.7M customers

Banning VPNs