2025-06-16
Malwarebytes
A week in security (June 9 – June 15)
Dark Reading
Anubis Ransomware-as-a-Service Kit Adds Data Wiper
Dark Reading
NIST Outlines Real-World Zero-Trust Examples
Amazon Security
How AWS improves active defense to empower customers
Ars Technica Security
Vandals cut fiber-optic lines, causing outage for Spectrum Internet subscribers
2025-06-13
Schneier on Security
Friday Squid Blogging: Stubby Squid
Schneier on Security
Paragon Spyware Used to Spy on European Journalists
Google Safety & Security
An age assurance tool for Europe and beyond
Eclypsium
Secure Device Lifecycle Management
Dark Reading
Cyberattacks on Humanitarian Orgs Jump Worldwide
Amazon Security
How to create post-quantum signatures using AWS KMS and ML-DSA
Amazon Security
AI security strategies from Amazon and the CIA: Insights from AWS Summit Washington, DC
Google Security Blog
Mitigating prompt injection attacks with a layered defense strategy
Palo Alto Networks
The New AI Attack Surface — How Cortex Cloud Secures MCP
2025-06-12
Microsoft Security
Cyber resilience begins before the crisis
Troy Hunt
Weekly Update 456
Cloudflare
Cloudflare service outage June 12, 2025
Schneier on Security
Airlines Secretly Selling Passenger Data to the Government
Talos Intelligence
Know thyself, know thy environment
Eclypsium
Securing AI Data Centers
Offensive Security
CVE-2024-21683 – Authenticated RCE via “Add a New Language” in Atlassian Confluence
Offensive Security
CVE‑2025‑49113 – Post‑Auth Remote Code Execution in Roundcube via PHP Object Deserialization
Elastic Security Labs
Call Stacks: No More Free Passes For Malware
Sansec Threat Research
Adobe patches critical Magento admin takeover via menu injection
The Citizen Lab
Graphite Caught: First Forensic Confirmation of Paragon’s iOS Mercenary Spyware Finds Journalists Targeted
Praetorian
Introducing: GitHub Device Code Phishing
Ars Technica Security
Coming to Apple OSes: A seamless, secure way to import and export passkeys
Krebs on Security
Inside a Dark Adtech Empire Fed by Fake CAPTCHAs
Palo Alto Networks
See How We’re Fortifying Cloud and AI at AWS re:Inforce 2025
2025-06-11
Fastly
DDoS in May
Project Black
FileFlows SQL Injection by Decompiling .NET Code
Talos Intelligence
catdoc zero-day, NVIDIA, High-Logic FontCreator and Parallel vulnerabilities
Dark Reading
ConnectWise to Rotate Code-Signing Certificates
Dark Reading
Agentic AI Takes Over Gartner's SRM Summit
Amazon Security
AWS completes Police-Assured Secure Facilities (PASF) audit in Europe (London) AWS Region
Black Lantern Security
Doomla! Zero Days
Krebs on Security
Patch Tuesday, June 2025 Edition
Synacktiv
NTLM reflection is dead, long live NTLM reflection! – An in-depth analysis of CVE-2025-33073
Redteam-Pentesting.de
A Look in the Mirror - The Reflective Kerberos Relay Attack
Searchlight Cyber
Why is Attack Surface Management Now Worth the Cost?
2025-06-10
Rapid7
Patch Tuesday - June 2025
Talos Intelligence
Microsoft Patch Tuesday for June 2025 — Snort rules and prominent vulnerabilities
White Knight Labs
Understanding Double Free in Windows Kernel Drivers
Eclypsium
Leading Cloud Computing Company Relies on Eclypsium to Protect AI Data Center Infrastructure
Dark Reading
PoC Code Escalates Roundcube Vuln Threat
Amazon Security
Building identity-first security: A guide to the Identity and Access Management track at AWS re:Inforce 2025
Ars Technica Security
Found in the wild: 2 Secure Boot exploits. Microsoft is patching only 1 of them.
Synacktiv
Exploiting Heroes of Might and Magic V
Compass Security Blog
LinkedIn for OSINT: tips and tricks
Sicuranext Blog
Influencing LLM Output using logprobs and Token Distribution
Sicuranext Blog
Influencing LLM Output using logprobs and Token Distribution
Zero Day Initiative
The June 2025 Security Update Review
TrustedSec
Common Mobile Device Threat Vectors