BigID Launches Shadow AI Discovery to Uncover Rogue Models and Risky AI Data Summary BigID has introduced Shadow AI Discovery, a capability designed to detect unmanaged or unauthorised AI models…
Summary A Korean threat actor, known by handles such as soonje/kwonsoonje/zon/nowon, published 60 malicious RubyGems packages since March 2023. The packages were marketed to grey-hat spam marketers to automate bulk…
Researchers Warn of ‘Hidden Risks’ in Passwordless Account Recovery Summary Passwordless authentication (biometrics, passkeys, tokens) is on the rise, but researchers at Black Hat USA say account recovery methods have…
Black Hat NOC Expands AI Implementation Across Security Operations Summary The Black Hat USA 2025 Network Operations Center (NOC), led by James Pope of Corelight, expanded use of AI and…
REvil Actor Accuses Russia of Planning 2021 Kaseya Attack Summary A convicted REvil affiliate, Yaroslav Vasinskyi, has claimed the Russian government played a central role in the July 2021 supply-chain…
BlackSuit Ransomware Takes an Infrastructure Hit From Law Enforcement Summary US and international law enforcement agencies executed a coordinated operation on 24 July that disrupted parts of the BlackSuit (also…
Source: Frame Stock Footage via Shutterstock Summary Researchers at ReliaQuest report growing overlaps between two prominent cybercrime groups — ShinyHunters and Scattered Spider — based on timing, shared infrastructure and…
How to Stay a Step Ahead of a Non-Obvious Threat Summary Dirk Schrader explains why business logic vulnerabilities — flaws in how an application implements its core processes — are…
Charon Ransomware Emerges With APT-Style Tactics Summary Trend Micro has documented the first observed deployment of a new ransomware family called Charon, used in targeted attacks against public-sector and aviation…
Elevation-of-Privilege Vulns Dominate Microsoft’s Patch Tuesday Summary Microsoft’s August 2025 Patch Tuesday fixes 111 unique CVEs, with a striking 44 (about 39%) classified as elevation-of-privilege (EoP) issues that let attackers…
