Attackers Exploit Critical Trend Micro Apex One Zero-Day Flaw Summary Trend Micro has disclosed two critical command-injection vulnerabilities in its Apex One management console (CVE-2025-54948 and CVE-2025-54987). One of the…
Startup Spotlight: Twine Security Tackles the Execution Gap Summary Twine Security, a 2024-founded seed-stage start-up (reported $17M raised, ~35 employees), aims to close the “execution gap” in cybersecurity by delivering…
Researcher Deploys Fuzzer to Test Autonomous Vehicle Safety Summary At Black Hat USA 2025 Zhisheng Hu, a product security engineer at Zoox, demonstrated using a fuzzing framework to probe teleoperation…
The Critical Flaw in CVE Scoring Summary Ofri Ouzan (JFrog Security) argues that headline CVE severities frequently misrepresent real-world risk. She highlights the sheer volume of disclosures (around 33,000 new…
Payback: ‘ShinyHunters’ Clocks Google via Salesforce Summary The ShinyHunters-associated group UNC6040 used social engineering and Salesforce-targeted techniques to steal corporate data from Google via its Salesforce instance. Google had earlier…
Citizen Lab Founder Flags Rise of US Authoritarianism Summary At Black Hat USA 2025, Ron Deibert, director and founder of the University of Toronto’s Citizen Lab, warned of a growing…
‘Samourai’ Cryptomixer Founders Plead Guilty to Money Laundering Summary Two senior executives behind the Samourai Wallet cryptocurrency mixing service have pleaded guilty to conspiracy for operating a money‑transmitting business that…
Privilege Escalation Issue in Amazon ECS Leads to IAM Hijacking Summary Research presented at Black Hat USA by Naor Haziz of Sweet Security describes an attack called “ECScape” that abuses…
Air France, KLM Alert Authorities of Data Breach Summary Air France and KLM disclosed a breach of a customer‑service platform that exposed customers’ personal information. The carriers say they quickly…
Silver Fox APT Blurs the Line Between Espionage & Cybercrime Summary Silver Fox is a versatile Chinese threat actor that mixes traditional espionage operations with clear cybercriminal activity. The group…
