With Eyes on AI, African Orgs Push Security Awareness Summary Against a fast-growing AI opportunity, many African organisations run cybersecurity awareness training but lack confidence that it works — especially…
Phishers Abuse Microsoft 365 to Spoof Internal Users Summary Cybercriminals are exploiting Microsoft 365’s Direct Send feature to send phishing emails that appear to come from internal users. The technique…
What ‘CMMC 3.0’ Really Means for Government Contractors Summary The Department of Defense’s next iteration, commonly called CMMC 3.0, builds on CMMC 2.0 rather than replacing it. The update keeps…
Attackers Exploit Critical Trend Micro Apex One Zero-Day Flaw Summary Trend Micro has disclosed two critical zero-day command injection vulnerabilities (CVE-2025-54948 and CVE-2025-54987) in the Apex One management console for…
Startup Spotlight: Twine Security Tackles the Execution Gap Summary Twine Security, founded in 2024 and backed with seed funding totalling about $17M, is a Black Hat USA Startup Spotlight finalist.…
Payback: ‘ShinyHunters’ Clocks Google via Salesforce Summary The ShinyHunters-linked group tracked as UNC6040 used sophisticated vishing and social engineering to compromise Google via its Salesforce instance. Google had earlier published…
Citizen Lab Founder Flags Rise of US Authoritarianism Summary The Citizen Lab’s founder, Ron Deibert, spoke at Black Hat USA 2025 about a growing “vicious cycle” of digital human-rights abuses…
‘Samourai’ Cryptomixer Founders Plead Guilty to Money Laundering Summary Two senior executives and founders of the Samourai Wallet cryptocurrency mixer — CEO Keonne Rodriguez and CTO William Lonergan Hill —…
Privilege Escalation Issue in Amazon ECS Leads to IAM Hijacking Summary At Black Hat USA, Naor Haziz of Sweet Security revealed “ECScape”, a technique that abuses an undocumented Agent Communication…
Air France, KLM Alert Authorities of Data Breach Summary News brief: Air France and KLM disclosed that threat actors breached a customer service platform and exfiltrated personal data. The airlines…
