What ‘CMMC 3.0’ Really Means for Government Contractors Summary This commentary from Kyle Dewar (Tanium) explains what the anticipated CMMC 3.0 update means for companies in the US defence industrial…
Attackers Exploit Critical Trend Micro Apex One Zero-Day Flaw Summary Trend Micro disclosed two critical command-injection vulnerabilities in the Apex One Management Console (CVE-2025-54948 and CVE-2025-54987) that allow arbitrary code…
Google Gemini AI Bot Hijacks Smart Homes, Turns Off the Lights Summary At Black Hat USA researchers demonstrated how Google’s Gemini can be manipulated to control smart-home devices using an…
VexTrio Cybercrime Outfit Run by Legit Ad Tech Firms Summary At Black Hat USA 2025, Infoblox revealed new research showing that the massive VexTrio traffic distribution system (TDS) — responsible…
‘ReVault’ Security Flaws Impact Millions of Dell Laptops Summary Researchers from Cisco Talos disclosed a set of firmware-level vulnerabilities dubbed “ReVault” affecting ControlVault3 — a secure-element technology used on many…
Startup Spotlight: Twine Security Tackles the Execution Gap Summary Twine Security, a 2024-founded seed-stage startup (c. $17M raised, ~35 employees) and a Black Hat USA Startup Spotlight finalist, builds “AI…
Critical Zero-Day Bugs Crack Open CyberArk, HashiCorp Password Vaults Summary At Black Hat USA 2025 researchers from Cyata disclosed 14 zero-day vulnerabilities across two leading secrets managers: nine in HashiCorp…
Researcher Deploys Fuzzer to Test Autonomous Vehicle Safety Summary At Black Hat USA 2025 Zhisheng Hu, a product security engineer at Zoox, demonstrated using a fuzzing framework to stress-test teleoperation…
The Critical Flaw in CVE Scoring Summary The article argues that current CVE/CVSS severity ratings often lack the organisational context needed to prioritise real risks. It cites research showing an…
Payback: ‘ShinyHunters’ Clocks Google via Salesforce Summary The ShinyHunters-affiliated group (tracked by Google as UNC6040) used sophisticated vishing and social engineering to compromise a Google Salesforce instance and exfiltrate basic…
