Phishing Empire Runs Undetected on Google, Cloudflare Summary Researchers at Deep Specter Research uncovered a multi-year, industrial-scale phishing-as-a-service (PhaaS) operation that ran largely unnoticed on major cloud platforms, primarily Google…
ISC2 Aims to Bridge DFIR Skills Gap With New Certificate Summary The nonprofit certification body ISC2 has launched the Threat Handling Foundations Certificate, a four-course, hands-on programme designed to strengthen…
Sitecore Zero-Day Sparks New Round of ViewState Threats Summary A critical zero-day, tracked as CVE-2025-53690, is being actively exploited in Sitecore deployments (XM, XP, Experience Commerce) via a ViewState deserialization…
Federal Cuts Put Local, State Agencies at Cyber-Risk Summary Federal budget and staffing cuts to organisations such as CISA and the centres that house MS-ISAC and EI-ISAC are hitting state…
Anthropic Agrees to Pay Authors at Least $1.5 Billion in AI Copyright Settlement Summary Anthropic has agreed to a settlement that will require it to pay at least $1.5 billion…
Embracing the Next Generation of Cybersecurity Talent Summary There is a severe global shortfall in cybersecurity labour — NIST estimates a 3.4 million gap — at a time when organisations…
Scammers Are Using Grok to Spread Malicious Links on X Summary Bad actors on X are exploiting Grok — X’s native AI assistant — to republish malicious links hidden in…
Proof-of-Concept in 15 Minutes? AI Turbocharges Exploitation Summary An AI-driven offensive research pipeline developed by two Israeli security researchers — Nahman Khayet and Efi Weiss — used prompts to a…
Secretive MaaS Group ‘TAG-150’ Develops Novel ‘CastleRAT’ Summary Researchers have mapped a young malware-as-a-service (MaaS) cluster labelled TAG-150 that centres on a loader called CastleLoader (aka CastleBot) and new remote…
Anyone Using Agentic AI Needs to Understand Toxic Flows Summary The article warns that the rush to deploy agentic AI across enterprises is creating a new class of cyber-resilience risks…
