Phishing Empire Runs Undetected on Google, Cloudflare Summary Researchers at Deep Specter Research uncovered a multi-year, industrial-scale phishing-as-a-service (PhaaS) operation that ran largely undetected on Google Cloud and Cloudflare. The…
ISC2 Aims to Bridge DFIR Skills Gap With New Certificate Summary ISC2 has launched the Threat Handling Foundations Certificate, a four-course programme designed to strengthen digital forensics and incident response…
Chinese Hackers Game Google to Boost Gambling Sites Summary A pro cybercrime group tracked by ESET as “GhostRedirector” has been compromising Windows web servers and installing a malicious native IIS…
Bridgestone Americas Confirms Cyberattack Summary Bridgestone Americas (BSA) has confirmed a limited cyber incident that affected some manufacturing facilities in North America. Reports say one tyre plant in Joliette, Quebec,…
Sitecore Zero-Day Sparks New Round of ViewState Threats Summary A critical Sitecore zero-day (CVE-2025-53690) is being exploited in live ViewState deserialization attacks. The flaw affects Sitecore Experience Manager (XM), Experience…
Federal Cuts Put Local, State Agencies at Cyber-Risk Summary State and local governments are being targeted by cybercriminals and nation-state actors at a time when federal cyber resources and staffing…
Embracing the Next Generation of Cybersecurity Talent Summary This commentary argues that student-run security operations centres (SOCs) offer a practical, scalable way to close the global cybersecurity skills gap. Using…
Scammers Are Using Grok to Spread Malicious Links on X Summary Bad actors have developed a method — dubbed “grokking” — that leverages X’s native AI assistant, Grok, to surface…
Secretive MaaS Group ‘TAG-150’ Develops Novel ‘CastleRAT’ Summary Researchers have identified a young malware-as-a-service (MaaS) operation labelled TAG-150 that centres on a loader dubbed CastleLoader and a broader service called…
Anyone Using Agentic AI Needs to Understand Toxic Flows Summary This article explains why ‘toxic flows’ are an emerging security risk within agentic AI deployments. Agentic AI — systems that…
