Month: September 2025

Proof-of-Concept in 15 Minutes? AI Turbocharges Exploitation Summary An Israeli research duo developed an automated pipeline, dubbed Auto Exploit, that leverages a large language model (Anthropic’s Claude-sonnet-4.0), CVE advisories and…

Czech Warning Highlights China Stealing User Data Summary The Czech Republic’s National Cyber and Information Security Agency (NÚKIB) issued an advisory warning that certain products and services are transferring system…

Phishing Empire Runs Undetected on Google, Cloudflare Summary Researchers at Deep Specter uncovered a large-scale phishing-as-a-service (PhaaS) operation that ran undetected for more than three years using Google Cloud and…

ISC2 Aims to Bridge DFIR Skill Gap with New Certificate Summary ISC2 has launched the Threat Handling Foundations Certificate — a four-course programme aimed at strengthening Digital Forensics and Incident…

Chinese Hackers Game Google to Boost Gambling Sites Summary A cybercrime operation tracked by ESET as “GhostRedirector” has been compromising Windows web servers to install malware and a malicious native…

Bridgestone Americas Confirms Cyberattack Summary Bridgestone Americas (BSA) has confirmed a cyberattack that affected some of its manufacturing facilities in North America. The company describes the incident as limited and…

Sitecore Zero-Day Sparks New Round of ViewState Threats Summary A critical zero-day (CVE-2025-53690) in Sitecore products (Experience Manager, Experience Platform and Experience Commerce) is being actively exploited via ViewState deserialization…

Ukraine’s cyber chief on Russian hackers’ shifting tactics, US cyber aid Summary When Oleksandr Potii became head of Ukraine’s State Service of Special Communications and Information Protection (SSSCIP) in November,…

Texas sues PowerSchool for breach exposing the data of students and teachers Summary The state of Texas has filed suit against education‑technology provider PowerSchool over a December 2024 data breach…