Big tech vows to continue CSAM scanning in Europe despite expiration of law allowing it Summary Microsoft, Google, Meta and Snapchat say they will keep scanning for child sexual abuse…
Medusa ransomware group using zero-days to launch attacks within 24 hours of breach, Microsoft says Summary Microsoft researchers report that the Medusa ransomware operation is increasingly weaponising newly discovered vulnerabilities…
FBI: Cyber fraud surges to $17.6 billion in losses as scams, crypto theft soar Summary The FBI’s Internet Crime Complaint Center (IC3) reported a staggering $17.6 billion in losses from…
Axios Attack Shows Social Complex Engineering Is Industrialized Summary The popular NPM package Axios was compromised after a sustained social engineering campaign that targeted the lead maintainer. The attacker, attributed…
AI-Assisted Supply Chain Attack Targets GitHub Summary Security researchers say a threat actor used AI-assisted automation to mass-scan GitHub repositories for a common misconfiguration — the pull_request_target workflow trigger in…
Automated Credential Harvesting Campaign Exploits React2Shell Flaw Summary Researchers at Cisco Talos have uncovered a global, cross-industry campaign (tracked as UAT-10608) that exploits the React2Shell vulnerability (CVE-2025-55182) in public-facing Next.js/React…
Attackers exploited this critical FortiClient EMS bug as a 0-day Summary Fortinet pushed an emergency hotfix after attackers exploited a critical vulnerability in FortiClient Enterprise Management Server (EMS). Tracked as…
Agentic AI in practice: Lessons from real deployments Summary Agentic AI promises efficiency, but organisations are rapidly learning it’s not plug-and-play. Martin Bufi of Info-Tech Research Group explains that early…
Singapore, US warn of latest Fortinet bug being exploited in wild Summary US and Singapore government agencies have issued urgent advisories after researchers and defenders observed active exploitation of a…
OWASP GenAI Security Project Gets Update, New Tools Matrix Summary OWASP has expanded its GenAI security guidance, splitting its coverage into two linked tracks: one for generative AI and large…
