Secretive MaaS Group ‘TAG-150’ Develops Novel ‘CastleRAT’ Summary Researchers have uncovered a stealthy malware-as-a-service (MaaS) operation tracked as TAG-150 that is distributing a loader (CastleLoader) and a custom remote access…
Anyone Using Agentic AI Needs to Understand Toxic Flows Summary This Dark Reading piece explains why organisations deploying agentic (autonomous) AI must recognise and mitigate “toxic flows” — hazardous interactions…
Critical SAP S/4HANA Vulnerability Under Attack, Patch Now Summary A critical code-injection vulnerability in SAP S/4HANA (CVE-2025-42957) — rated CVSS 9.9 — is being exploited in the wild. The flaw…
First CRISPR horses spark controversy: what’s next for gene-edited animals? Summary Scientists in Buenos Aires have produced the first horses with CRISPR–Cas9 edits to the myostatin gene, aiming to boost…
Nature goes inside the world’s largest ‘mosquito factory’ — here’s the buzz Summary The Nature Podcast Extra visits a large facility in Brazil that raises millions of Aedes mosquitoes each…
Bot shots: US Army enlists AI startup to provide target-tracking Summary The US Army has awarded San Francisco startup TurbineOne a five-year contract worth up to $98.9m to scale its…
Critical, make-me-super-user SAP S/4HANA bug under active exploitation Summary A critical code-injection vulnerability in SAP S/4HANA (CVE-2025-42957) rated 9.9 is being actively exploited. SecurityBridge Threat Research Labs reported observed abuse…
HHS warns US health care industry to share data with patients or else Summary The US Department of Health and Human Services (HHS) has announced it will take an “active…
Shell to pay: Crims invade your PC with CastleRAT malware, now in C and Python Summary A criminal crew known as TAG-150 has released two variants of CastleRAT — one…
The crazy, true story behind the first AI-powered ransomware Summary A team of NYU engineers developed a proof-of-concept they call Ransomware 3.0 to test whether large language models (LLMs) can…
