Embracing the Next Generation of Cybersecurity Talent
Embracing the Next Generation of Cybersecurity Talent Summary There is a severe global shortfall in cybersecurity labour — NIST estimates a 3.4 million gap — at a time when organisations…
Scammers Are Using Grok to Spread Malicious Links on X
Scammers Are Using Grok to Spread Malicious Links on X Summary Bad actors on X are exploiting Grok — X’s native AI assistant — to republish malicious links hidden in…
Proof-of-Concept in 15 Minutes? AI Turbocharges Exploitation
Proof-of-Concept in 15 Minutes? AI Turbocharges Exploitation Summary An AI-driven offensive research pipeline developed by two Israeli security researchers — Nahman Khayet and Efi Weiss — used prompts to a…
Secretive MaaS Group ‘TAG-150’ Develops Novel ‘CastleRAT’
Secretive MaaS Group ‘TAG-150’ Develops Novel ‘CastleRAT’ Summary Researchers have mapped a young malware-as-a-service (MaaS) cluster labelled TAG-150 that centres on a loader called CastleLoader (aka CastleBot) and new remote…
Anyone Using Agentic AI Needs to Understand Toxic Flows
Anyone Using Agentic AI Needs to Understand Toxic Flows Summary The article warns that the rush to deploy agentic AI across enterprises is creating a new class of cyber-resilience risks…
Scammers Are Using Grok to Spread Malicious Links on X
Scammers Are Using Grok to Spread Malicious Links on X Summary Bad actors on X are exploiting the platform’s AI assistant, Grok, to surface and repost hidden malicious links from…
Critical SAP S/4HANA Vulnerability Under Attack, Patch Now
Critical SAP S/4HANA Vulnerability Under Attack, Patch Now Summary A critical code-injection vulnerability (CVE-2025-42957) in SAP S/4HANA — rated 9.9 CVSS — is being exploited in the wild. The flaw…
Secretive MaaS Group ‘TAG-150’ Develops Novel ‘CastleRAT’
Secretive MaaS Group ‘TAG-150’ Develops Novel ‘CastleRAT’ Summary Researchers have tracked an emerging malware-as-a-service (MaaS) cluster centred on a loader called CastleLoader and an associated service dubbed CastleBot. The operation,…
How Has IoT Security Changed Over the Past 5 Years?
How Has IoT Security Changed Over the Past 5 Years? Summary Over the last five years IoT adoption has grown strongly across industries, but security progress has been incremental rather…
Anyone Using Agentic AI Needs to Understand Toxic Flows
Anyone Using Agentic AI Needs to Understand Toxic Flows Summary This article explains why organisations adopting agentic AI need to pay attention to “toxic flows” — risky combinations of agent…