Should AI Get Legal Rights?
Should AI Get Legal Rights? Summary WIRED’s piece explores the emerging field of “model welfare” — research that asks whether advanced AI models could ever be conscious and, if so,…
Hybrid Clouds Provide a Practical Approach to Post-Quantum Migration
Hybrid Clouds Provide a Practical Approach to Post-Quantum Migration Summary This Tech Tip from Dark Reading explains a practical, low-disruption route to post-quantum cryptography (PQC) by hardening TLS in hybrid-cloud…
Proof-of-Concept in 15 Minutes? AI Turbocharges Exploitation
Proof-of-Concept in 15 Minutes? AI Turbocharges Exploitation Summary An AI-driven offensive research pipeline, dubbed Auto Exploit, has been shown to generate working proof-of-concept (PoC) exploits for open-source vulnerabilities in minutes.…
Why Threat Hunting Should Be Part of Every Security Program
Why Threat Hunting Should Be Part of Every Security Program Summary Author Robert Lackey argues that threat hunting must be baked into mature security programmes because attackers frequently slip past…
How Gray-Zone Hosting Companies Protect Data the US Wants Erased
How Gray-Zone Hosting Companies Protect Data the US Wants Erased Summary This article examines an uptick in US-based individuals and organisations moving sensitive websites and data to so-called “gray-zone” hosting…
Phishing Empire Runs Undetected on Google, Cloudflare
Phishing Empire Runs Undetected on Google, Cloudflare Summary Researchers at Deep Specter uncovered a multi-year, industrial-scale phishing-as-a-service (PhaaS) operation that abused public cloud infrastructure—primarily Google Cloud and Cloudflare—to host cloned…
Czech Warning Highlights China Stealing User Data
Czech Warning Highlights China Stealing User Data Summary The Czech Republic’s National Cyber and Information Security Agency (NÚKIB) issued a warning that certain products and services are transferring system and…
Blast Radius of Salesloft Drift Attacks Remains Uncertain
Blast Radius of Salesloft Drift Attacks Remains Uncertain Summary Between 8–18 Aug 2025, threat actor UNC6395 breached the Drift marketing SaaS (used by Salesloft) and stole OAuth and refresh tokens…
Chinese Hackers Game Google to Boost Gambling Sites
Chinese Hackers Game Google to Boost Gambling Sites Summary A cybercrime operation tracked by ESET as “GhostRedirector” is compromising Windows web servers and installing a malicious native IIS module (Gamshen)…
ISC2 Aims to Bridge DFIR Skill Gap with New Certificate
ISC2 Aims to Bridge DFIR Skill Gap with New Certificate Summary ISC2 has launched the Threat Handling Foundations Certificate — a four-course programme designed to strengthen Digital Forensics and Incident…