Phishing Empire Runs Undetected on Google, Cloudflare Summary Researchers at Deep Specter Research uncovered a large-scale, multi-year phishing-as-a-service (PhaaS) operation that rode on public cloud infrastructure — primarily Google Cloud…
Czech Warning Highlights China Stealing User Data Summary The Czech Republic’s National Cyber and Information Security Agency (NÚKIB) issued an advisory warning that certain products and services are transferring system…
Sitecore Zero-Day Sparks New Round of ViewState Threats Summary A critical Sitecore zero‑day (CVE‑2025‑53690) is being actively exploited in ViewState deserialization attacks. Mandiant found attackers used a sample ASP.NET machineKey…
Windows starts asking for admin rights where it shouldn’t after security fix Summary Microsoft’s August 2025 security update patched CVE-2025-50173 by enforcing User Account Control (UAC) prompts for Windows Installer…
Attackers snooping around Sitecore, dropping malware via public sample keys Summary Unknown actors have been exploiting a configuration weakness in multiple Sitecore products to achieve remote code execution (RCE) by…
Boffins build automated Android bug hunting system Summary Researchers from Nanjing University and The University of Sydney have developed A2, an AI agent system that automates discovery and validation of…
Boffins Build Automated Android Bug Hunting System Summary Researchers from Nanjing University and the University of Sydney have developed A2, an AI-powered agent that automates discovery and validation of vulnerabilities…
Boffins Build Automated Android Bug Hunting System Summary Researchers from Nanjing University and the University of Sydney have developed A2, an AI-powered agent that automates discovery and validation of vulnerabilities…
Boffins Build Automated Android Bug Hunting System Summary Researchers from Nanjing University and the University of Sydney have developed an AI agent, dubbed A2, that automates discovery and validation of…
Proof-of-Concept in 15 Minutes? AI Turbocharges Exploitation Summary Two independent Israeli researchers built an automated offensive-research pipeline called Auto Exploit that uses LLM prompts, CVE advisories and open-source patches to…
