CISA orders federal agencies to patch Sitecore zero-day following hacking reports Summary Federal civilian agencies have until 25 September to patch CVE-2025-53690 in Sitecore after incident responders disrupted an attack…
Shell to pay: Crims invade your PC with CastleRAT malware, now in C and Python Summary A criminal crew known as TAG-150 has released CastleRAT in two flavours: a stealthy…
Critical, make-me-super-user SAP S/4HANA bug under active exploitation Summary A critical code-injection vulnerability in SAP S/4HANA (CVE-2025-42957) with a 9.9 CVSS rating is being actively exploited. The flaw allows low-privileged…
The crazy, true story behind the first AI-powered ransomware Summary One week of research by New York University engineers produced a proof‑of‑concept called Ransomware 3.0: an AI system that automates…
Boffins Build Automated Android Bug Hunting System Summary Researchers from Nanjing University and the University of Sydney have created A2, an AI-powered agent that automates discovery and validation of vulnerabilities…
Proof-of-Concept in 15 Minutes? AI Turbocharges Exploitation Summary An AI-powered offensive research pipeline built by two independent Israeli security researchers (Nahman Khayet and Efi Weiss) used prompts to a large…
Boffins Build Automated Android Bug Hunting System Summary Researchers at Nanjing University and the University of Sydney have developed A2, an AI-powered agent that mimics human vulnerability discovery for Android…
Federal Cuts Put Local, State Agencies at Cyber-Risk Summary Dark Reading reports that a wave of ransomware and other cyberattacks has hit state and local governments just as federal cybersecurity…
UltraViolet Expands AppSec Capabilities With Black Duck’s Testing Business Summary UltraViolet Cyber has acquired the Application Security Testing (AST) services arm of Black Duck, adding penetration testing, red teaming, threat…
Proof-of-Concept in 15 Minutes? AI Turbocharges Exploitation Summary An AI-powered offensive research pipeline, dubbed Auto Exploit and built by two Israeli researchers, uses prompts to a large language model (Anthropic’s…
