China-aligned crew poisons Windows servers to manipulate Google results Summary Security researchers at ESET have uncovered a China-aligned cybercrime group dubbed GhostRedirector that has compromised at least 65 Windows servers…
Boffins build automated Android bug hunting system Summary Researchers from Nanjing University and The University of Sydney have built A2, an AI agentic system that automates discovery and validation of…
Attackers snooping around Sitecore, dropping malware via public sample keys Summary Unknown actors exploited a configuration weakness in multiple Sitecore products (XM, XP, XC and Managed Cloud) by using publicly…
Knock-on effects of software dev break-in hit schools trust Summary Affinity Learning Partnership — a UK education trust running seven schools and employing over 650 staff — has warned employees…
Boffins Build Automated Android Bug Hunting System Summary Researchers from Nanjing University and the University of Sydney have created an AI-powered agent, dubbed A2, that automates discovery and validation of…
Critical, make-me-super-user SAP S/4HANA bug under active exploitation Summary A critical ABAP code-injection vulnerability in SAP S/4HANA (CVE-2025-42957) is being actively exploited. Rated 9.9, the flaw lets low-privileged users inject…
The crazy, true story behind the first AI-powered ransomware Summary Researchers at New York University built a proof-of-concept AI-driven ransomware system — dubbed in their paper as Ransomware 3.0 —…
Shell to pay: Crims invade your PC with CastleRAT malware, now in C and Python Key Points • CastleRAT now exists in two builds: a feature-rich C variant and a…
Summary Researchers from Nanjing University and the University of Sydney have developed an AI-powered agent, dubbed A2, that automates discovery and validation of vulnerabilities in Android apps. Building on earlier…
Summary An Israeli research duo built an AI-driven pipeline, dubbed Auto Exploit, that uses LLM prompts (Anthropic’s Claude-sonnet-4.0), CVE advisories and open-source patches to generate vulnerable test applications and proof-of-concept…
