Proof-of-Concept in 15 Minutes? AI Turbocharges Exploitation Summary An Israeli research duo built an automated offensive research pipeline, dubbed Auto Exploit, that uses prompts to a large language model (Anthropic’s…
Why Threat Hunting Should Be Part of Every Security Program Content summary Robert Lackey argues that threat hunting must be an integral part of any mature security programme because attackers…
How Gray-Zone Hosting Companies Protect Data the US Wants Erased Summary Since early 2025, a rise in US-based requests has driven at-risk organisations — abortion clinics, civil-rights groups, independent newsrooms…
Hybrid Clouds Provide a Practical Approach to Post-Quantum Migration Summary This Tech Tip by Alex Zaslavsky (SafeLogic) explains a practical, low-disruption route for organisations to begin migrating to post-quantum cryptography…
UltraViolet Expands AppSec Capabilities With Black Duck’s Testing Business Summary UltraViolet Cyber has acquired Black Duck’s Application Security Testing (AST) services business, adding penetration testing, red teaming, threat modelling, cloud…
Czech Warning Highlights China Stealing User Data Summary The Czech Republic’s National Cyber and Information Security Agency (NÚKIB) has issued an advisory warning that certain products and services transmit system…
ISC2 Aims to Bridge DFIR Skills Gap With New Certificate Summary ISC2 has launched the Threat Handling Foundations Certificate, a four-course programme designed to strengthen digital forensics and incident response…
Phishing Empire Runs Undetected on Google, Cloudflare Summary Researchers at Deep Specter Research uncovered a multi-year, industrial-scale phishing-as-a-service (PhaaS) operation that ran largely undetected on Google Cloud and Cloudflare. The…
Sitecore Zero-Day Sparks New Round of ViewState Threats Summary A critical Sitecore zero-day (CVE-2025-53690) is being exploited in live ViewState deserialization attacks. The flaw affects Sitecore Experience Manager (XM), Experience…
Bridgestone Americas Confirms Cyberattack Summary Bridgestone Americas (BSA) has confirmed a limited cyber incident that affected some manufacturing facilities in North America. Reports say one tyre plant in Joliette, Quebec,…
