Qantas penalises executives for July cyberattack Summary Senior leaders at Qantas have had their 2024/25 short-term bonuses reduced by 15 percentage points after a July cyberattack that exposed personal data…
CISA orders federal agencies to patch Sitecore zero-day following hacking reports Summary Federal civilian agencies have until 25 September to patch CVE-2025-53690, a Sitecore vulnerability tied to the reuse of…
Windows starts asking for admin rights where it shouldn’t after security fix Summary Microsoft’s August 2025 security update fixed CVE-2025-50173, an authentication flaw in the Windows Installer that could allow…
Attackers snooping around Sitecore, dropping malware via public sample keys Summary Unknown actors have been exploiting a configuration weakness in multiple Sitecore products — caused by publicly documented sample ASP.NET…
Boffins build automated Android bug hunting system Summary Researchers from Nanjing University and The University of Sydney have developed A2, an AI agent system that automates discovery and validation of…
AI code assistants make developers more efficient at creating security problems Summary Application security firm Apiiro analysed tens of thousands of repositories and several thousand developers (many tied to Fortune…
Knock-on effects of software dev break-in hit schools trust Summary A cyberattack on Hull-based software developer Intradev, detected on 4 August 2025, has rippled through the UK education sector after…
Critical, make-me-super-user SAP S/4HANA bug under active exploitation Summary A critical code‑injection vulnerability in SAP S/4HANA (CVE‑2025‑42957) rated 9.9 is being actively exploited, SecurityBridge researchers report. The flaw allows low‑privileged…
Shell to pay: Crims invade your PC with CastleRAT malware, now in C and Python Summary Security researchers at Recorded Future have identified two new variants of CastleRAT — one…
The crazy, true story behind the first AI-powered ransomware Summary NYU engineers built a proof-of-concept AI-driven ransomware (dubbed Ransomware 3.0) to explore whether large language models can carry out the…
