The crazy, true story behind the first AI-powered ransomware Summary A New York University research team built a proof-of-concept they call Ransomware 3.0 that uses large language models to automate…
Anyone Using Agentic AI Needs to Understand Toxic Flows Summary This Dark Reading piece explains why “toxic flows” are an urgent risk category for organisations deploying agentic AI. Agentic systems…
Summary An AI-powered offensive research system, dubbed Auto Exploit, was built by two independent Israeli cybersecurity researchers and used Anthropic’s Claude-sonnet-4.0 to analyse CVE advisories and code patches, generate vulnerable…
How Has IoT Security Changed Over the Past 5 Years? Summary Over the last five years IoT adoption has accelerated across industries, but security improvements have been modest. The article…
Windows starts asking for admin rights where it shouldn’t after security fix Summary Microsoft’s August 2025 Windows Security Update fixed CVE-2025-50173, an authentication issue in Windows Installer that could let…
Microsoft inches toward Rusty Windows drivers, production use still a no-no Summary Microsoft is making steady, if cautious, progress towards enabling Windows driver development in Rust. New crates now support…
Attackers snooping around Sitecore, dropping malware via public sample keys Summary Unknown actors have exploited a configuration weakness in multiple Sitecore products to achieve remote code execution using publicly documented…
Boffins build automated Android bug hunting system Summary Researchers from Nanjing University and The University of Sydney have built A2, an AI agent system that finds and self-validates vulnerabilities in…
AI code assistants make developers more efficient at creating security problems Summary Application security vendor Apiiro analysed tens of thousands of repositories and several thousand developers at Fortune 50 firms…
Knock-on effects of software dev break-in hit schools trust Summary A UK education trust, Affinity Learning Partnership, has warned staff that their personal information may have been exposed after a…
