Boffins build automated Android bug hunting system Summary Researchers from Nanjing University and The University of Sydney have created A2, an AI agent system that automates discovery and validation of…
AI code assistants make developers more efficient at creating security problems Summary Application security firm Apiiro analysed tens of thousands of repositories and several thousand developers at Fortune 50 organisations…
Knock-on effects of software dev break-in hit schools trust Summary A cyberattack on Hull-based software developer Intradev in early August has had downstream effects on UK schools. Affinity Learning Partnership…
Firefox ESR 115 won’t quit Windows 7 – at least not until March 2026 Summary Mozilla has extended security support for Firefox ESR 115 on Windows 7, 8 and 8.1…
Critical, make-me-super-user SAP S/4HANA bug under active exploitation Summary A critical code-injection vulnerability in SAP S/4HANA (CVE-2025-42957) with a 9.9 severity rating is being actively exploited in the wild, according…
Proof-of-Concept in 15 Minutes? AI Turbocharges Exploitation Summary An AI-driven offensive research pipeline, dubbed Auto Exploit and developed by two independent Israeli security researchers, uses LLM prompts, CVE advisories and…
Anyone Using Agentic AI Needs to Understand Toxic Flows Summary This Dark Reading piece (Ericka Chickowski) warns that organisations racing to deploy agentic AI must pay attention to “toxic flows”…
Critical, make-me-super-user SAP S/4HANA bug under active exploitation Summary A critical code-injection vulnerability in SAP S/4HANA (CVE-2025-42957) with a 9.9 rating is being actively exploited, according to SecurityBridge Threat Research…
Proof-of-Concept in 15 Minutes? AI Turbocharges Exploitation Summary An AI-powered offensive research pipeline built by two independent Israeli researchers — dubbed Auto Exploit — used LLM prompts, CVE advisories and…
Russia’s APT28 Targets Microsoft Outlook With ‘NotDoor’ Malware Summary Researchers at Lab52 (S2 Grupo) have identified a new Outlook VBA backdoor dubbed “NotDoor” used by APT28 (Fancy Bear). NotDoor is…
