Qantas penalises executives for July cyberattack Summary Qantas has reduced short-term bonuses for its senior executives by 15 percentage points after a July cyberattack that exposed the personal information of…
CISA orders federal agencies to patch Sitecore zero-day following hacking reports Summary On 4–5 September 2025 CISA added CVE-2025-53690 to its Known Exploited Vulnerabilities catalogue and ordered all federal civilian…
Knock-on effects of software dev break-in hit schools trust Summary A cyberattack on Hull-based software developer Intradev in early August has led to personal data exposures for staff at several…
Proof-of-Concept in 15 Minutes? AI Turbocharges Exploitation Summary An Israeli research duo built an automated offensive pipeline, dubbed Auto Exploit, that uses LLM prompts, CVE advisories and open-source patches to…
Summary The article explains a pragmatic route organisations can take to begin migrating to post-quantum cryptography (PQC) with minimal disruption by focusing on hybrid-cloud TLS channels. It argues that while…
Proof-of-Concept in 15 Minutes? AI Turbocharges Exploitation Summary An AI-driven offensive research pipeline developed by two independent Israeli researchers (dubbed Auto Exploit) uses prompts to a large language model, CVE…
Blast Radius of Salesloft Drift Attacks Remains Uncertain Summary Security researchers and several affected vendors are still assessing how extensive the damage is from the Salesloft Drift supply-chain incident. Between…
Why Threat Hunting Should Be Part of Every Security Program Summary This commentary by Robert Lackey argues that threat hunting should be an integral part of every mature security programme.…
How Gray-Zone Hosting Companies Protect Data the US Wants Erased Summary Since the new US administration took office in early 2025, privacy-focused “gray-zone” hosting firms such as FlokiNET and 1984…
Phishing Empire Runs Undetected on Google, Cloudflare Summary Researchers at Deep Specter uncovered a multi-year, industrial-scale phishing-as-a-service (PhaaS) operation that rode public cloud infrastructure — largely Google Cloud and, more…
