Windows starts asking for admin rights where it shouldn’t after security fix Summary Microsoft’s August 2025 security update patched CVE-2025-50173 — an authentication issue in the Windows Installer that could…
Attackers snooping around Sitecore, dropping malware via public sample keys Summary Unknown actors have been exploiting a configuration weakness in multiple Sitecore products to achieve remote code execution by using…
Boffins build automated Android bug hunting system Summary Researchers from Nanjing University and The University of Sydney have built A2, an agentic AI system that automates discovery and validation of…
Knock-on effects of software dev break-in hit schools trust Summary Affinity Learning Partnership — a UK education trust running seven schools with about 650 staff and roughly 3,000 pupils —…
AI code assistants make developers more efficient at creating security problems Summary Application security firm Apiiro analysed tens of thousands of repositories and thousands of developers at Fortune 50 companies…
Hybrid Clouds Provide a Practical Approach to Post-Quantum Migration Summary This Tech Tip by Alex Zaslavsky (SafeLogic) explains a practical, low-disruption route to begin post-quantum cryptography (PQC) migration using hybrid-cloud…
Proof-of-Concept in 15 Minutes? AI Turbocharges Exploitation Summary An AI-driven offensive research pipeline developed by two independent Israeli researchers (dubbed Auto Exploit) uses LLM prompts, CVE advisories and open-source patches…
Blast Radius of Salesloft Drift Attacks Remains Uncertain Summary In August 2025 a threat actor later identified by Google as UNC6395 exploited Salesloft’s Drift product (attack window 8–18 Aug) to…
Why Threat Hunting Should Be Part of Every Security Program Summary Threat hunting is presented as a proactive mindset rather than a single job title: assume something may be wrong,…
How Grey-Zone Hosting Companies Protect Data the US Wants Erased Summary Since the 2025 US administration change, privacy-focused hosting firms such as FlokiNET and 1984 Hosting have seen a surge…
