Hybrid Clouds Provide a Practical Approach to Post-Quantum Migration Summary This Tech Tip from Dark Reading explains a practical, low-disruption route to post-quantum cryptography (PQC) by hardening TLS in hybrid-cloud…
Proof-of-Concept in 15 Minutes? AI Turbocharges Exploitation Summary An AI-driven offensive research pipeline, dubbed Auto Exploit, has been shown to generate working proof-of-concept (PoC) exploits for open-source vulnerabilities in minutes.…
Why Threat Hunting Should Be Part of Every Security Program Summary Author Robert Lackey argues that threat hunting must be baked into mature security programmes because attackers frequently slip past…
How Gray-Zone Hosting Companies Protect Data the US Wants Erased Summary This article examines an uptick in US-based individuals and organisations moving sensitive websites and data to so-called “gray-zone” hosting…
Phishing Empire Runs Undetected on Google, Cloudflare Summary Researchers at Deep Specter uncovered a multi-year, industrial-scale phishing-as-a-service (PhaaS) operation that abused public cloud infrastructure—primarily Google Cloud and Cloudflare—to host cloned…
Czech Warning Highlights China Stealing User Data Summary The Czech Republic’s National Cyber and Information Security Agency (NÚKIB) issued a warning that certain products and services are transferring system and…
Blast Radius of Salesloft Drift Attacks Remains Uncertain Summary Between 8–18 Aug 2025, threat actor UNC6395 breached the Drift marketing SaaS (used by Salesloft) and stole OAuth and refresh tokens…
ISC2 Aims to Bridge DFIR Skill Gap with New Certificate Summary ISC2 has launched the Threat Handling Foundations Certificate — a four-course programme designed to strengthen Digital Forensics and Incident…
Chinese Hackers Game Google to Boost Gambling Sites Summary A cybercrime operation tracked by ESET as “GhostRedirector” is compromising Windows web servers and installing a malicious native IIS module (Gamshen)…
Sitecore Zero-Day Sparks New Round of ViewState Threats Summary A critical zero-day (CVE-2025-53690) in Sitecore components (Experience Manager, Experience Platform and Experience Commerce) is being actively exploited via ViewState deserialization…
