Chess.com says 4,500 people had data stolen during June breach Summary Chess.com disclosed that an unauthorised actor accessed data stored in a third-party file transfer application used by the platform…
Texas sues PowerSchool for breach exposing the data of students and teachers Summary The Texas attorney general, Ken Paxton, has filed suit against education‑tech provider PowerSchool over a December 2024…
Windows starts asking for admin rights where it shouldn’t after security fix Summary Microsoft’s August 2025 security update fixed CVE-2025-50173 — an authentication flaw in Windows Installer that could let…
Attackers snooping around Sitecore, dropping malware via public sample keys Summary Unknown actors are exploiting a configuration weakness in Sitecore deployments that reuse publicly documented sample ASP.NET machine keys. When…
Boffins build automated Android bug hunting system Summary Researchers from Nanjing University and The University of Sydney have developed A2, an AI agentic system that automates discovery and validation of…
Proof-of-Concept in 15 Minutes? AI Turbocharges Exploitation Summary Two independent Israeli researchers built an automated offensive research pipeline (dubbed Auto Exploit) that leverages LLM prompts, CVE advisories and open-source patches…
Proof-of-Concept in 15 Minutes? AI Turbocharges Exploitation Summary An AI-powered offensive research system developed by two Israeli security researchers uses LLM prompts, CVE advisories and open-source patches to automatically generate…
Summary Robert Lackey argues that threat hunting should be a standard practice in every mature security programme. Rather than waiting for alerts, threat hunting is a proactive mindset: assume something…
How Gray-Zone Hosting Companies Protect Data the US Wants Erased Summary This article examines a growing niche of “gray-zone” web hosting providers that offer refuge to organisations and individuals who…
Hybrid Clouds Provide a Practical Approach to Post-Quantum Migration Summary The article explains a pragmatic path to post-quantum cryptography (PQC) migration by leveraging hybrid-cloud architectures. It highlights that while full…
