Google hit with $425 million verdict in privacy class action suit Summary A federal jury awarded US plaintiffs $425 million after finding that Google collected and used data from mobile…
Chess.com says 4,500 people had data stolen during June breach Summary Chess.com says attackers accessed customer data stored in a third‑party file transfer application between 5 and 18 June. The…
Microsoft inches toward Rusty Windows drivers, production use still a no-no Summary Microsoft and contributors are making gradual progress enabling Rust for Windows driver development, with new crates, tooling and…
Windows starts asking for admin rights where it shouldn’t after security fix Summary Microsoft’s August 2025 security update fixed CVE-2025-50173 by enforcing User Account Control (UAC) prompts for Windows Installer…
Attackers snooping around Sitecore, dropping malware via public sample keys Summary Unknown attackers have been exploiting a configuration weakness in multiple Sitecore products by using publicly documented sample ASP.NET machine…
Boffins build automated Android bug hunting system Summary Computer scientists from Nanjing University and The University of Sydney have developed A2, an AI agent system that automates discovery and validation…
AI code assistants make developers more efficient at creating security problems Summary Application security vendor Apiiro analysed tens of thousands of repositories and several thousand developers at Fortune 50 firms…
Proof-of-Concept in 15 Minutes? AI Turbocharges Exploitation Summary Two independent Israeli cybersecurity researchers built an AI-driven offensive research pipeline that uses LLM prompts, CVE advisories and code patches to generate…
Windows starts asking for admin rights where it shouldn’t after security fix Summary Microsoft’s August 2025 security update patched CVE-2025-50173 — an authentication flaw in Windows Installer that could allow…
Attackers snooping around Sitecore, dropping malware via public sample keys Summary Multiple Sitecore products are potentially exposed to remote code execution because some deployments still use public “sample” ASP.NET machine…
