Proof-of-Concept in 15 Minutes? AI Turbocharges Exploitation Summary An AI-driven offensive research pipeline built by two independent Israeli researchers — dubbed Auto Exploit — uses Large Language Models (notably Anthropic’s…
Hybrid Clouds Provide a Practical Approach to Post-Quantum Migration Summary Author Alex Zaslavsky (SafeLogic) explains a pragmatic way for organisations to begin post-quantum cryptography (PQC) migration by focusing on hybrid-cloud…
How Gray-Zone Hosting Companies Protect Data the US Wants Erased Summary Since early 2025, US-based clinics, activist groups, independent newsrooms and whistleblower platforms have been seeking overseas hosting to keep…
Czech Warning Highlights China Stealing User Data Summary The Czech Republic’s National Cyber and Information Security Agency (NÚKIB) issued a warning about products and services that transfer system and user…
Blast Radius of Salesloft Drift Attacks Remains Uncertain Summary A supply-chain compromise of Salesloft’s Drift product (Aug 8–18) allowed threat actors identified by Google as UNC6395 to steal OAuth and…
Why Threat Hunting Should Be Part of Every Security Program Summary Author Robert Lackey argues that threat hunting should be an integral part of every mature security programme because tools…
ISC2 Aims to Bridge DFIR Skill Gap with New Certificate Summary ISC2 has launched the Threat Handling Foundations Certificate — a four-course, hands-on certificate designed to bolster Digital Forensics and…
Phishing Empire Runs Undetected on Google, Cloudflare Summary Researchers at Deep Specter uncovered a multi-year, industrial-scale phishing-as-a-service (PhaaS) operation running largely unnoticed on Google Cloud and Cloudflare. The campaign hijacked…
Sitecore Zero-Day Sparks New Round of ViewState Threats Summary A critical zero-day (CVE-2025-53690) in Sitecore Experience Manager (XM), Experience Platform (XP) and Experience Commerce is being actively exploited in ViewState…
Bridgestone Americas Confirms Cyberattack Summary Bridgestone Americas confirmed a cyberattack that disrupted some manufacturing operations across North America. The company says it identified a limited cyber incident affecting certain facilities…
