Chinese Hackers Game Google to Boost Gambling Sites Summary A China-linked cybercrime operation tracked as “GhostRedirector” compromises Windows IIS web servers to deploy a native IIS module (Gamshen) and a…
Ukraine’s cyber chief on Russian hackers’ shifting tactics, US cyber aid Summary Oleksandr Potii, head of Ukraine’s State Service of Special Communications and Information Protection (SSSCIP), describes how Russian cyber…
Chess.com says 4,500 people had data stolen during June breach Summary Chess.com notified regulators in Maine and Vermont that 4,541 people had personal information exposed after attackers breached a third-party…
Texas sues PowerSchool for breach exposing the data of students and teachers Summary Texas Attorney General Ken Paxton has filed suit against education‑technology provider PowerSchool over a December 2024 data…
Enterprises sticking with Windows 10 could shell out billions for continued support Summary Free mainstream support for many editions of Windows 10 ends on 14 October 2025. IT visibility vendor…
Windows starts asking for admin rights where it shouldn’t after security fix Summary Microsoft’s August 2025 Security Update patched CVE-2025-50173 — an authentication issue in Windows Installer that could let…
Boffins build automated Android bug hunting system Summary Researchers from Nanjing University and The University of Sydney have built A2, an agentic AI system that automates discovery and validation of…
Attackers snooping around Sitecore, dropping malware via public sample keys Summary Unknown threat actors have been exploiting publicly documented ASP.NET machine (ViewState) sample keys used in older Sitecore deployment guides…
Proof-of-Concept in 15 Minutes? AI Turbocharges Exploitation Summary An Israeli research duo built an AI-driven offensive pipeline called Auto Exploit that turns CVE advisories, code patches and prompts to a…
Phishing Empire Runs Undetected on Google, Cloudflare Summary Researchers at Deep Specter uncovered what they describe as a multi-year, industrial-scale phishing-as-a-service (PhaaS) operation that rode public cloud infrastructure — primarily…
