Proof-of-Concept in 15 Minutes? AI Turbocharges Exploitation Summary An AI-powered offensive research system, dubbed Auto Exploit and developed by two independent Israeli cybersecurity researchers, uses prompts to a large language…
Phishing Empire Runs Undetected on Google, Cloudflare Summary Researchers at Deep Specter uncovered a long-running, industrial-scale phishing-as-a-service (PhaaS) operation that ran undetected for more than three years on public cloud…
Czech Warning Highlights China Stealing User Data Summary The Czech Republic’s National Cyber and Information Security Agency (NÚKIB) has issued a warning about products and services that transfer system and…
Chinese Hackers Game Google to Boost Gambling Sites Summary A threat actor ESET calls “GhostRedirector” compromises Windows IIS web servers to deploy a native malicious IIS module (Gamshen) and a…
ISC2 Aims to Bridge DFIR Skill Gap with New Certificate Summary ISC2 has launched the Threat Handling Foundations Certificate — a four-course programme designed to close gaps in Digital Forensics…
Bridgestone Americas Confirms Cyberattack Summary Bridgestone Americas (BSA) confirmed a limited cyber incident that affected some of its North American manufacturing facilities. The company says business operations are continuing normally…
Sitecore Zero-Day Sparks New Round of ViewState Threats Summary A critical Sitecore zero-day (CVE-2025-53690) is being actively exploited in ViewState deserialization attacks. Mandiant reported attackers leveraged an exposed ASP.NET machine…
Summary Chess.com disclosed that 4,541 users had personal information exposed after attackers accessed a third-party file transfer application the company used between 5 and 18 June. The company discovered the…
Texas sues PowerSchool for breach exposing the data of students and teachers Summary The Texas attorney general, Ken Paxton, has sued education technology provider PowerSchool over a December 2024 data…
Ukraine’s cyber chief on Russian hackers’ shifting tactics, US cyber aid Summary Oleksandr Potii, head of Ukraine’s State Service of Special Communications and Information Protection (SSSCIP), describes how Russia’s cyber…
