Attackers snooping around Sitecore, dropping malware via public sample keys Summary Unknown actors have been exploiting a configuration weakness in multiple Sitecore products to achieve remote code execution by using…
Boffins build automated Android bug hunting system Summary Researchers from Nanjing University and The University of Sydney have built A2, an agentic AI system that automates discovery and validation of…
Proof-of-Concept in 15 Minutes? AI Turbocharges Exploitation Summary An Israeli research duo built an AI-driven pipeline, dubbed Auto Exploit, that uses LLM prompts, CVE advisories and public patches to generate…
Proof-of-Concept in 15 Minutes? AI Turbocharges Exploitation Summary Two independent Israeli researchers built an AI-driven pipeline, dubbed Auto Exploit, that uses prompts to a large language model (Anthropic’s Claude-sonnet-4.0), CVE…
Proof-of-Concept in 15 Minutes? AI Turbocharges Exploitation Summary An AI-driven offensive research pipeline, called Auto Exploit and built by two independent Israeli security researchers, used Anthropic’s Claude-sonnet-4.0 and other LLMs…
How Grey-Zone Hosting Companies Protect Data the US Wants Erased Summary Since the new US administration began in early 2025, privacy-focused hosting firms operating in the legal “grey zone” report…
Proof-of-Concept in 15 Minutes? AI Turbocharges Exploitation Summary An AI-driven offensive research pipeline, built by two independent Israeli security researchers, automatically generated proof-of-concept exploit code for 14 open-source vulnerabilities —…
Why Threat Hunting Should Be Part of Every Security Program Summary Robert Lackey argues that threat hunting must be a continuous practice within mature security programmes because attackers routinely evade…
Phishing Empire Runs Undetected on Google, Cloudflare Summary Deep Specter Research has exposed a multi-year, industrial-scale phishing-as-a-service (PhaaS) operation that ran largely undetected on major cloud providers, primarily Google Cloud…
Czech Warning Highlights China Stealing User Data Summary The Czech Republic’s National Cyber and Information Security Agency (NÚKIB) issued an advisory warning that certain products and services are transferring system…
