Proof-of-Concept in 15 Minutes? AI Turbocharges Exploitation Summary An Israeli research duo developed an automated pipeline, dubbed Auto Exploit, that leverages a large language model (Anthropic’s Claude-sonnet-4.0), CVE advisories and…
Phishing Empire Runs Undetected on Google, Cloudflare Summary Researchers at Deep Specter uncovered a large-scale phishing-as-a-service (PhaaS) operation that ran undetected for more than three years using Google Cloud and…
Czech Warning Highlights China Stealing User Data Summary The Czech Republic’s National Cyber and Information Security Agency (NÚKIB) issued an advisory warning that certain products and services are transferring system…
Bridgestone Americas Confirms Cyberattack Summary Bridgestone Americas (BSA) has confirmed a cyberattack that affected some of its manufacturing facilities in North America. The company describes the incident as limited and…
Chinese Hackers Game Google to Boost Gambling Sites Summary A cybercrime operation tracked by ESET as “GhostRedirector” has been compromising Windows web servers to install malware and a malicious native…
ISC2 Aims to Bridge DFIR Skill Gap with New Certificate Summary ISC2 has launched the Threat Handling Foundations Certificate — a four-course programme aimed at strengthening Digital Forensics and Incident…
Ukraine’s cyber chief on Russian hackers’ shifting tactics, US cyber aid Summary When Oleksandr Potii became head of Ukraine’s State Service of Special Communications and Information Protection (SSSCIP) in November,…
Sitecore Zero-Day Sparks New Round of ViewState Threats Summary A critical zero-day (CVE-2025-53690) in Sitecore products (Experience Manager, Experience Platform and Experience Commerce) is being actively exploited via ViewState deserialization…
Chess.com says 4,500 people had data stolen during June breach Summary Chess.com disclosed that 4,541 users had personal data exposed after attackers accessed a third-party file-transfer application used by the…
Texas sues PowerSchool for breach exposing the data of students and teachers Summary The state of Texas has filed suit against education‑technology provider PowerSchool over a December 2024 data breach…
