Attackers snooping around Sitecore, dropping malware via public sample keys Summary Unknown actors have been exploiting publicly documented ASP.NET machine sample keys in Sitecore deployments to achieve remote code execution…
Boffins build automated Android bug hunting system Summary Researchers from Nanjing University and The University of Sydney have developed A2, an AI agent system that automates discovery and validation of…
NIST Enhances Security Controls for Improved Patching Summary The US National Institute of Standards and Technology (NIST) updated its Security and Privacy Control catalogue (version 5.2.0) to help organisations and…
JSON Config File Leaks Azure ActiveDirectory Credentials Summary Researchers from Resecurity’s HUNTER team discovered an ASP.NET Core configuration file (appsettings.json) publicly accessible on the Internet that contained Azure Active Directory…
Proof-of-Concept in 15 Minutes? AI Turbocharges Exploitation Summary A pair of independent Israeli researchers built an AI-driven offensive research pipeline, dubbed Auto Exploit, that uses prompts to a large language…
Jaguar Land Rover Shuts Down in Scramble to Secure ‘Cyber Incident’ Summary Jaguar Land Rover (JLR) temporarily shut down parts of its IT systems after a cyber incident that began…
Hackers Are Sophisticated & Impatient — That Can Be Good Summary This commentary by Ensar Seker (Vice President of Research & CISO, SOCRadar) explains how modern ransomware groups operate like…
Zscaler, Palo Alto Networks Breached via Salesloft Drift Summary A widespread supply-chain attack on the marketing SaaS product Salesloft Drift allowed threat actor UNC6395 to steal OAuth and refresh tokens…
Summary An AI-driven offensive research system built by two independent Israeli security researchers automatically generated proof-of-concept (PoC) exploits for 14 different open-source vulnerabilities, in some cases in under 15 minutes.…
Proof-of-Concept in 15 Minutes? AI Turbocharges Exploitation Summary An Israeli research duo built an AI-driven pipeline, dubbed Auto Exploit, that uses CVE advisories, code patches and prompts to a large…
