Why Threat Hunting Should Be Part of Every Security Program Summary This commentary from Robert Lackey argues that threat hunting should be a habitual part of any mature security programme.…
How Gray-Zone Hosting Companies Protect Data the US Wants Erased Summary Since the new US administration took office in early 2025, a noticeable wave of US-based clients — from abortion…
Ukraine’s cyber chief on Russian hackers’ shifting tactics, US cyber aid Summary When Oleksandr Potii took charge of Ukraine’s State Service of Special Communications and Information Protection (SSSCIP) in late…
Blast Radius of Salesloft Drift Attacks Remains Uncertain Summary Between 8–18 August, threat actor UNC6395 stole OAuth and refresh tokens from Drift’s Salesforce integration and used them to move laterally…
Windows starts asking for admin rights where it shouldn’t after security fix Summary Microsoft’s August 2025 security update patched CVE-2025-50173 by enforcing User Account Control (UAC) prompts for administrator credentials…
Proof-of-Concept in 15 Minutes? AI Turbocharges Exploitation Summary A pair of Israeli researchers built an automated offensive research pipeline called “Auto Exploit” that uses LLM prompts, CVE advisories and open-source…
Proof-of-Concept in 15 Minutes? AI Turbocharges Exploitation Summary Two independent Israeli researchers built an AI-driven offensive research pipeline called Auto Exploit that uses CVE advisories, code patches and prompts to…
Summary An Israeli duo of independent security researchers built an automated pipeline, dubbed Auto Exploit, that uses LLM prompts, CVE advisories and open-source patches to generate proof-of-concept exploit code. The…
Chess.com says 4,500 people had data stolen during June breach Summary Chess.com discovered unauthorised access to data stored in a third-party file transfer application used by the platform between 5…
Proof-of-Concept in 15 Minutes? AI Turbocharges Exploitation Summary An Israeli research duo built an AI-driven pipeline, dubbed Auto Exploit, that uses CVE advisories, code patches and prompts to a large…
