How Gray-Zone Hosting Companies Protect Data the US Wants Erased Summary Since the start of the new US administration in early 2025, demand has surged for so-called “gray-zone” hosting —…
Iran MOIS Phishes 50+ Embassies, Ministries, Int’l Orgs Summary Researchers from Dream Security and Clear Sky link a short but wide-reaching phishing campaign to the Homeland Justice APT, which is…
Hybrid Cloud Provide a Practical Approach to Post-Quantum Migration Summary The article argues that full post-quantum cryptography (PQC) migration will be long and resource-intensive, but organisations can make meaningful progress…
Blast Radius of Salesloft Drift Attacks Remains Uncertain Summary In August, threat actor UNC6395 stole OAuth and refresh tokens from the Drift integration used by Salesloft, then used those tokens…
Why Threat Hunting Should Be Part of Every Security Program Summary This piece by Robert Lackey argues that threat hunting must be embedded in every mature security programme because automated…
Czech cyber agency warns against using services and products that send data to China Summary NÚKIB, the Czech Republic’s cybersecurity agency, has issued a warning about technology that transmits data…
US puts $10M bounty on three Russians accused of attacking critical infrastructure Summary The US State Department has announced rewards totalling $10 million for information leading to the identification or…
Ukraine’s cyber chief on Russian hackers’ shifting tactics, US cyber aid Summary When Oleksandr Potii became head of Ukraine’s State Service of Special Communications and Information Protection (SSSCIP) in late…
Proof-of-Concept in 15 Minutes? AI Turbocharges Exploitation Summary Two independent Israeli researchers built an AI-powered pipeline called Auto Exploit that uses LLM prompts (Anthropic’s Claude-sonnet-4.0), CVE advisories and patch diffs…
Blast Radius of Salesloft Drift Attacks Remains Uncertain Summary The Salesloft Drift supply-chain incident involved a threat actor (identified by Google as UNC6395) stealing OAuth and refresh tokens from the…
