Hacked Routers Linger on the Internet for Years, Data Shows Summary Researchers at Censys, led by principal security researcher Emily Austin, analysed Internet scan data and found several hundred Ubiquiti…
Summary Japan, South Korea and the United States are coordinating to disrupt a large-scale North Korean scheme that places fake IT workers inside companies to steal data, launder funds and…
Russia’s APT28 Targets Microsoft Outlook With ‘NotDoor’ Malware Summary Researchers at Lab52 (S2 Grupo) have identified a new Outlook VBA backdoor dubbed “NotDoor” that is being used by APT28 (Fancy…
Iran MOIS Phishes 50+ Embassies, Ministries, Int’l Orgs Summary Researchers at Dream Security and Clear Sky link a short, targeted phishing run to the Iran-linked APT known as “Homeland Justice,”…
Proof-of-Concept in 15 Minutes? AI Turbocharges Exploitation Summary Two Israeli security researchers built an automated pipeline — dubbed Auto Exploit — that uses an LLM (Anthropic’s Claude-sonnet-4.0), CVE advisories and…
Hackers Are Sophisticated & Impatient — That Can Be Good Summary Ensar Seker outlines a pragmatic approach to ransomware negotiations by treating modern attackers as professional, opportunistic and time‑pressed adversaries.…
NIST Enhances Security Controls for Improved Patching Summary The US National Institute of Standards and Technology (NIST) has updated its Security and Privacy Control catalogue (version 5.2.0) to help organisations…
JSON Config File Leaks Azure ActiveDirectory Credentials Source: Aleksia via Alamy Stock Photo Summary Researchers from Resecurity’s HUNTER team discovered an appsettings.json file for an ASP.NET Core app that was…
Zscaler, Palo Alto Networks Breached via Salesloft Drift Summary A widespread supply-chain compromise of the Salesloft Drift marketing SaaS has led to downstream breaches affecting major security vendors, including Zscaler…
Jaguar Land Rover Shuts Down in Scramble to Secure ‘Cyber Incident’ Summary Jaguar Land Rover (JLR) shut down parts of its IT systems after detecting a “cyber incident” that severely…
