JSON Config File Leaks Azure ActiveDirectory Credentials Summary Researchers from Resecurity’s HUNTER team discovered an exposed ASP.NET Core configuration file (appsettings.json) on the public Internet that contained Azure Active Directory…
Proof-of-Concept in 15 Minutes? AI Turbocharges Exploitation Summary An AI-powered offensive research pipeline built by two independent Israeli researchers — dubbed Auto Exploit — uses prompts to a large language…
WordPress Woes Continue Amid ClickFix Attacks, TDS Threats Summary Recent campaigns targeting WordPress sites show threat actors abusing vulnerable or malicious plug‑ins and stolen credentials to redirect traffic, distribute malware…
Zscaler, Palo Alto Networks Breached via Salesloft Drift Summary A widespread supply-chain incident involving the marketing SaaS app Salesloft Drift allowed threat actor UNC6395 to steal OAuth and refresh tokens…
Jaguar Land Rover Shuts Down in Scramble to Secure ‘Cyber Incident’ Summary Jaguar Land Rover (JLR) shut down parts of its IT systems after detecting a “cyber incident,” halting some…
Amazon Stymies APT29 Credential Theft Campaign Summary Amazon’s threat intelligence team uncovered and disrupted a watering-hole credential theft campaign linked to APT29 (the Russian SVR‑linked group also known as Midnight…
Pennsylvania AG says recovery continues after office refused to pay ransomware gang Summary Pennsylvania Attorney General Dave Sunday said his office has restored its website, phone lines and email systems…
WhatsApp, Apple warn of highly targeted attacks with zero-day vulnerability Summary WhatsApp said it patched a zero‑day (CVE‑2025‑55177) that involved incomplete authorisation of linked‑device synchronisation messages and could let an…
Summary Amazon’s threat intelligence team detected and disrupted a watering‑hole campaign in August attributed to Russia’s APT29 (Cozy Bear/BlueBravo). Attackers injected malicious JavaScript into legitimate websites and redirected roughly 10%…
Summary The Cybersecurity and Infrastructure Security Agency (CISA) has appointed Nicholas (Nick) Andersen as executive assistant director for cybersecurity, effective Tuesday, 2 September 2025. Andersen previously served at the Department…
