Who watches the watchmen? Surveillanceware firms make bank, avoid oversight Summary Security firm Sekoia’s analysis, reported by The Register, lays out how the commercial surveillanceware industry is booming, charging ever-higher…
Biden stopped ICE from buying Israeli spyware, but Trump admin allows it to proceed Summary The Trump administration has lifted a Biden-era pause on Immigration and Customs Enforcement (ICE) buying…
Proof-of-Concept in 15 Minutes? AI Turbocharges Exploitation Summary An AI-driven offensive research pipeline developed by two Israeli security researchers — dubbed Auto Exploit — uses LLM prompts, CVE advisories and…
Google Says Gmail Security Alert Claims Are False Summary Google has denied reports that it issued a widespread security warning to Gmail users about a major vulnerability, calling those claims…
Proof-of-Concept in 15 Minutes? AI Turbocharges Exploitation Summary An AI-powered offensive research system developed by two Israeli researchers — dubbed Auto Exploit — used prompts to an LLM (Anthropic’s Claude-sonnet-4.0),…
Hackers Are Sophisticated & Impatient — That Can Be Good Summary Ensar Seker argues that modern ransomware groups behave like professional SaaS operations: organised, opportunistic and pressed for time. That…
NIST Enhances Security Controls for Improved Patching Summary The US National Institute of Standards and Technology (NIST) published Security and Privacy Control catalogue version 5.2.0 to help organisations tighten software…
JSON Config File Leaks Azure ActiveDirectory Credentials Summary Researchers from Resecurity’s HUNTER team discovered an appsettings.json file for an ASP.NET Core application that was publicly accessible and contained Azure Active…
Zscaler, Palo Alto Networks Breached via Salesloft Drift Summary A widespread supply-chain attack tied to the Salesloft Drift marketing SaaS has led to downstream compromises at numerous organisations, including security…
Jaguar Land Rover Shuts Down in Scramble to Secure ‘Cyber Incident’ Summary Jaguar Land Rover (JLR) confirmed it shut down parts of its IT systems after a confirmed “cyber incident”…
