What Every Argument About Sideloading Gets Wrong Summary Developer Hugo Tunius argues that many sideloading debates miss the point: vendors like Google and Apple aren’t primarily restricting your hardware, they’re…
Proof-of-Concept in 15 Minutes? AI Turbocharges Exploitation Summary Two independent Israeli researchers built an automated offensive-research pipeline, dubbed Auto Exploit, that leverages a large language model (Anthropic’s Claude-sonnet-4.0), CVE advisories…
Hackers Are Sophisticated & Impatient — That Can Be Good Summary Imagine the worst: a ransomware notice and a multi‑million‑pound demand with a 72‑hour deadline. Ensar Seker argues you can…
NIST Enhances Security Controls for Improved Patching Summary The US National Institute of Standards and Technology (NIST) published an update to its Security and Privacy Controls catalogue (v5.2.0) to help…
JSON Config File Leaks Azure ActiveDirectory Credentials Summary Researchers at Resecurity’s HUNTER team discovered an publicly accessible ASP.NET Core configuration file (appsettings.json) that exposed Azure Active Directory ClientId and ClientSecret…
Jaguar Land Rover ‘severely disrupted’ by cybersecurity incident Summary Jaguar Land Rover (JLR) has confirmed a cybersecurity incident that has “severely disrupted” its global IT systems, affecting both vehicle production…
Summary WhatsApp said it patched a zero-day vulnerability (CVE-2025-55177) that involves incomplete authorisation of linked device synchronisation messages and could allow an unrelated user to trigger processing of content from…
Moscow reportedly hires hackers who breached city’s school system Summary Moscow city officials have reportedly hired “three or four” young hackers who previously breached the Moscow Electronic School (MES), according…
Frostbyte10 bugs put thousands of refrigerators at major grocery chains at risk Summary Security researchers at Armis have disclosed ten vulnerabilities, dubbed “Frostbyte10”, in Copeland E2 and E3 refrigeration and…
Stolen OAuth tokens expose Palo Alto customer data Summary Palo Alto Networks says criminals used OAuth credentials stolen in the Salesloft Drift breach to access and exfiltrate data from its…
