Short circuit: Electronics supplier to tech giants suffers ransomware shutdown Summary Data I/O, an electronics programming and manufacturing supplier to major tech firms (including Amazon, Apple, Google and Microsoft) reported…
Bug bounties: The good, the bad, and the frankly ridiculous ways to do it Summary This feature from The Register traces the evolution of bug bounties from Netscape’s early experiment…
FBI Warns Russian Hackers Targeted ‘Thousands’ of Critical US Infrastructure IT Systems Summary The FBI published a public service announcement warning that Russian state-sponsored actors tied to the FSB (Center…
FBI Warns Russian Hackers Targeted ‘Thousands’ of Critical US Infrastructure IT Systems Summary The FBI has warned that Russian state-sponsored cyber actors associated with the FSB’s Centre 16 (a subcluster…
After Tea Leak, 33,000 Women’s Addresses Were Purportedly Mapped on Google Maps Summary The BBC reported that two Google Maps instances allegedly plotted around 33,000 pins representing women who had…
FBI Warns Russian Hackers Targeted ‘Thousands’ of Critical US Infrastructure IT Systems Summary The FBI has warned that Russian state-sponsored cyber actors linked to the FSB’s Centre 16 have targeted…
Summary A modular backdoor called PipeMagic has reappeared in a campaign that chains a Windows CLFS elevation-of-privilege flaw (CVE-2025-29824) to deliver Play/Storm-2460 ransomware. Microsoft Threat Intelligence and other researchers report…
Microsoft Lays Out Its Quantum-Safe Plans Summary Microsoft has updated its Quantum-Safe Program (QSP) roadmap, targeting full quantum-safe protection across its products and services by 2033 — two years ahead…
Fake Employees Pose Real Security Risks Summary Organisations face a growing threat from fabricated hires — from AI-generated profiles to state-sponsored actors posing as remote IT staff. Gartner predicts that…
Critical SAP Vulns Under Exploitation in ‘One-Two Punch’ Attack Summary Two previously known critical vulnerabilities in SAP NetWeaver Visual Composer (CVE-2025-31324 and CVE-2025-42999) are being chained in a new exploit…
