DARPA: Closing the Open Source Security Gap With AI
DARPA: Closing the Open Source Security Gap With AI Summary DARPA ran a two-year AI Cyber Challenge (AIxCC) to see whether AI-enabled cyber reasoning systems (CRSes) could find and fix…
Hacktivist Tied to Multiple Cyber Groups Sentenced to Jail
Hacktivist Tied to Multiple Cyber Groups Sentenced to Jail Summary Al-Tahery Al-Mashriky, a 26-year-old from South Yorkshire, has been sentenced to 20 months in prison for running prolific hacktivist campaigns…
Tree of AST: A Bug-Hunting Framework Powered by LLMs
A Bug-Hunting Framework Powered by LLMs Summary This Dark Reading News Desk interview (from Black Hat USA 2025) profiles Sasha Zyuzin and Ruikai Peng, two high-school researchers who developed a…
Prepping the Front Line for MFA Social Engineering Attacks
Prepping the Front Line for MFA Social Engineering Attacks Summary Author Paul Underwood (Vice President of Security, Neovera) argues that help desks are a primary target for modern, high-touch social…
Tailing Hackers, Columbia University Uses Logging to Improve Security
Tailing Hackers, Columbia University Uses Logging to Improve Security Summary Columbia University has strengthened its security posture by investing in broad logging and observability, using netflow and log analytics to…
Why Video Game Anti-Cheat Systems Are a Cybersecurity Goldmine
Video Game Anti-Cheat Systems: A Cybersecurity Goldmine Summary This article is an edited transcript of a Dark Reading interview conducted by Rob Wright at Black Hat USA 2025 with researchers…
Hackers Abuse VPS Infrastructure for Stealth, Speed
Hackers Abuse VPS Infrastructure for Stealth, Speed Summary Darktrace research reveals that threat actors are increasingly abusing low-cost commercial virtual private server (VPS) services to spin up attack infrastructure quickly,…
US cops wrap up RapperBot, one of world’s biggest DDoS-for-hire rackets
US cops wrap up RapperBot, one of world’s biggest DDoS-for-hire rackets Summary RapperBot (aka Eleven Eleven Botnet or CowBot), a Mirai-derived DDoS-for-hire network blamed for hundreds of thousands of attacks…
Apple rushes out fix for active zero-day in iOS and macOS
Apple rushes out fix for active zero-day in iOS and macOS Summary Apple has issued emergency updates to patch an actively exploited zero-day in its ImageIO framework (CVE-2025-43300). The flaw…
Colt changes tune, admits data theft as Warlock gang begins auction
Colt changes tune, admits data theft as Warlock gang begins auction Summary UK telco Colt Technology Services has acknowledged that data was stolen after a cyberattack a week earlier, reversing…