Chinese Hackers Impersonated US Lawmaker in Email Espionage Campaign Summary As US–China trade talks were about to start in July 2025, recipients at US government agencies, law firms and trade…
Whistle-Blower Sues Meta Over Claims of WhatsApp Security Flaws Summary Attaullah Baig, the former head of security for WhatsApp, has filed a lawsuit in the U.S. District Court for the…
Kazakh oil giant denies cyberattack, says incident was ‘planned’ phishing drill Summary Seqrite Labs published research naming a new group, “NoisyBear”, which it said had targeted Central Asia’s energy sector…
Chinese Hackers Impersonated US Lawmaker in Email Espionage Campaign Summary As US-China trade talks were about to start in July 2025, targeted emails impersonating Representative John Moolenaar were sent to…
Whistle-Blower Sues Meta Over Claims of WhatsApp Security Flaws Summary The former head of security for WhatsApp, Attaullah Baig, has filed a lawsuit against Meta in the U.S. District Court…
45 New Domains Linked to Salt Typhoon, UNC4841 Summary Researchers at Silent Push have identified 45 previously unreported domains tied to China-backed threat actors Salt Typhoon (also known as GhostEmperor/FamousSparrow/UNC2286)…
Proof-of-Concept in 15 Minutes? AI Turbocharges Exploitation Summary Two independent Israeli security researchers built an AI-powered offensive research pipeline, dubbed Auto Exploit, that leverages LLM prompts, CVE advisories and open-source…
The Critical Failure in Vulnerability Management Summary This DarkReading commentary by Amar Ramakrishnan argues that vulnerability management (VM) is underperforming because the industry scaled the wrong way, the cloud shift…
CISA sounds alarm over TP-Link wireless routers under attack Summary The US Cybersecurity and Infrastructure Security Agency (CISA) warns that multiple vulnerabilities in TP-Link routers are being actively exploited. Two…
PACER buckles under MFA rollout as courts warn of support delays Summary The US federal court document system PACER has run into trouble after beginning a mandatory multifactor authentication (MFA)…
