A Bug-Hunting Framework Powered by LLMs Summary At Black Hat USA 2025, high‑school researchers Sasha Zyuzin and Ruikai Peng presented “Thinking Outside the Sink,” a vulnerability discovery framework that merges…
Prepping the Front Line for MFA Social Engineering Attacks Summary Paul Underwood (Vice President of Security, Neovera) argues that modern, high-touch social engineering attacks often begin with a phone call…
Video Game Anti-Cheat Systems: A Cybersecurity Goldmine Summary At Black Hat USA 2025, Dark Reading’s Rob Wright spoke with University of Birmingham researchers Sam Collins and Marius Muench about their…
How Architectural Controls Help the AI Security Gap Summary At Black Hat USA 2025, David Brauchler of NCC Group warns that relying on AI “guardrails” is not enough. His penetration…
Hackers Abuse VPS Infrastructure for Stealth, Speed Summary New research from Darktrace shows threat actors are abusing commercial virtual private server (VPS) providers to spin up attack infrastructure quickly, cheaply…
System Shocks? EV Smart Charging Tech Poses Cyber-Risks Summary This Dark Reading interview from Black Hat USA 2025 features Salvatore Gariuolo, a senior threat researcher at Trend Micro, discussing security…
Scattered Spider Member Sentenced to a Decade in Prison Summary Noah Michael Urban, 20, a member of the Scattered Spider cybercriminal collective, was sentenced to 10 years in federal prison…
Easy ChatGPT Downgrade Attack Undermines GPT-5 Security Summary Researchers at Adversa describe a simple prompt technique, dubbed PROMISQROUTE, that steers ChatGPT to route malicious queries to older, lighter and less…
The Growing Challenge of AI Agent and NHI Management Summary The article warns that agentic AI (agents, chatbots and LLM-driven automation) combined with the rapidly expanding population of non-human identities…
Insurers May Limit Payments in Cases of Unpatched CVEs Summary Cyber insurers are testing policy language that would limit or reduce payouts when breaches exploit known, unpatched vulnerabilities (CVE exclusions).…
