Proof-of-Concept in 15 Minutes? AI Turbocharges Exploitation Summary An Israeli research duo built an automated pipeline, dubbed Auto Exploit, that uses prompts to a large language model (Anthropic’s Claude-sonnet-4.0), CVE…
The Critical Failure in Vulnerability Management Summary The article argues that the vulnerability management market is faltering despite an ever-growing number of flaws to manage. Vendors focussed on surfacing vulnerabilities…
45 New Domains Linked to Salt Typhoon, UNC4841 Summary Researchers at Silent Push have identified 45 previously unreported domains linked to China-backed threat actors Salt Typhoon and UNC4841. Many domains…
Summary Canonical experienced brief disruptions to security.ubuntu.com and archive.ubuntu.com on 5 and 7 September 2025. Although the company’s status page reported services as operational shortly after each incident, the short…
Chinese Hackers Impersonated US Lawmaker in Email Espionage Campaign Summary As US–China trade talks were about to start in July, several US government agencies, law firms and trade groups received…
Nepal social media ban sparks protests, dozens injured Summary At least 14 people were reportedly killed and dozens injured after police clashed with thousands of mainly young protesters in Kathmandu.…
First AI-Powered ‘Self-Composing’ Ransomware Was Actually Just a University Research Project Summary Cybersecurity firm ESET believed it had discovered the first AI-written ransomware, dubbed “PromptLock.” Further investigation showed the sample…
Chinese Hackers Impersonated US Lawmaker in Email Espionage Campaign Content Summary As US–China trade talks were about to begin in July 2025, numerous US government agencies, law firms and trade…
CISA sounds alarm over TP-Link wireless routers under attack Summary The US Cybersecurity and Infrastructure Security Agency (CISA) has warned that two TP-Link router flaws are being actively exploited in…
PACER buckles under MFA rollout as courts warn of support delays Summary PACER, the US courts’ online system for accessing court documents, is struggling as it rolls out mandatory multifactor…
