System Shocks? EV Smart Charging Tech Poses Cyber-Risks
System Shocks? EV Smart Charging Tech Poses Cyber-Risks Summary This is a transcript of a Dark Reading interview from Black Hat USA 2025 in which Salvatore Gariuolo, senior threat researcher…
Apple Patches Zero-Day Flaw Used in ‘Sophisticated’ Attack
Apple Patches Zero-Day Flaw Used in ‘Sophisticated’ Attack Summary Apple released a patch on 20 August 2025 for a zero-day vulnerability in its ImageIO framework, tracked as CVE-2025-43300. The flaw…
The Growing Challenge of AI Agent and NHI Management
The Growing Challenge of AI Agent and NHI Management Summary Michael Morgenstern warns that the rapid rise of agentic AI and non-human identities (NHIs) is creating a fast-closing window to…
Over 1,200 arrested in Africa-wide cybercrime crackdown, Interpol says
Over 1,200 arrested in Africa-wide cybercrime crackdown, Interpol says Summary Authorities across Africa, coordinated by Interpol under operation Serengeti 2.0 (June–August 2025), have arrested more than 1,200 suspects linked to…
Chinese national who sabotaged Ohio company’s systems handed four-year jail stint
Chinese national who sabotaged Ohio company’s systems handed four-year jail stint Summary Davis Lu, a 55-year-old Chinese national and Houston resident, was sentenced to four years in prison and three…
Electronics manufacturer Data I/O reports ransomware attack to SEC
Electronics manufacturer Data I/O reports ransomware attack to SEC Summary Tech manufacturer Data I/O disclosed a ransomware attack that began on 16 August, which has taken critical operational systems offline…
CISA warns of Apple zero-day used in targeted cyberattacks
CISA warns of Apple zero-day used in targeted cyberattacks Summary CISA has ordered civilian federal agencies to patch CVE-2025-43300 by 11 September after Apple disclosed the flaw is being used…
Microsoft makes MCP in Visual Studio GA but researchers warn of risks
Summary Microsoft has declared general availability (GA) of MCP (Model Context Protocol) servers in Visual Studio. Developers can configure MCP servers using a .mcp.json file (either globally or per-solution), add…
Colt changes tune, admits data theft as Warlock gang begins auction
Colt changes tune, admits data theft as Warlock gang begins auction Summary UK telco Colt Technology Services has reversed an earlier position and confirmed that some data was stolen after…
Google yet to take down ‘screenshot-grabbing’ Chrome VPN extension
Google yet to take down ‘screenshot-grabbing’ Chrome VPN extension Summary Security researchers at Koi Security have reported that the Chrome extension FreeVPN.One — a supposedly privacy-focused VPN tool with more…