Arch Linux takes a pounding as DDoS attack enters week two
Arch Linux takes a pounding as DDoS attack enters week two Summary The community-driven Arch Linux project has been hit by a sustained distributed denial of service (DDoS) attack now…
Russia Orders State-Backed WhatsApp Rival Pre-Installed On Phones and Tablets
Russia Orders State-Backed WhatsApp Rival Pre-Installed On Phones and Tablets Summary From 1 September, Russia will require all smartphones and tablets sold in the country to ship with MAX, a…
Dev Gets 4 Years For Creating Kill Switch On Ex-Employer’s Systems
Dev Gets 4 Years For Creating Kill Switch On Ex-Employer’s Systems Summary Davis Lu, a former developer at Eaton Corporation, has been sentenced to four years in prison for embedding…
Critical SAP Vulns Under Exploitation in ‘One-Two Punch’ Attack
Critical SAP Vulns Under Exploitation in ‘One-Two Punch’ Attack Summary Two previously disclosed critical flaws in SAP NetWeaver Visual Composer (CVE-2025-31324 and CVE-2025-42999) are being chained in the wild in…
Tailing Hackers, Columbia University Uses Logging to Improve Security
Tailing Hackers, Columbia University Uses Logging to Improve Security Summary Columbia University has beefed up its security posture by leaning heavily on logging, netflow analysis and automation after a series…
DARPA: Closing the Open Source Security Gap With AI
DARPA: Closing the Open Source Security Gap With AI Summary DARPA’s AI Cyber Challenge (AIxCC) was a two-year programme that asked teams to build AI-enabled “cyber reasoning systems” (CRSes) to…
Fake Employees Pose Real Security Risks
Fake Employees Pose Real Security Risks Summary This Dark Reading piece examines an emerging threat: entirely fake or AI-assisted employees being hired into organisations — often with privileged IT access…
Tree of AST: A Bug-Hunting Framework Powered by LLMs
A Bug-Hunting Framework Powered by LLMs Summary At Black Hat USA 2025, high school researchers Sasha Zyuzin and Ruikai Peng presented a novel vulnerability-discovery framework that combines traditional static analysis…
Prepping the Front Line for MFA Social Engineering Attacks
Prepping the Front Line for MFA Social Engineering Attacks Summary Paul Underwood argues that modern high-touch social engineering campaigns increasingly target help desks to bypass perimeter defences by abusing password…
How Architectural Controls Help Can Fill the AI Security Gap
How Architectural Controls Help the AI Security Gap Summary This Dark Reading News Desk interview from Black Hat USA 2025 features David Brauchler, technical director and AI/ML security practice lead…