‘Impersonation as a service’ the next big thing in cybercrime Summary ReliaQuest and other security firms have observed a sharp rise in underground job adverts seeking English-speaking social engineers. The…
Summary A former Eaton developer, Davis Lu, 55, was sentenced to four years in prison after installing a Java “kill switch” on company servers that triggered when his network access…
Russia Orders State-Backed WhatsApp Rival Pre-Installed On Phones and Tablets Summary From 1 September 2025 Russia will require all smartphones and tablets sold in the country to come with MAX,…
PipeMagic Backdoor Resurfaces as Part of Play Ransomware Attack Chain Summary Researchers and Microsoft threat analysts have observed the PipeMagic modular backdoor reappearing in attacks that exploit CVE-2025-29824, a Windows…
‘DripDropper’ Hackers Patch Their Own Exploit Summary Security researchers at Red Canary uncovered a campaign in which attackers exploited CVE-2023-46604, a maximum-severity remote code execution flaw in Apache ActiveMQ, to…
Microsoft Lays Out Its Quantum-Safe Plans Summary Microsoft has published an updated roadmap for its Quantum-Safe Program (QSP), committing to make its products and services quantum-safe by 2033 — two…
Fake Employees Pose Real Security Risks Summary Organisations face a rising threat from AI-enabled candidate fraud: people who don’t exist or who use stolen identities are being hired into real…
Critical SAP Vulns Under Exploitation in ‘One-Two Punch’ Attack Summary Two critical vulnerabilities in SAP NetWeaver Visual Composer (CVE-2025-31324 and CVE-2025-42999) are being chained in a novel “one-two punch” exploit…
Tailing Hackers, Columbia University Uses Logging to Improve Security Summary Columbia University has strengthened its cybersecurity posture by investing in comprehensive logging and observability tools, particularly netflow logging, after several…
DARPA: Closing the Open Source Security Gap With AI Summary DARPA’s two-year AI Cyber Challenge (AIxCC) challenged teams to build AI-enabled cyber reasoning systems (CRSes) that find and fix vulnerabilities…
