A Bug-Hunting Framework Powered by LLMs Summary At Black Hat USA 2025, high-school researchers Sasha Zyuzin and Ruikai Peng presented a novel vulnerability-discovery framework that merges traditional static analysis with…
Prepping the Front Line for MFA Social Engineering Attacks Summary This commentary by Paul Underwood argues that modern, high-touch social engineering attacks increasingly target help desks to bypass perimeter controls…
Tailing Hackers, Columbia University Uses Logging to Improve Security Summary Columbia University has strengthened its security posture by investing in comprehensive logging and netflow visibility. After several incidents — including…
Hackers Abuse VPS Infrastructure for Stealth, Speed Summary New research from Darktrace shows threat actors leveraging commercial virtual private server (VPS) services to rapidly build attack infrastructure that is cheap,…
K-12 School Incident Response Plans Fall Short Summary K-12 schools are increasingly targeted by ransomware and other cyberattacks, yet many districts lack the preparedness, resourcing and practical incident response (IR)…
Scattered Spider Member Sentenced to a Decade in Prison Summary A 20-year-old member of the Scattered Spider cybercriminal collective, Noah Michael Urban (aka “King Bob”), was sentenced to 10 years…
Easy ChatGPT Downgrade Attack Undermines GPT-5 Security Summary Researchers at Adversa describe a simple prompt-based technique, dubbed PROMISQROUTE, that steers ChatGPT’s routing layer to older, smaller and less secure models…
Video Game Anti-Cheat Systems: A Cybersecurity Goldmine Summary This piece is an edited transcript of a Dark Reading interview from Black Hat USA 2025 with Sam Collins and Marius Muench…
System Shocks? EV Smart Charging Tech Poses Cyber-Risks Summary At Black Hat USA 2025 Trend Micro’s Salvatore Gariuolo warns that ISO 15118 — the standard enabling smart charging and vehicle-to-grid…
Orange Belgium mega-breach exposes 850K customers to serious fraud Summary A data breach at Orange Belgium in late July has exposed information for around 850,000 customers. Attackers accessed subscriber full…
