Easy ChatGPT Downgrade Attack Undermines GPT-5 Security Summary Researchers at Adversa describe a simple prompt technique, dubbed PROMISQROUTE, that steers ChatGPT’s routing layer to send malicious prompts to older, less…
Video Game Anti-Cheat Systems: A Cybersecurity Goldmine Summary This piece summarises an interview from Black Hat USA 2025 in which University of Birmingham researchers Sam Collins and Marius Muench discuss…
System Shocks? EV Smart Charging Tech Poses Cyber-Risks Summary At Black Hat USA 2025, Trend Micro senior threat researcher Salvatore Gariuolo told Dark Reading that ISO 15118 — the global…
Google yet to take down ‘screenshot-grabbing’ Chrome VPN extension Summary Researchers at Koi Security found that the FreeVPN.One Chrome extension — installed by over 100,000 users — began silently taking…
Scattered Spider affiliate given 10 year sentence, ordered to pay $13 million in restitution Summary A federal judge sentenced Noah Michael Urban, 20, to 10 years in prison after he…
US cops wrap up RapperBot, one of world’s biggest DDoS-for-hire rackets Summary RapperBot (aka Eleven Eleven Botnet or CowBot), a Mirai-derived DDoS-for-hire service blamed for more than 370,000 attacks on…
Apple rushes out fix for active zero-day in iOS and macOS Summary Apple has issued emergency security updates to patch an actively exploited zero-day in its ImageIO framework (CVE-2025-43300). The…
Summary A week after service disruption began, UK telco Colt Technology Services has confirmed that some customer data was stolen in a cyberattack attributed to the Warlock ransomware group. Warlock…
Orange Belgium mega-breach exposes 850K customers to serious fraud Summary A major data theft at Orange Belgium has exposed information for approximately 850,000 customer accounts after an intrusion at the…
Honey, I shrunk the image and now I’m pwned Summary Security researchers at Trail of Bits have demonstrated an image-scaling prompt-injection attack that can deceive production multi-modal AI systems, including…
