China Isolates Itself From Worldwide Web For Over an Hour
China Isolates Itself From Worldwide Web For Over an Hour Summary Around 00:34 Beijing time on 20 August 2025, encrypted web traffic across China was forcibly disrupted for about 74…
T-Mobile Claimed Selling Location Data Without Consent is Legal – Judges Disagree
T-Mobile Claimed Selling Location Data Without Consent is Legal – Judges Disagree Summary The US Court of Appeals for the District of Columbia Circuit unanimously rejected T-Mobile’s challenge to Federal…
Fake Employees Pose Real Security Risks
Fake Employees Pose Real Security Risks Summary Organisations face a growing threat from fake employees — entirely manufactured identities or fraudulently obtained profiles — who secure real jobs and then…
Critical SAP Vulns Under Exploitation in ‘One-Two Punch’ Attack
Critical SAP Vulns Under Exploitation in ‘One-Two Punch’ Attack Summary Two critical, previously disclosed vulnerabilities in SAP NetWeaver Visual Composer (CVE-2025-31324 and CVE-2025-42999) are being chained in a newly observed…
Tailing Hackers, Columbia University Uses Logging to Improve Security
Tailing Hackers, Columbia University Uses Logging to Improve Security Summary Columbia University has strengthened its security posture by using extensive logging and netflow analysis after a series of cyberattacks, including…
DARPA: Closing the Open Source Security Gap With AI
DARPA: Closing the Open Source Security Gap With AI Summary DARPA’s two-year AI Cyber Challenge (AIxCC) tasked teams with building AI-enabled cyber reasoning systems (CRSes) to find and patch vulnerabilities…
Hacktivist Tied to Multiple Cyber Groups Sentenced to Jail
Hacktivist Tied to Multiple Cyber Groups Sentenced to Jail Summary Al-Tahery Al-Mashriky, 26, from South Yorkshire, has been jailed for 20 months after pleading guilty to nine charges relating to…
K-12 School Incident Response Plans Fall Short
K-12 School Incident Response Plans Fall Short Summary K-12 schools are increasingly targeted by ransomware and other cyber threats, yet many lack realistic incident response (IR) readiness. The article outlines…
Tree of AST: A Bug-Hunting Framework Powered by LLMs
A Bug-Hunting Framework Powered by LLMs Summary This article is a News Desk interview from Black Hat USA 2025 with Sasha Zyuzin and Ruikai Peng, two high-school researchers who presented…
Prepping the Front Line for MFA Social Engineering Attacks
Prepping the Front Line for MFA Social Engineering Attacks Summary This commentary by Paul Underwood outlines how attackers increasingly use high-touch social engineering (often by phone) to bypass perimeter defences…