Critical SAP Vulns Under Exploitation in ‘One-Two Punch’ Attack Summary Two critical vulnerabilities in SAP NetWeaver Visual Composer — CVE-2025-31324 (missing authentication) and CVE-2025-42999 (deserialization) — are being chained in…
Summary At Black Hat USA 2025, Dark Reading’s Rob Wright spoke with Sam Collins and Marius Munch of the University of Birmingham about their research, “Watching the Watchers: Exploring and…
Tailing Hackers, Columbia University Uses Logging to Improve Security Summary Columbia University has strengthened its security posture by investing in comprehensive logging and observability to detect, trace and eject attackers.…
DARPA: Closing the Open Source Security Gap With AI Summary DARPA’s two-year AI Cyber Challenge (AIxCC) tasked teams with building AI-enabled “cyber reasoning systems” (CRSes) to find and fix vulnerabilities…
Hacktivist Tied to Multiple Cyber Groups Sentenced to Jail Summary Al-Tahery Al-Mashriky, a 26-year-old from South Yorkshire, has been sentenced to 20 months’ imprisonment for his role in multiple hacktivist…
Hackers Abuse VPS Infrastructure for Stealth, Speed Summary New research from Darktrace describes how attackers are abusing commercial virtual private server (VPS) services to spin up attack infrastructure quickly, cheaply…
A Bug-Hunting Framework Powered by LLMs Summary At Black Hat USA 2025, high school researchers Sasha Zyuzin and Ruikai Peng presented a new vulnerability-discovery framework that blends traditional static analysis…
Prepping the Front Line for MFA Social Engineering Attacks Summary Paul Underwood (Vice President of Security, Neovera) argues that modern, high-touch social engineering attacks often begin with a phone call…
Scattered Spider affiliate given 10 year sentence, ordered to pay $13 million in restitution Summary Noah Michael Urban, 20, has been sentenced to 10 years in federal prison, with three…
Microsoft makes MCP in Visual Studio GA but researchers warn of risks Summary Microsoft has declared Model Context Protocol (MCP) servers generally available in Visual Studio. Developers can configure MCP…
