Windows starts asking for admin rights where it shouldn’t after security fix Summary Microsoft’s August 2025 security update fixed CVE-2025-50173 — an authentication flaw in Windows Installer that could allow…
Russia’s APT28 Targets Microsoft Outlook With ‘NotDoor’ Malware Summary Researchers at Lab52 (S2 Grupo) have identified a new Outlook-focused backdoor called “NotDoor,” attributed to Russia’s APT28 (Fancy Bear). NotDoor is…
Cloudflare Holds Back the Tide on 11.5Tbps DDoS Attack Summary Cloudflare has been autonomously mitigating hundreds of distributed denial‑of‑service (DDoS) attacks, including a UDP flood that peaked at about 11.5…
Boffins Build Automated Android Bug Hunting System Summary Researchers from Nanjing University and the University of Sydney have developed A2, an AI‑powered agent that automates discovery and validation of vulnerabilities…
Japan, South Korea Take Aim at North Korean IT Worker Scam Summary Japan, South Korea and the United States have stepped up co‑operation to disrupt a large-scale North Korean scheme…
France fines Google, SHEIN for undercooked cookie policies that led to crummy privacy Summary France’s data protection authority, the CNIL, has fined Google and Chinese e‑tailer SHEIN for dropping tracking…
Boffins Build Automated Android Bug Hunting System Summary Researchers at Nanjing University and the University of Sydney have developed A2, an AI‑powered agent that autonomously discovers and validates vulnerabilities in…
Iran MOIS Phishes 50+ Embassies, Ministries, Int’l Orgs Summary Researchers at Dream Security and Clear Sky tie a brief but widespread phishing campaign to the Iranian APT known as “Homeland…
Proof-of-Concept in 15 Minutes? AI Turbocharges Exploitation Summary Two independent Israeli researchers built an AI-driven offensive research pipeline — dubbed Auto Exploit — that uses LLM prompts, CVE advisories and…
Congressional panel throws cyber threat intel-sharing, funding a lifeline Summary US security leaders and the House Homeland Security Committee are racing to reauthorise two pieces of cyber legislation before they…
