Phishing Training Is Pretty Pointless, Researchers Find Summary Researchers from UC San Diego presented results at Black Hat showing that common workplace phishing training produces almost no practical benefit. In…
AI Is Reshaping Hacking. No One Agrees How Fast Summary Axios reports that AI is changing the cyber threat landscape, showcased by new AI agents unveiled at Black Hat. Defenders…
Phishing Training Is Pretty Pointless, Researchers Find Summary Researchers from U.C. San Diego (with partner Censys) presented an empirical study at Black Hat showing that common workplace phishing training produces…
Whispers of XZ Utils Backdoor Live on in Old Docker Images Summary Research from Binarly shows remnants of the notorious XZ Utils backdoor (CVE-2024-3094) still exist in older Debian-based Docker…
North Korea Attacks South Koreans With Ransomware Summary Researchers report that ChinopuNK, a subgroup of Scarcruft (aka APT37), has run a summer campaign targeting South Korean organisations and users with…
Content Summary Fortinet disclosed a critical, unauthenticated OS command injection (CVE-2025-25256) in its FortiSIEM platform that allows remote code execution via specially crafted CLI requests. A proof‑of‑concept exploit is already…
AI Is Reshaping Hacking. No One Agrees How Fast Summary At Black Hat several security firms unveiled AI-driven agents and tools that could shift the balance between defenders and attackers.…
Phishing Training Is Pretty Pointless, Researchers Find Summary Researchers from UC San Diego ran a large, real-world experiment with over 19,000 UCSD Health employees across eight months to test four…
Echo Chamber, Prompts Used to Jailbreak GPT-5 in 24 Hours Summary Researchers at NeuralTrust demonstrated a rapid jailbreak of OpenAI’s GPT-5 within 24 hours of its release by combining a…
Utilities, Factories at Risk From Encryption Holes in Industrial Protocol Summary Research presented at DEF CON 33 by Tom Tervoort (Secura) highlights multiple weaknesses in the OPC UA (Open Platform…
