RCE Flaw in AI-Assisted Coding Tool Poses Software Supply Chain Risk Content summary Researchers at Check Point Research disclosed a critical vulnerability (“MCPoison”, CVE-2025-54136) in Cursor, an AI-assisted development environment.…
Cisco User Data Stolen in Vishing Attack Summary Cisco disclosed a data breach stemming from a voice-phishing (vishing) attack on 24 July. An attacker targeted a Cisco representative and gained…
Why the Old Ways Are Still the Best for Most Cybercriminals Summary Jon Clay of Trend Micro argues that, despite a more professional and commoditised cybercrime economy, most attackers still…
Google Chrome Enterprise: More Than an Access Point to the Web Summary Google’s Chrome Enterprise is the familiar Chrome browser bundled with cloud-managed, enterprise-grade controls, reporting and administrative features. Lauren…
With Eyes on AI, African Orgs Push Security Awareness Summary African organisations are racing to train workforces in AI and cybersecurity as the continent seeks to capture up to 10%…
Pandora Confirms Third-Party Data Breach, Warns of Phishing Attempts Summary Pandora, the Danish jewellery retailer, has confirmed a cyberattack that exposed some customer data via a third-party platform the company…
The Critical Flaw in CVE Scoring Summary This commentary argues that current CVE scoring systems often overstate real-world risk because they lack organisation-specific context. Recent research analysing 140 high-profile CVEs…
Startup Spotlight: Twine Security Tackles the Execution Gap Summary Twine Security, a 2024 seed-stage startup and one of four finalists in the Black Hat USA Startup Spotlight, builds “AI digital…
What ‘CMMC 3.0’ Really Means for Government Contractors Summary The Department of Defence’s next evolution of the Cybersecurity Maturity Model Certification (commonly referred to as CMMC 3.0) refines CMMC 2.0…
Phishers Abuse Microsoft 365 to Spoof Internal Users Summary Cybercriminals are exploiting Microsoft 365’s Direct Send feature to send unauthenticated emails that appear to originate from internal users. By abusing…
