Summary Jon Clay of Trend Micro argues that, despite the professionalisation and increasing organisation of the cybercrime underground, most attackers still rely on tried-and-true techniques such as credential abuse, vulnerability…
Minimal, Hardened & Updated Daily: The New Standard for Secure Containers Summary Chainguard provides DevSecOps teams with minimal, hardened container images that are rebuilt and patched daily to reduce software…
Critical Zero-Day Bugs Crack Open CyberArk, HashiCorp Password Vaults Summary Researchers presented findings at Black Hat USA 2025 revealing 14 zero-day vulnerabilities across two major secrets managers: nine in HashiCorp…
‘ReVault’ Security Flaws Impact Millions of Dell Laptops Summary Researchers at Cisco Talos disclosed a set of five firmware-level vulnerabilities — dubbed “ReVault” — in Dell’s ControlVault3 technology that affect…
VexTrio Cybercrime Outfit Run by Legit Ad Tech Firms Summary New research presented at Black Hat USA by Infoblox (with corroborating work from Sucuri and Qurium) reveals that the large-scale…
ShinyHunters Tactics Now Mirror Scattered Spider Summary Researchers at ReliaQuest have identified striking overlaps between two distinct cybercrime groups — ShinyHunters and Scattered Spider — in recent attacks affecting firms…
Black Hat NOC Expands AI Implementation Across Security Operations Summary The Black Hat USA 2025 Network Operations Center (NOC), led by Corelight’s James Pope, used an expanded suite of AI…
Researchers Warn of ‘Hidden Risks’ in Passwordless Account Recovery Summary Passwordless authentication (biometrics, passkeys, tokens) is gaining traction, but account recovery methods have not kept pace. Researchers presenting at Black…
Elevation-of-Privilege Vulns Dominate Microsoft’s Patch Tuesday Summary Microsoft’s August 2025 Patch Tuesday contains fixes for 111 unique CVEs. The standout issue is the large proportion of elevation-of-privilege (EoP) flaws —…
Charon Ransomware Emerges With APT-Style Tactics Summary Researchers at Trend Micro have documented the first observed deployment of a new ransomware family called Charon, used in a targeted campaign against…
