Critical Zero-Day Bugs Crack Open CyberArk, HashiCorp Password Vaults Summary At Black Hat USA 2025 researchers from Cyata disclosed 14 zero-day vulnerabilities across two leading secrets managers: nine in HashiCorp…
Startup Spotlight: Twine Security Tackles the Execution Gap Summary Twine Security, a 2024-founded seed-stage startup (c. $17M raised, ~35 employees) and a Black Hat USA Startup Spotlight finalist, builds “AI…
‘ReVault’ Security Flaws Impact Millions of Dell Laptops Summary Researchers from Cisco Talos disclosed a set of firmware-level vulnerabilities dubbed “ReVault” affecting ControlVault3 — a secure-element technology used on many…
VexTrio Cybercrime Outfit Run by Legit Ad Tech Firms Summary At Black Hat USA 2025, Infoblox revealed new research showing that the massive VexTrio traffic distribution system (TDS) — responsible…
Payback: ‘ShinyHunters’ Clocks Google via Salesforce Summary The ShinyHunters-affiliated group (tracked by Google as UNC6040) used sophisticated vishing and social engineering to compromise a Google Salesforce instance and exfiltrate basic…
The Critical Flaw in CVE Scoring Summary The article argues that current CVE/CVSS severity ratings often lack the organisational context needed to prioritise real risks. It cites research showing an…
Researcher Deploys Fuzzer to Test Autonomous Vehicle Safety Summary At Black Hat USA 2025 Zhisheng Hu, a product security engineer at Zoox, demonstrated using a fuzzing framework to stress-test teleoperation…
Privilege Escalation Issue in Amazon ECS Leads to IAM Hijacking Summary At Black Hat USA 2025, researcher Naor Haziz demonstrated “ECScape”, a technique that abuses an undocumented Agent Communication Service…
Summary Two senior executives behind the Samourai Wallet cryptocurrency mixing service — CEO Keonne Rodriguez and CTO William Lonergan Hill — have pleaded guilty to conspiracy for operating a money‑transmitting…
Citizen Lab Founder Flags Rise of US Authoritarianism Summary The Citizen Lab’s founder Ron Deibert warned at Black Hat USA 2025 about a growing “vicious cycle” of digital human-rights abuses.…
