The Sysdig TRT documents JADEPUFFER: the first known agentic ransomware operation, where an LLM autonomously exploited Langflow, harvested credentials, and executed full database extortion.

Six AirDrop Quick Share vulnerabilities span iOS, macOS, Android, and Windows, affecting protocols on over five billion devices.

Inside mass discovery and model-probing reconnaissance campaigns that are mapping LLM backend servers in the wild

Interesting paper: "Cybersecurity Mission Creep." Abstract: Cybersecurity is experiencing mission creep. Policymakers are casting more and more problems as issues of cybersecurity. So reframed, wildly different policy issues, from misinformation, to child social media safety laws, to antitrust regulations, to alleged journalist misconduct, to anti-sex trafficking statutes become what this Article calls "cybersecuritized." Before this reframing, these issues present as important but not existential.

How the threat group used a zero-day vulnerability to disable the target's EDR, preventing it from intervening in their ransomware attack.

Signer.Digital's browser extension and its native helper turned a path-traversal bug into drive-by remote code execution on Windows. Any web page you visited could load an attacker DLL into a process ...

The ODI was founded in 2012 by Sir Tim Berners-Lee and Sir Nigel Shadbolt, placing us at the heart of the data economy. Our primary mission is to foster transparency, accountability, and innovation th...

Cisco Talos has uncovered ARToken, a full-fledged "BEC-as-a-service" platform linked to EvilTokens that uses sophisticated AI lures to hijack corporate accounts.

In this podcast episode James Wilson chats with Karsten Nohl about his research into using local LLMs to replace cloud AI in security code [Read More]

When a devastating earthquake struck north central Venezuela last week, rescue teams were not the only ones who mobilised fast.

The US Supreme Court decided that the US Federal Trade Commission (“FTC”) may not be independent anymore - with major implications for EU-US Data Transfers.

FORTIGAGTE ADMINS, PLEASE CHECK THESE 2 THINGS If you're responsible for FortiGate firewalls, I'd recommend taking 10 minutes today to check these two things. After digging through the FortiBleed r...

It-bolaget Mullvads grundare donerade fem miljoner – till parti som vill se ”storskalig återvandring”

Cybercrime research on the FortiBleed campaign reveals 73,932 compromised Fortinet firewalls – plus Synology devices, Sophos firewalls & MSSQL servers. Get the full picture.

The first large-scale study of hiring algorithms in the wild finds concerning patterns to how systems reject candidates.