The vast majority (82%) of ethical hackers now use AI in their workflows, enabling companies to benefit from faster findings, more assessments, broader security coverage and higher quality reporting, according to Bugcrowd. The bug bounty specialist polled 2000 security researchers worldwide… Read More "Over 80% of Ethical Hackers Now Use AI"
For individual users, this involves studying the saved information a chatbot has accumulated (how this is accessed varies by AI). For enterprise admins, in contrast, Microsoft recommends checking for URLs containing phrases such as ‘remember,’ ‘trusted source,’ ‘in future conversations,’ ‘authoritative source,’… Read More "Companies are using ‘Summarize with AI’ to manipulate enterprise chatbots"
The past 30 days have seen no shortage of new threats and incidents that brought into sharp relief the need for well-thought-out cyber-resilience plans 29 Sep 2025 As September 2025 comes to a close, ESET Chief Security Evangelist Tony Anscombe… Read More "This month in security with Tony Anscombe – September 2025 edition"
A previously undocumented script-based command-and-control (C2) framework has been linked to multiple cyber campaigns targeting gambling companies, government bodies and private organizations across Asia. The framework, dubbed PeckBirdy, has been active since 2023 and has been attributed to China-aligned advanced… Read More "PeckBirdy Framework Tied to China-Aligned Cyber Campaigns"
The malware hunts for older Linux kernels, including versions 2.6.18, 2.6.18-164, 2.6.31, and 2.6.37. This would include roughly up to 3% of internet-facing Linux servers, Flare estimates. But it could be as much as 10% in what Flare calls long-tail environments… Read More "SSHStalker botnet brute-forces its way onto 7,000 Linux machines"
We’re kicking off the month with a focus on the human element: the first line of defense, but also the path of least resistance for many cybercriminals 01 Oct 2025 October is Cybersecurity Awareness Month and what better way to… Read More "Cybersecurity Awareness Month 2025: Knowledge is power"
A critical sandbox escape vulnerability in Grist-Core has been disclosed that allows remote code execution (RCE) through a single malicious spreadsheet formula. The issue was uncovered by Cyera Research Labs and affects Grist’s Python formula execution layer, where untrusted formulas… Read More "Pyodide Sandbox Escape Enables Remote Code Execution in Grist-Core"
Cybersecurity researchers have discovered what they said is the first known malicious Microsoft Outlook add-in detected in the wild. In this unusual supply chain attack detailed by Koi Security, an unknown attacker claimed the domain associated with a now-abandoned legitimate… Read More "First Malicious Outlook Add-In Found Stealing 4,000+ Microsoft Credentials"
ESET researchers have uncovered two Android spyware campaigns targeting individuals interested in secure communication apps, namely Signal and ToTok. These campaigns distribute malware through deceptive websites and social engineering and appear to target residents of the United Arab Emirates (UAE).… Read More "New spyware campaigns target privacy-conscious Android users in the UAE"
Endpoint disruption following a serious security breach can take up to two weeks to recover from and cost millions for most (87%) US and UK organizations, a new report has revealed. Absolute Security polled 750 CISOs on both sides of the… Read More "Fifth of Breaches Take Two Weeks to Recover From"
