“AI can defeat CAPTCHA systems and analyse voice biometrics to compromise authentication,” according to cybersecurity vendor Dispersive. “This capability underscores the need for organizations to adopt more advanced, layered security measures.” Leveraging deepfakes for social engineering AI-generated deepfakes are being… Read More "13 ways attackers use generative AI to exploit your systems"
US and international cybersecurity agencies have issued new guidance to help critical infrastructure operators safely incorporate AI into operational technology (OT) systems. Published on December 3, the guidance was developed collaboratively by the US Cybersecurity and Infrastructure Security Agency (CISA) and… Read More "US and Australia Issue Guidance for Secure AI in Infrastructure"
Spyware products from the surveillance consortium Intellexa are still thriving despite extensive US sanctions. This comes as a months-long investigation into a set of highly sensitive documents and other materials leaked from the company has been published by Inside Story, Haaretz and… Read More "Predator Spyware Maker Intellexa Evades Sanctions"
The Louvre has announced plans to overhaul its security infrastructure following a high-profile break-in at the museum’s Apollo Gallery in October that resulted in the theft of the Crown Jewels, valued at €88m ($102.5m). The public entity managing the museum… Read More "Louvre to Bolster Its Security, Issues €57m Public Tender"
CrowdStrike has identified a sophisticated cyber-espionage campaign by Warp Panda targeting North American legal, technology and manufacturing firms to support Chinese government priorities. The previously unknown threat actor exhibits a high level of technical sophistication, advanced operations security (OPSEC) skills… Read More "China-Linked Warp Panda Targets North American Firms in Espionage Camp"
A critical remote code execution vulnerability in React.js has been identified. React.js is a JavaScript library for building fast, interactive user interfaces (UIs) using reusable components. The security researcher Lachlan Davidson disclosed the vulnerability on 29 November 29, 2025, to… Read More "React.js Hit by Maximum-Severity ‘React2Shell’ Vulnerability"
A leading NHS trust has become the latest organization to notify about a data breach linked to its use of Oracle E-business Suite (EBS). Barts Health said in an update on Friday that it is seeking a High Court order… Read More "Barts Health Seeks High Court Ban After Oracle EBS Breach"
The UK’s data protection watchdog has asked the government for urgent answers after a Home Office report revealed racial bias in the retrospective facial recognition (RFR) technology used by police. Deputy information commissioner, Emily Keaney, said in a statement on… Read More "UK ICO Demands “Urgent Clarity” on Facial Recognition Bias Claims"
Just days after the disclosure of the React2Shell critical vulnerability, tracked as CVE-2025-55182, threat actors are actively exploiting the flaw in the wild. The vulnerability carries a CVSS v3.1 score of 10, the highest possible severity rating. Amazon Web Services… Read More "React2Shell Under Active Exploitation by China-Nexus Hackers"
A Russian-speaking, financially motivated threat actor has been observed taking advantage of commercial generative artificial intelligence (AI) services to compromise over 600 FortiGate devices located in 55 countries. That’s according to new findings from Amazon Threat Intelligence, which said it… Read More "AI-Assisted Threat Actor Compromises 600+ FortiGate Devices in 55 Countries"
