Vulnerabilities Trend Micro Warns of Apex One Vulnerabilities Exploited in Wild Trend Micro has rushed to fix two Apex One zero-days that may have been exploited by Chinese threat actors. Eduard KovacsAugust 6, 2025
Endpoint Security Flaws Expose 100 Dell Laptop Models to Implants, Windows Login Bypass ReVault vulnerabilities in the ControlVault3 firmware in Dell laptops could lead to firmware modifications or Windows login bypass. Ionut ArghireAugust 6, 2025
Artificial Intelligence Vibe Coding: When Everyone’s a Developer, Who Secures the Code? As AI makes software development accessible to all, security teams face a new challenge: protecting applications built by non-developers at unprecedented speed and scale. Kevin TownsendAugust 5, 2025
Management & Strategy Black Hat USA 2025 – Summary of Vendor Announcements (Part 1) Many companies are showcasing their products and services this week at the 2025 edition of the Black Hat conference in Las Vegas. SecurityWeek NewsAugust 5, 2025
Vulnerabilities SonicWall Hunts for Zero-Day Amid Surge in Firewall Exploitation Threat actors might be exploiting a zero-day vulnerability in SonicWall firewalls in a fresh wave of ransomware attacks. Ionut ArghireAugust 5, 2025
Artificial Intelligence Nvidia Triton Vulnerabilities Pose Big Risk to AI Models Nvidia has patched over a dozen vulnerabilities in Triton Inference Server, including another set of vulnerabilities that threaten AI systems. Eduard KovacsAugust 4, 2025
Artificial Intelligence AI Guardrails Under Fire: Cisco’s Jailbreak Demo Exposes AI Weak Points Cisco’s latest jailbreak method reveals just how easily sensitive data can be extracted from chatbots trained on proprietary or copyrighted content. Kevin TownsendAugust 4, 2025
M&A Tracker Cybersecurity M&A Roundup: 44 Deals Announced in July 2025 Forty-four cybersecurity merger and acquisition (M&A) deals were announced in July 2025. Eduard KovacsAugust 4, 2025
Nation-State Russian Cyberspies Target Foreign Embassies in Moscow via AitM Attacks: Microsoft Russian state-sponsored APT Secret Blizzard has used ISP-level AitM attacks to infect diplomatic devices with malware. Ionut ArghireAugust 1, 2025
Artificial Intelligence Browser Extensions Pose Serious Threat to Gen-AI Tools Handling Sensitive Data LayerX has disclosed an AI chatbot hacking method via web browser extensions it has named ‘man-in-the-prompt’. Eduard KovacsJuly 31, 2025
ICS/OT Honeywell Experion PKS Flaws Allow Manipulation of Industrial Processes Honeywell has patched several critical and high-severity vulnerabilities in its Experion PKS industrial process control and automation product. Eduard KovacsJuly 31, 2025
Funding/M&A Palo Alto Networks to Acquire CyberArk for $25 Billion Strategic acquisitions marks Palo Alto Networks' formal entry into the identity security space and accelerates its platform strategy. Mike LennonJuly 30, 2025
Data Breaches Cost of Data Breach in US Rises to $10.22 Million, Says Latest IBM Report The global average cost of a breach fell to $4.44 million (the first decline in five years), but the average US cost rose to... Kevin TownsendJuly 30, 2025
Cybercrime Minnesota Activates National Guard in Response to Cyberattack Minnesota Governor Tim Walz called in the National Guard to assist the City of Saint Paul in responding to a cyberattack. Ionut ArghireJuly 30, 2025
Endpoint Security Lenovo Firmware Vulnerabilities Allow Persistent Implant Deployment Vulnerabilities discovered by Binarly in Lenovo devices allow privilege escalation, code execution, and security bypass. Eduard KovacsJuly 29, 2025
ICS/OT Order Out of Chaos – Using Chaos Theory Encryption to Protect OT and IoT The need for secure encryption in IoT and IIoT devices is obvious, and potentially critical for OT and, by extension, much of the critical... Kevin TownsendJuly 29, 2025
Data Breaches NASCAR Confirms Personal Information Stolen in Ransomware Attack NASCAR says names, Social Security numbers, and other personal information was stolen in an April 2025 ransomware attack. Ionut ArghireJuly 28, 2025
Data Breaches Allianz Life Data Breach Impacts Most of 1.4 Million US Customers Allianz subsidiary said the information of customers, financial professionals and employees was compromised as a result of a hack. Eduard KovacsJuly 28, 2025
Ransomware BlackSuit Ransomware Group Transitioning to ‘Chaos’ Amid Leak Site Seizure The emerging Chaos ransomware appears to be a rebranding of BlackSuit, which had its leak site seized by law enforcement. Ionut ArghireJuly 28, 2025
Tracking & Law Enforcement US Targets North Korea’s Illicit Funds: $15M Rewards Offered as American Woman Jailed in IT Worker Scam Christina Chapman was sentenced to prison for helping North Korean IT workers infiltrate US companies and running a laptop farm for them. Ionut ArghireJuly 25, 2025