DWP accused of shielding AI deployments from public scrutiny
Civil rights groups have highlighted a “worrying lack of transparency” in how the Department for Work and Pensions (DWP) is embedding artificial intelligence (AI) in…
Month: July 2025
Amazon’s director of security on locking down enterprise AI
Cybersecurity is a growing concern for organizations as they sprint to bring AI into the enterprise. Amid deployment efforts, AI security issues have surpassed ransomware…
Lenovo Protection Driver Vulnerability Let Attackers Escalate Privilege and Execute Arbitrary Code
A buffer overflow vulnerability in Lenovo Protection Driver could allow local attackers with elevated privileges to execute arbitrary code on affected systems. The vulnerability, designated…
Threat Actors Exploit Ivanti Connect Secure Flaws to Deploy Cobalt Strike Beacon
Threat actors have been actively exploiting vulnerabilities in Ivanti Connect Secure, specifically CVE-2025-0282 and CVE-2025-22457, to deploy advanced malware, including MDifyLoader and Cobalt Strike Beacon.…
CISPE criticised over securing preferential cloud pricing on Microsoft products for members
A European trade body is facing criticism for striking a deal with Microsoft that allows its members to host and resell the software giant’s cloud…
Top US senator calls out supply-chain risk with DoD contractors
Listen to the article 2 min This audio is auto-generated. Please let us know if you have feedback. Dive Brief: Senate Intelligence Committee Chairman Tom…
New Phobos and 8base ransomware decryptor recover files for free
The Japanese police have released a Phobos and 8-Base ransomware decryptor that lets victims recover their files for free, with BleepingComputer confirming that it successfully…
Microsoft Defender for Office 365 New Dashboard to Provide More Details Across a Range of Threat Vectors
Microsoft today announced the rollout of a revamped customer dashboard in Microsoft Defender for Office 365, designed to deliver unprecedented insights across a broad spectrum…
How China’s Patriotic ‘Honkers’ Became the Nation’s Elite Cyber Spies
Topsec and Venustech were two firms alleged to have assisted these efforts. Topsec employed a number of former Honkers, including the founder of the Honker…
Microsoft Defender for Office 365 Gets Enhanced Threat Dashboard
Microsoft has announced significant transparency improvements for its email security platform, introducing a new customer-facing dashboard that provides detailed visibility into threat protection effectiveness across…
‘UNC3886 Is Attacking Our Critical Infrastructure Right Now’
In a rare and urgent late-night address, a senior Singapore official confirmed that the country is currently facing a sophisticated and ongoing cyberattack targeting its…
Hackers scanning for TeleMessage Signal clone flaw exposing passwords
Researchers are seeing exploitation attempts for the CVE-2025-48927 vulnerability in the TeleMessage SGNL app, which allows retrieving usernames, passwords, and other sensitive data. TeleMessage SGNL…