OpenAI’s gpt-oss-safeguard enables developers to build safer AI
29
Oct
2025

OpenAI’s gpt-oss-safeguard enables developers to build safer AI

OpenAI is releasing a research preview of gpt-oss-safeguard, a set of open-weight reasoning models for safety classification. The models come…

Experts Reports Sharp Increase in Automated Botnet Attacks Targeting PHP Servers and IoT Devices
29
Oct
2025

Experts Reports Sharp Increase in Automated Botnet Attacks Targeting PHP Servers and IoT Devices

Oct 29, 2025Ravie LakshmananVulnerability / Internet of Things Cybersecurity researchers are calling attention to a spike in automated attacks targeting…

Typosquatted Npm Packages Deliver Cross-Platform Malware
29
Oct
2025

Typosquatted Npm Packages Deliver Cross-Platform Malware

Security researchers have disclosed a campaign of typosquatted npm packages that automatically execute on install and ultimately deliver a cross-platform credential stealer. According to researchers, the malicious…

AI adoption outpaces corporate governance, security controls
29
Oct
2025

AI adoption outpaces corporate governance, security controls

Dive Brief: The use of AI in the corporate workplace is growing so quickly that companies do not have the…

29
Oct
2025

An Automated Exploitation Toolkit Targeting Hikvision IP Cameras

A new open-source tool called HikvisionExploiter has emerged, designed to automate attacks on vulnerable Hikvision IP cameras. Released on GitHub…

PureHVNC RAT Distributed via Weaponized Judicial Documents
29
Oct
2025

PureHVNC RAT Distributed via Weaponized Judicial Documents

The campaign leverages judicial document themes to distribute Hijackloader malware, which subsequently deploys PureHVNC remote access trojan (RAT)—marking the first…

Post Office Capture redress scheme ‘went down like lead balloon’ and is ‘discriminatory’
29
Oct
2025

Post Office Capture redress scheme ‘went down like lead balloon’ and is ‘discriminatory’

A former subpostmaster who suffered at the hands of the Post Office’s faulty Capture accounting software has said the announced…

Wing FTP Server flaw actively exploited shortly after technical details were made public
29
Oct
2025

Russian hackers, likely linked to Sandworm, exploit legitimate tools against Ukrainian targets

Russian hackers, likely linked to Sandworm, exploit legitimate tools against Ukrainian targets Pierluigi Paganini October 29, 2025 Russian actors, likely…

AI risks pack a punch, but governance provides a buffer
29
Oct
2025

AI risks pack a punch, but governance provides a buffer

Dive Brief: Enterprise decision-makers say AI risks are packing a punch as adoption grows and tool rollouts continue, according to…

Cyber shield
29
Oct
2025

Streamlining Patching and Vulnerability Remediation

For years, patch management has been one of the least glamorous yet most consequential aspects of IT operations. Vulnerabilities emerge…

10 Malicious npm Packages with Auto-Run Feature on Install Deploys Multi-Stage Credential Harvester
29
Oct
2025

10 Malicious npm Packages with Auto-Run Feature on Install Deploys Multi-Stage Credential Harvester

The npm ecosystem faces a sophisticated new threat as ten malicious packages have emerged, each designed to automatically execute during…

Google Publishes New Guide to Help Defenders Monitor Privileged Accounts
29
Oct
2025

Google Publishes New Guide to Help Defenders Monitor Privileged Accounts

Google has released comprehensive guidance on protecting privileged accounts, recognizing that stolen credentials have become one of the most dangerous…