Cybersecurity

CVE-2025-31199: An app may be able to access sensitive user data. Affects Spotlight       x           CVE-2025-43292: An app may be able to access sensitive user data. Affects CoreMedia     x             CVE-2025-43294: An app may be able to access sensitive user data. Affects MallocStackLogging x       x x       CVE-2025-43322: An app...
Full Transcript Greg Linares (AKA Laughing Mantis) joins us to tell us about how he became the youngest hacker to be arrested in Arizona. Follow Greg on Twitter: https://x.com/Laughing_Mantis. Support for this show comes from...

Preventing business disruption and building cyber-resilience with MDR

Given the serious financial and reputational risks of incidents that grind business...

How We (Almost) Found Chromium’s Bug via Crash Reports to Report URI

Tracking down bugs in software is a pain that all of us...

BRONZE BUTLER exploits Japanese asset management software vulnerability – Sophos News

In mid-2025, Counter Threat Unit™ (CTU) researchers observed a sophisticated BRONZE BUTLER campaign that exploited a zero-day vulnerability in Motex LANSCOPE Endpoint Manager to...

Google’s Built-In AI Defenses on Android Now Block 10 Billion Scam Messages a Month

Google on Thursday revealed that the scam defenses built into Android safeguard users around the world from more than 10 billion suspected malicious calls...

Sophos’ Secure by Design 2025 Progress – Sophos News

In 2024, we became one of the first organizations to commit to CISA’s Secure by Design initiative. Aligned with our core organizational values around...

BlueNoroff’s latest campaigns: GhostCall and GhostHire

Introduction Primarily focused on financial gain since its appearance, BlueNoroff (aka. Sapphire Sleet, APT38, Alluring Pisces, Stardust Chollima, and TA444) has adopted new infiltration strategies...

Bytes over DNS – SANS Internet Storm Center

I was intrigued when Johannes talked about malware that uses BASE64 over DNS to communicate. Take a DNS request like this: label1.label2.tld. Labels in a...

Canada Fines Cybercrime Friendly Cryptomus $176M – Krebs on Security

Financial regulators in Canada this week levied $176 million in fines against Cryptomus, a digital payments platform that supports dozens of Russian cryptocurrency exchanges...

How to hack a prison, and the hidden threat of online checkouts • Graham Cluley

A literal insider threat: we head to a Romanian prison where “self-service” web kiosks allowed inmates...

MG – Darknet Diaries

Full Transcript In this episode we talk with MG (https://x.com/MG), the brilliant (and notorious) hacker and hardware engineer behind the OMG...

Are cybercriminals hacking your systems – or just logging in?

As bad actors often simply waltz through companies’ digital front doors with...

Inside the Synthient Threat Data

Where is your data on the internet? I mean, outside the places...

Recent articles