Cybersecurity

Tanya – Darknet Diaries

Full Transcript Tanya Janca is a globally recognized AppSec (application security) expert and founder of We Hack Purple. In this episode,...

In memoriam: David Harley

Former colleagues and friends remember the cybersecurity researcher, author, and mentor whose...

2 Billion Email Addresses Were Exposed, and We Indexed Them All in Have I Been Pwned

I hate hyperbolic news headlines about data breaches, but for the "2...

Windows Server Update Services (WSUS) vulnerability abused to harvest sensitive data – Sophos News

Counter Threat Unit™ (CTU) researchers are investigating exploitation of a remote code execution vulnerability (CVE-2025-59287) in Microsoft’s Windows Server Update Service (WSUS), a native...

Samsung Zero-Click Flaw Exploited to Deploy LANDFALL Android Spyware via WhatsApp

Nov 07, 2025Ravie LakshmananMobile Security / Vulnerability A now-patched security flaw in Samsung Galaxy Android devices was exploited as a zero-day to deliver a "commercial-grade"...

A CISO playbook – Sophos News

The North Korean worker scheme has expanded into a global threat. Although it originally focused on U.S. technology companies, the scheme has spread to...

How we linked ForumTroll APT to Dante spyware by Memento Labs

In March 2025, Kaspersky detected a wave of infections that occurred when users clicked on personalized phishing links sent via email. No further action...

Apple Patches Everything, Again – SANS Internet Storm Center

CVE-2025-31199: An app may be able to access sensitive user data. Affects Spotlight       x           CVE-2025-43292: An app may be able to access sensitive user data. Affects CoreMedia     x             CVE-2025-43294: An...

Greg – Darknet Diaries

Full Transcript Greg Linares (AKA Laughing Mantis) joins us to tell us about how he became the youngest hacker to be...

Preventing business disruption and building cyber-resilience with MDR

Given the serious financial and reputational risks of incidents that grind business...

How We (Almost) Found Chromium’s Bug via Crash Reports to Report URI

Tracking down bugs in software is a pain that all of us...

BRONZE BUTLER exploits Japanese asset management software vulnerability – Sophos News

In mid-2025, Counter Threat Unit™ (CTU) researchers observed a sophisticated BRONZE BUTLER campaign that exploited a zero-day vulnerability in Motex LANSCOPE Endpoint Manager to...

Recent articles