Blog

This week, we're diving into the future of crypto with post-quantum, persistent threats from state-sponsored APTs, supply chain vulnerabilities in open-source and browser extensions, and a critical SSH client flaw.

This week's cybersecurity news highlights how legacy infrastructure is enabling AI agent hijacking and botnets, while familiar threats like phishing, ransomware, and WordPress vulnerabilities continue to dominate.

This week, we're diving into the shady dealings of a botnet tied to a public firm, critical NGINX flaws, the looming threat of orphaned AI agents, the resurgence of INC Ransomware, and a new crypto-clipper campaign.

This week, we're looking at China-nexus espionage on Linux, UNC3753's blended vishing and physical intrusions, VS Code's extension update delay, ChatGPT's new Lockdown Mode, smart TVs turned into web-scraping proxies, and a SolarWinds Serv-U DoS flaw added to CISA's KEV catalog.

This week, AI bots caused account takeovers, a Linux flaw emerged, supply chain attacks targeted OpenAI users, and nation-state groups continued their campaigns.

AI is now a first-class weapon: LLM agents automate post-exploitation, state actors wield it at scale, and shadow AI apps bleed credentials quietly.

This week: a critical Fortinet RCE that's already being weaponised in the wild, a new Scattered Spider campaign targeting SaaS identity providers, and CISA's advisory on ICS vulnerabilities in water treatment facilities.