Afraid of missing important security news during the week? We're here to help! Every week we put together a curated list of all important security news in one place, for your reading pleasure. Enjoy!
For the less technical
- Mastodon updates its terms to prohibit AI model training
- Group of high-profile authors sue Microsoft over use of their books in AI training
- Meta secures bittersweet fair use victory in AI ‘piracy’ case
- Former Western Sydney University student charged after allegedly hacking system for personal gain over years
- Patient's death linked to cyber attack on NHS, hospital trust says
- Russian court releases several REvil ransomware gang members
For the more technical
- When memory refuses to forget: Sensitive data persistence in desktop application
- Remote code execution in CentOS Web Panel - CVE-2025-48703
- Is b for backdoor? Pre-auth RCE chain in Sitecore Experience Platform
- CitrixBleed 2: Electric Boogaloo — CVE-2025–5777
- Multiple Brother devices: Multiple vulnerabilities
- Attackers actively exploiting critical vulnerability in Motors theme
- ConnectUnwise: Threat actors abuse ConnectWise as builder for signed malware
- Ransomware gangs collapse as Qilin seizes control
- Dire Wolf strikes: New ransomware group targeting global sectors
- Dissecting a malicious Havoc sample
- DRAT V2: Updated DRAT emerges in TAG-140’s arsenal
- FileFix - A ClickFix alternative
- How much EU is in DNS4EU?
- Russian Internet users are unable to access the open Internet
- Resurgence of the Prometei botnet
- Cryptominers’ anatomy: Shutting down mining botnets
- Black Hat SEO poisoning search engine results for AI to distribute malware
- Ongoing campaign abuses Microsoft 365’s Direct Send to deliver phishing emails
- OneClik: A ClickOnce-based APT campaign targeting energy, oil and gas infrastructure
- Iranian Educated Manticore targets leading tech academics
- Hive0154 aka Mustang Panda shifts focus on Tibetan community to deploy Pubload backdoor
- Another wave: North Korean contagious interview campaign drops 35 new malicious npm packages
Did you enjoy this list? You can subscribe to one of our feeds on Twitter, Facebook or RSS.
Comments