Collaborate Disseminate
Microsoft on Tuesday announced an autonomous artificial intelligence (AI) agent that can analyze and classify software without assistance in an effort to advance malware detection efforts.
The large language model (LLM)-powered autonomous malware class… Continue reading Microsoft Launches Project Ire to Autonomously Classify Malware Using AI Tools
Trend Micro has released mitigations to address critical security flaws in on-premise versions of Apex One Management Console that it said have been exploited in the wild.
The vulnerabilities (CVE-2025-54948 and CVE-2025-54987), both rated 9.4 on the C… Continue reading Trend Micro Confirms Active Exploitation of Critical Apex One Flaws in On-Premise Systems
The Computer Emergency Response Team of Ukraine (CERT-UA) has warned of cyber attacks carried out by a threat actor called UAC-0099 targeting government agencies, the defense forces, and enterprises of the defense-industrial complex in the country.
The… Continue reading CERT-UA Warns of HTA-Delivered C# Malware Attacks Using Court Summons Lures
When Technology Resets the Playing Field
In 2015 I founded a cybersecurity testing software company with the belief that automated penetration testing was not only possible, but necessary. At the time, the idea was often met with skepticism, but today,… Continue reading AI Is Transforming Cybersecurity Adversarial Testing – Pentera Founder’s Vision
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Tuesday added three old security flaws impacting D-Link routers to its Known Exploited Vulnerabilities (KEV) catalog, based on evidence of active exploitation in the wild.
The high-sev… Continue reading CISA Adds 3 D-Link Router Flaws to KEV Catalog After Active Exploitation Reports
A combination of propagation methods, narrative sophistication, and evasion techniques enabled the social engineering tactic known as ClickFix to take off the way it did over the past year, according to new findings from Guardio Labs.
“Like a real-worl… Continue reading ClickFix Malware Campaign Exploits CAPTCHAs to Spread Cross-Platform Infections
Google has released security updates to address multiple security flaws in Android, including fixes for two Qualcomm bugs that were flagged as actively exploited in the wild.
The vulnerabilities include CVE-2025-21479 (CVSS score: 8.6) and CVE-2025-270… Continue reading Google’s August Patch Fixes Two Qualcomm Vulnerabilities Exploited in the Wild
Cybersecurity researchers have disclosed a high-severity security flaw in the artificial intelligence (AI)-powered code editor Cursor that could result in remote code execution.
The vulnerability, tracked as CVE-2025-54136 (CVSS score: 7.2), has been c… Continue reading Cursor AI Code Editor Vulnerability Enables RCE via Malicious MCP File Swaps Post Approval
In SaaS security conversations, “misconfiguration” and “vulnerability” are often used interchangeably. But they’re not the same thing. And misunderstanding that distinction can quietly create real exposure.
This confusion isn’t just semantics. It refle… Continue reading Misconfigurations Are Not Vulnerabilities: The Costly Confusion Behind Security Risks
Why do SOC teams still drown in alerts even after spending big on security tools? False positives pile up, stealthy threats slip through, and critical incidents get buried in the noise. Top CISOs have realized the solution isn’t adding more and more to… Continue reading How Top CISOs Save Their SOCs from Alert Chaos to Never Miss Real Incidents