1
0
1
0
1
0
1
0
0
1
1
0
1
0
VulnHub

AI-Powered Cybersecurity Intelligence

Latest Intelligence

darkreading
SentinelOne Acquires AI Startup Prompt Security

SentinelOne has acquired Prompt Security, an AI startup that specializes in detecting AI tools used in browsers and on desktops. The integration of Prompt Security's platform into SentinelOne's Singularity platform aims to enhance cybersecurity measures against AI-related threats. Read Original »


Impact: Singularity platform

Remediation: Not specified

Added:

The Hacker News
AI Slashes Workloads for vCISOs by 68% as SMBs Demand More – New Report Reveals

As cyber threats and risks increase, cybersecurity has become essential for businesses, particularly SMBs. A report by Cynomi indicates that 79% of MSPs and MSSPs are witnessing a high demand for vCISO services to manage these challenges. Read Original »


Impact: Not specified

Remediation: Not specified

Added:

The Hacker News
Microsoft Launches Project Ire to Autonomously Classify Malware Using AI Tools

Microsoft has introduced Project Ire, an autonomous AI agent designed to analyze and classify malware without human intervention. This prototype aims to enhance malware detection capabilities using a large language model. Read Original »


Impact: Not specified

Remediation: Not specified

Microsoft

Added:

Securelist
Driver of destruction: How a legitimate driver is being used to take down AV processes

Kaspersky experts have identified new malware that exploits the legitimate ThrottleStop driver to terminate antivirus (AV) processes. Their solutions are capable of detecting and countering this threat. Read Original »


Impact: Not specified

Remediation: Kaspersky solutions successfully counter and detect this threat.

Added:

SecurityWeek
Black Hat USA 2025 – Summary of Vendor Announcements (Part 2)

The article highlights various companies presenting their cybersecurity products and services at the Black Hat conference in Las Vegas for 2025. It serves as a summary of vendor announcements made during the event. Read Original »


Impact: Not specified

Remediation: Not specified

Added:

SecurityWeek
Adobe Issues Out-of-Band Patches for AEM Forms Vulnerabilities With Public PoC

Adobe has issued urgent security updates to address two vulnerabilities in AEM Forms. These vulnerabilities are particularly concerning as there is proof-of-concept code publicly available, which could facilitate exploitation. Read Original »


Impact: AEM Forms

Remediation: Apply the urgent security updates released by Adobe.

Added:

The Hacker News
Trend Micro Confirms Active Exploitation of Critical Apex One Flaws in On-Premise Systems

Trend Micro has confirmed that critical security flaws in the on-premise versions of its Apex One Management Console are being actively exploited. The vulnerabilities, identified as CVE-2025-54948 and CVE-2025-54987, involve command injection and remote code execution, both rated 9.4 on the CVSS scale. Read Original »


Impact: Apex One Management Console

Remediation: Mitigations have been released by Trend Micro

CVEVulnerability

Added:

The Hacker News
CERT-UA Warns of HTA-Delivered C# Malware Attacks Using Court Summons Lures

CERT-UA has issued a warning regarding cyber attacks by the threat actor UAC-0099, which are targeting Ukrainian government agencies and defense-related enterprises. These attacks utilize phishing emails to deliver various malware families, including MATCHBOIL and MATCHWOK. Read Original »


Impact: Government agencies, defense forces, defense-industrial complex

Remediation: Not specified

Phishing

Added:

darkreading
With Eyes on AI, African Orgs Push Security Awareness

African organizations are increasingly aware of the need for cybersecurity training in light of the rise of artificial intelligence. However, they often do not conduct frequent testing of this training and lack trust in the effectiveness of the results. Read Original »


Impact: Not specified

Remediation: Not specified

Added:

The Hacker News
AI Is Transforming Cybersecurity Adversarial Testing - Pentera Founder’s Vision

The article discusses the evolution of automated penetration testing in cybersecurity, highlighting the founder's journey from skepticism to establishing a successful company with over 1200 enterprise customers. It emphasizes the necessity of such technology in transforming cybersecurity practices. Read Original »


Impact: Not specified

Remediation: Not specified

Added:

The Hacker News
CISA Adds 3 D-Link Vulnerabilities to KEV Catalog Amid Active Exploitation Evidence

CISA has added three high-severity vulnerabilities affecting D-Link Wi-Fi cameras and video recorders to its KEV catalog due to evidence of active exploitation. These vulnerabilities date back to 2020 and 2022. Read Original »


Impact: D-Link Wi-Fi cameras and video recorders

Remediation: Not specified

CVE

Added:

darkreading
To Raise or Not to Raise: Bootstrapped Founders Share Their Views

The article discusses the perspectives of three startup founders on the benefits of raising venture capital funding. They emphasize that while funding can be advantageous, the ultimate success of a company hinges on how well its product meets customer needs. Read Original »


Impact: Not specified

Remediation: Not specified

Added:

The Hacker News
ClickFix Malware Campaign Exploits CAPTCHAs to Spread Cross-Platform Infections

The ClickFix malware campaign has effectively utilized sophisticated social engineering tactics and evasion techniques to propagate rapidly, surpassing previous scams like fake browser updates. This new strain demonstrates a significant evolution in malware distribution methods over the past year. Read Original »


Impact: Not specified

Remediation: Not specified

Update

Added:

SecurityWeek
Microsoft’s Project Ire Autonomously Reverse Engineers Software to Find Malware

Microsoft has introduced Project Ire, an autonomous AI agent designed to analyze software files for malicious content. This prototype aims to enhance cybersecurity by automating the reverse engineering process to identify malware. Read Original »


Impact: Not specified

Remediation: Not specified

Microsoft

Added:

The Hacker News
Google’s August Patch Fixes Two Qualcomm Vulnerabilities Exploited in the Wild

Google has issued security updates to fix multiple vulnerabilities in Android, including two Qualcomm bugs that are actively being exploited. The vulnerabilities were disclosed by Qualcomm in June 2025 and have high CVSS scores, indicating their severity. Read Original »


Impact: Android devices using Qualcomm chipsets

Remediation: Apply the latest security updates from Google

AndroidCVEGooglePatch

Added: