The Scarlet Letter “V” – Google to begin publicly reporting the discovery of new vulnerabilities within 1 week of notifying the vendor.
Posted inCybersecurity News

The Scarlet Letter “V” – Google to begin publicly reporting the discovery of new vulnerabilities within 1 week of notifying the vendor.

Google’s Project Zero team has announced a new policy, effective July 29, 2025, to increase transparency around software vulnerabilities. Under this trial policy, Project Zero will publicly report the discovery of a new vulnerability within one week of notifying the affected vendor or project.
hacker and an AI robot
Posted inCybersecurity News

Agentic AI is coming for your children.. so OWASP issues security guidance for Agentic AI applications.

The Open Web Application Security Project (OWASP) has announced the publication of its Securing Agentic Applications Guide v1.0, a comprehensive, open-source framework designed to address the unique security challenges posed by agentic AI systems. Released on July 28, 2025, this guidance arrives in response to the rapid adoption of autonomous AI agents in business, critical infrastructure, and digital operations.
Apple addresses a critical Safari zero-day vulnerability during broad rollout of security updates.
Posted inCybersecurity News

Apple addresses a critical Safari zero-day vulnerability during broad rollout of security updates.

Apple this week rolled out a comprehensive set of security updates across its platforms to address several vulnerabilities, including a high-profile zero-day flaw in its WebKit browser engine. The vulnerability, tracked as CVE-2025-6558, has attracted acclaim and scrutiny due to its prior exploitation in the wild—most notably targeting users of Google Chrome earlier this month.
Chinese-linked Silk Typhoon hacking group files 15 patents for cyber espionage tools.
Posted inCybersecurity News

Chinese-linked Silk Typhoon hacking group files 15 patents for cyber espionage tools.

Recent investigations have revealed that several Chinese technology firms with connections to the state-sponsored hacking group Silk Typhoon (also known as Hafnium) have filed more than 15 patents related to advanced cyber espionage tools. The patents in question cover a wide array of capabilities, including tools for encrypted data extraction from endpoints, forensics on Apple devices, and remote access and control over routers and smart home infrastructure.
Cyberattack on St. Paul prompts Minnesota to declare a state of emergency and activate the National Guard.
Posted inCybersecurity News

Cyberattack on St. Paul prompts Minnesota to declare a state of emergency and activate the National Guard.

In response to a significant cyberattack targeting the City of St. Paul, Minnesota Governor Tim Walz has activated the Minnesota National Guard to assist in the ongoing recovery and investigation efforts. This move comes after St. Paul officials declared a state of emergency, citing the scale and complexity of the incident as exceeding the city’s internal response capacity.
Hackers exploit SAP NetWeaver to deploy Linux Auto-Color malware.
Posted inCybersecurity News

Hackers exploit SAP NetWeaver to deploy Linux Auto-Color malware.

Security researchers have uncovered an advanced cyberattack campaign leveraging a critical vulnerability in SAP NetWeaver (CVE-2025-31324) to deploy a stealthy Linux backdoor known as Auto-Color. The campaign, which surfaced after a targeted attack on a US-based chemicals company in April 2025, highlights the growing threat landscape facing enterprise software platforms.