2026-05-05
2025-12-08
Amazon Security
IAM Policy Autopilot: An open-source tool that brings IAM policy expertise to builders and AI coding assistants
Dark Reading
Apache Issues Max-Severity Tika CVE After Patch Miss
Dark Reading
Exploitation Activity Ramps Up Against React2Shell
Amazon Security
AWS launches AI-enhanced security innovations at re:Invent 2025
Google Security Blog
Architecting Security for Agentic Capabilities in Chrome
Microsoft Security
Stronger together: New Beazley collaboration enhances cyber resilience
Schneier on Security
Substitution Cipher Based on The Voynich Manuscript
Malwarebytes
A week in security (December 1 – December 7)
ISC SANS
ISC Stormcast For Monday, December 8th, 2025 https://isc.sans.edu/podcastdetail/9728, (Mon, Dec 8th)
2025-12-06
Krebs on Security
Drones to Diplomas: How Russia’s Largest Private University is Linked to a $25M Essay Mill
2025-12-05
Schneier on Security
Friday Squid Blogging: Vampire Squid Genome
Atredis Partners
Designing a Passive LiDAR Detector Device - Hardware
Palo Alto Networks
Crossing the Autonomy Threshold
Dark Reading
CISOs Should Be Asking These Quantum Questions Today
Kevin Beaumont
Cybersecurity industry overreacts to React vulnerability, starts panic, burns own house down again
Schneier on Security
New Anonymous Phone Service
Troy Hunt
Weekly Update 481
Embrace The Red
The Normalization of Deviance in AI
ISC SANS
ISC Stormcast For Friday, December 5th, 2025 https://isc.sans.edu/podcastdetail/9726, (Fri, Dec 5th)
Amazon Security
China-nexus cyber threat groups rapidly exploit React2Shell vulnerability (CVE-2025-55182)
Elastic Security Labs
Automating detection tuning requests with Kibana cases
Joshua Rogers
Another AI slop story: ChatGPT vs. Human
Okta Security
Okta’s Response to React2Shell
Cloudflare
Cloudflare outage on December 5, 2025
2025-12-04
Dark Reading
How Agentic AI Can Boost Cyber Defense
Krebs on Security
SMS Phishers Pivot to Points, Taxes, Fake Retailers
Dark Reading
CISA Warns of 'Ongoing' Brickstorm Backdoor Attacks
Dark Reading
CISA Publishes Security Guidance for Using AI in OT
Talos Intelligence
Socomec DIRIS Digiware M series and Easy Config, PDF XChange Editor vulnerabilities
Talos Intelligence
Your year-end infosec wrapped
Microsoft Security
Cybersecurity strategies to prioritize now
Rapid7
React2Shell (CVE-2025-55182) - Critical unauthenticated RCE affecting React Server Components
Palo Alto Networks
Securing the AI Frontier
Bishop Fox Security
Arista NextGen Firewall XSS to RCE Chain
Malwarebytes
Canadian police trialing facial recognition bodycams
Searchlight Cyber
The Intelligence Hidden in Ransomware Data
Talos Intelligence
Spy vs. spy: How GenAI is powering defenders and attackers
ISC SANS
Nation-State Attack or Compromised Government? [Guest Diary], (Thu, Dec 4th)
Greynoise
A Hidden Pattern Within Months of Credential-Based Attacks Against Palo Alto GlobalProtect
2025-12-03
Ars Technica Security
Admins and defenders gird themselves against maximum-severity server vuln
Infernux Blog
Lab - Defender for IoT configuration
Dark Reading
'ShadyPanda' Hackers Weaponize Millions of Browsers
Dark Reading
Arizona AG Sues Temu Over 'Stealing' User Data
Ars Technica Security
Fraudulent gambling network may actually be something more nefarious
Google Security Blog
Android expands pilot for in-call scam protection for financial apps
Bishop Fox Security
What Will Shape Cybersecurity in 2026: AI Speed, Expanding Attack Surfaces, and Specialized Red Teams
Black Hills Info Sec
Inside the BHIS SOC: A Conversation with Hayden Covington
Searchlight Cyber
December 3rd – This Week’s Top Cybersecurity and Dark Web Stories
Moonlock
Moonlock’s 2025 macOS threat report
Dark Reading
China Researches Ways to Disrupt Satellite Internet
Fastly
Fastly’s Proactive Protection for React2Shell, Critical React RCE CVE-2025-55182 and CVE-2025-66478
2025-12-02
Dark Reading
Researchers Use Poetry to Jailbreak AI Models
Kevin Beaumont
Small numbers of Notepad++ users reporting security woes
Microsoft Security
How to build forward-thinking cybersecurity teams for tomorrow
Mend
Mend.io + Wiz: A New Code-to-Cloud Integration for Accurate, Context-Driven Risk Prioritization
White Knight Labs
UEFI Vulnerability Analysis Using AI: Part 1
Palo Alto Networks
Unit 42 Incident Response Retainer for AWS Security Incident Response
Schneier on Security
Like Social Media, AI Requires Difficult Choices
Alex Schapiro
How I Reverse Engineered a Billion-Dollar Legal AI Tool and Found 100k+ Confidential Files