Automation Is Redefining Pentest Delivery
Pentesting remains one of the most effective ways to identify real-world security weaknesses before adversaries do. But as the threat landscape has evolved, the way we deliver pentest results hasn’t…
SAP S/4HANA Critical Vulnerability CVE-2025-42957 Exploited in the Wild
A critical security vulnerability impacting SAP S/4HANA, an Enterprise Resource Planning (ERP) software, has come under active exploitation in the wild. The command injection vulnerability, tracked as CVE-2025-42957 (CVSS score:…
TAG-150 Develops CastleRAT in Python and C, Expanding CastleLoader Malware Operations
The threat actor behind the malware-as-a-service (MaaS) framework and loader called CastleLoader has also developed a remote access trojan known as CastleRAT. “Available in both Python and C variants, CastleRAT’s…
CISA Orders Immediate Patch of Critical Sitecore Vulnerability Under Active Exploitation
Federal Civilian Executive Branch (FCEB) agencies are being advised to update their Sitecore instances by September 25, 2025, following the discovery of a security flaw that has come under active…
Malicious npm Packages Impersonate Flashbots, Steal Ethereum Wallet Keys
A new set of four malicious packages have been discovered in the npm package registry with capabilities to steal cryptocurrency wallet credentials from Ethereum developers. “The packages masquerade as legitimate…
Noisy Bear Targets Kazakhstan Energy Sector With BarrelFire Phishing Campaign
A threat actor possibly of Russian origin has been attributed to a new set of attacks targeting the energy sector in Kazakhstan. The activity, codenamed Operation BarrelFire, is tied to…
This Week In Techdirt History: August 31st – September 6th
Five Years Ago This week in 2020, AT&T was hypocritically calling for Section 230 reform and astroturfing the FCC in support of Trump’s attack on social media, while we submitted…
Light Pollution From Elon Musk’s Starlink Continues To Harm Astronomy
For years, scientific researchers have warned that Elon Musk’s Starlink low Earth orbit (LEO) satellite broadband constellations are harming scientific research. Simply put, the light pollution Musk claimed would never…
The RFK Jr. Congressional Hearing Was An Unmitigated Disaster
Well, that was certainly a thing. We mentioned yesterday that RFK Jr. was scheduled to go before the Senate Finance committee to answer all kinds of questions as to just…
Something Good The Supreme Court Could Do: Finally Fix The First Amendment Problems With Platform Liability For Copyright Infringement
Below is the brief, in Cox Communications v. Sony Music Entertainment, I have been waiting my career to write, to finally tell the Supreme Court that when it comes to…