Security Bulletin

A study by Specops researcher David Ketler examined Argon2id's performance against current password-cracking hardware, specifically testing an eight-GPU system with Nvidia RTX 5090 cards and a single AMD EPYC 9B14 server processor.

Security firm DTEX's research reveals that the illicit IT worker scheme is a significant revenue stream for North Korea, with funds being channeled through organizations like Sobaeksu, Saenal, and Songkwang.

TechCrunch reports that the United Kingdom's incoming prime minister, Andy Burnham, has confirmed the government is abandoning a contentious digital ID card initiative that was announced by the previous administration.

Researchers pointed to fragmentation of the ransomware ecosystem, the emergence of new attackers, and expansion of attacks on less defended organizations.

The attack against the telecommunications firm caused significant internet outages, impacting the town office of Damariscotta, a community of approximately 2,300 residents.

A study by researchers from Purdue University, the U.S. Military Academy at West Point, and Florida International University examined over 220 apps, finding that nearly two-thirds contained third-party software development kits (SDKs).

The Kratos kit enabled cybercriminals with limited technical skills to harvest credentials, including passwords and session cookies, by providing convincing Microsoft-themed phishing pages.

The latest large language models have high false-positive rates and fail to take into account the context of scans, leading to more work for AppSec professionals.

Qilin exploited a patched Palo Alto VPN flaw, highlighting the cost of delayed patching.

A Russian-speaking actor, "Trim," dismantled publicly available frontier models and integrated them with offensive security tools.

Learn to build AI agent skills in the CLI—no coding required. Teach your AI your workflow once, connect your tools via MCP, and let it handle the busywork while you stay in control.