International

A new vulnerability scoring system, the AI Vulnerability Scoring System (AIVSS), has been announced. It aims to address shortcomings of traditional models like the Common Vulnerability Scoring System (CVSS) that cannot effectively evaluate the complexity of modern AI technologies. AI security expert Ken Huang introduced the AIVSS framework, noting that …

OWASP has released an updated Top 10 list of key web application risks, adding two new categories and rearranging the order. This 2025 release candidate, which is a near-final draft of the flagship OWASP Top 10 list, is open for comment until November 20. Broken Access Control remains the top …

Tenable researchers found 7 new vulnerabilities in OpenAI’s ChatGPT, putting users at risk of data theft and safety breaches through new attacks on AI systems dubbed HackedGPT. Flaws known as HackedGPT were found during testing of OpenAI’s ChatGPT-4o and some persist in ChatGPT-5. OpenAI has fixed some issues, but others …

Microsoft reports that a threat actor exploited the OpenAI Assistants API to communicate between a command-and-control server and a hidden backdoor. The backdoor called SesameOp was used in a complex attack, allowing the attacker to access the compromised system for months through a network of web shells. The commands, Microsoft says, …

Pentest Copilot is a cutting-edge open-source tool that uses AI to simplify the workflow for ethical hackers during penetration testing. This web-based assistant uses large language models to automate tasks while allowing human oversight, representing a major improvement over traditional method. BugBase Security developed the tool, supporting all phases, from …

The UN Convention against Cybercrime has gained momentum toward becoming a legally binding framework, with 72 of 193 member states signing it in Hanoi, Vietnam, on Saturday, October 25. The 41-page UN cybercrime treaty aims to enhance global collaboration among law enforcement and provide technical support to countries struggling with …

The “CISO Best Practices Cheat Sheet” is a concise, high-level guide designed to help Chief Information Security Officers (CISOs) and senior security leaders manage and mature their organization’s information security strategy. It’s typically created by cybersecurity vendors (like Wiz, Palo Alto Networks, or SANS Institute) as a strategic reference sheet—something …

Sri Lanka has demonstrated its commitment to travel innovation with the opening of the Grand Serendib Colombo, the country’s first AI-powered hotel. This landmark project was launched on October 10, 2025, at the luxurious Shangri-La Hotel Colombo. The Grand Serendib Colombo combines AI with traditional hospitality to enhance the guest …

Google’s DeepMind announced CodeMender, an AI agent that automatically identifies and fixes vulnerable code to prevent exploits. The efforts add to the company’s ongoing efforts to improve AI-powered vulnerability discovery, such as Big Sleep and OSS-Fuzz. DeepMind stated that the AI agent is built to be reactive and proactive, addressing vulnerabilities …

Bank Negara Malaysia (BNM) and Payments Network Malaysia (PayNet) are developing an AI-driven fraud detection system targeted for rollout in 2026. The system will use machine learning, large language models and predictive analytics to identify suspicious transactions before they are completed. BNM deputy governor Datuk Marzunisham Omar said the system will …