Microsoft reports that a threat actor exploited the OpenAI Assistants API to communicate between a command-and-control server and a hidden backdoor. The backdoor called SesameOp was used in a complex attack, allowing the attacker to access the compromised system for months through a network of web shells. The commands, Microsoft says, …
Read More »Pentest Copilot: AI-Based Tool 50% Time Optimizing in Pen-Testing
Pentest Copilot is a cutting-edge open-source tool that uses AI to simplify the workflow for ethical hackers during penetration testing. This web-based assistant uses large language models to automate tasks while allowing human oversight, representing a major improvement over traditional method. BugBase Security developed the tool, supporting all phases, from …
Read More »Seventy-two nations sign first UN treaty to fight cybercrime
The UN Convention against Cybercrime has gained momentum toward becoming a legally binding framework, with 72 of 193 member states signing it in Hanoi, Vietnam, on Saturday, October 25. The 41-page UN cybercrime treaty aims to enhance global collaboration among law enforcement and provide technical support to countries struggling with …
Read More »CISO Best Practices Cheat Sheet: Cloud Version
The “CISO Best Practices Cheat Sheet” is a concise, high-level guide designed to help Chief Information Security Officers (CISOs) and senior security leaders manage and mature their organization’s information security strategy. It’s typically created by cybersecurity vendors (like Wiz, Palo Alto Networks, or SANS Institute) as a strategic reference sheet—something …
Read More »Sri Lanka launched world’s first AI Powered, 3D-printed hotel
Sri Lanka has demonstrated its commitment to travel innovation with the opening of the Grand Serendib Colombo, the country’s first AI-powered hotel. This landmark project was launched on October 10, 2025, at the luxurious Shangri-La Hotel Colombo. The Grand Serendib Colombo combines AI with traditional hospitality to enhance the guest …
Read More »Google’s New AI Find Vulns: Rewrites Code to Patch Them
Google’s DeepMind announced CodeMender, an AI agent that automatically identifies and fixes vulnerable code to prevent exploits. The efforts add to the company’s ongoing efforts to improve AI-powered vulnerability discovery, such as Big Sleep and OSS-Fuzz. DeepMind stated that the AI agent is built to be reactive and proactive, addressing vulnerabilities …
Read More »Malaysia to launch AI fraud detection system help money before credited
Bank Negara Malaysia (BNM) and Payments Network Malaysia (PayNet) are developing an AI-driven fraud detection system targeted for rollout in 2026. The system will use machine learning, large language models and predictive analytics to identify suspicious transactions before they are completed. BNM deputy governor Datuk Marzunisham Omar said the system will …
Read More »500% surge in scans targeting Palo Alto Networks login portals
On October 3, 2025, GreyNoise noted a 500% increase in scans aimed at Palo Alto Networks login portals, the highest activity level in three months. Researchers found that more than 1,285 IPs scanned Palo Alto portals, an increase from the typical 200. They noted that 93% of these IPs were …
Read More »Total internet blackout in Afghanistan: Taliban enforce morality crackdown
Afghanistan has plunged into a nationwide internet blackout, with the Taliban cutting off more than 43 million citizens from global communications as part of what it has described as “morality measures.” Internet watchdog Netblocks said Monday in a post on X that multiple networks had been disconnected through the morning …
Read More »DataCenter Fire Takes 600+ South Korean Govt Websites Offline
A lithium-ion battery explosion at a key government data center in South Korea caused a fire that took down over 600 essential services, disrupting everyday life in the tech-savvy country. The incident started Friday night at the NIRS facility in Daejeon, impacting postal banking, mobile ID, tax collection, and emergency …
Read More »
InfoSecBulletin Cybersecurity for mankind