Attack

Humanix has launched a solution to combat social engineering attacks using AI trained on human psychology. The company aims to provide real-time detection and response capabilities for these attacks, which have become the leading breach vector for organizations worldwide.

Rapid7 has been recognized as a Leader in the 2025 Gartner Magic Quadrant for Exposure Assessment Platforms for its Exposure Command offering. This platform focuses on exposure detection, remediation, and aligns with the Continuous Threat Exposure Management model, aiming to enhance security operations.

Indirect prompt injection poses risks by embedding instructions in normal data, leading to potential security breaches.

NPM supply chain compromise revealed on Sept. 15, 2025, impacts over 500 packages with malware Shai-Hulud and credential theft.

A DNS rebinding attack combined with CORS manipulation can lead to unauthorized access to sensitive data across private networks.

CISA reports that ISO 15118-2's flaw allows potential exploitation but no known public attacks have been confirmed.

Tenable recognized as a Leader in the 2025 Gartner Magic Quadrant for Exposure Assessment Platforms, excelling in execution and vision.

A vulnerability in ISO 15118-2 related to EV chargers carries a CVSS score of 7.2, highlighting risks in transportation.

CISA stops updating advisories on Siemens ICS vulnerabilities after January 10, 2023. Users must refer to Siemens for current info.

A flaw in CORS headers across major browsers allows attackers to leverage DNS rebinds for unrestricted requests, posing risks.

Hitachi Energy identified vulnerabilities in MACH GWS, urging users to update to Version 3.5 for improved security measures.

A local attacker can exploit an authentication timing vulnerability in the Tomahawk component of Hiawatha versions 8.5-11.7.