Cyber Scoop

4 min read

• access tokens
• Cybersecurity
• Gainsight
• Google Threat Intelligence Group
• Mandiant
• OAuth
• Salesforce
• Salesloft
• Salesloft Drift
• supply chain
• supply chain attacks
• supply chain security
• Threats

Gainsight CEO downplays impact of attack that spread to Salesforce environments

Cyber Scoop November 25, 2025

Gainsight CEO downplays impact of attack that spread to...

Read More

4 min read

• AI
• artificial intelligence (AI)
• Cybersecurity
• large language models
• Palo Alto Networks
• Research
• Technology
• Threat Intelligence
• underground forums

Underground AI models promise to be hackers ‘cyber pentesting waifu’ 

Cyber Scoop November 25, 2025

Underground AI models promise to be hackers ‘cyber pentesting...

Read More

4 min read

• Aikido Security
• Cybersecurity
• GitHub
• npm
• open source
• open source software
• Research
• Sola Security
• supply chain attacks
• supply chain security
• Tanium
• Threats
• Wiz

Shai-Hulud worm returns stronger and more automated than ever before

Cyber Scoop November 24, 2025

Shai-Hulud worm returns stronger and more automated than ever...

Read More

6 min read

• AI
• AI safety
• Anthropic
• Claude
• Cybersecurity
• jailbreak
• large language models
• Research
• Technology

New research finds that Claude breaks bad if you teach it to cheat

Cyber Scoop November 24, 2025

New research finds that Claude breaks bad if you...

Read More

2 min read

• Android
• Cybersecurity and Infrastructure Security Agency (CISA)
• Geopolitics
• Government
• Privacy
• Russia
• Samsung
• signal
• spyware
• WhatsApp

CISA alert draws attention to spyware’s targeting of messaging apps

Cyber Scoop November 24, 2025

CISA alert draws attention to spyware’s targeting of messaging...

Read More

3 min read

• cyber hygiene
• Cybersecurity
• hacklore
• multi-factor authentication (MFA)
• password manager

This campaign aims to tackle persistent security myths in favor of better advice

Cyber Scoop November 24, 2025

This campaign aims to tackle persistent security myths in...

Read More

4 min read

• API
• Commentary
• Cybersecurity
• OAuth
• op-ed
• SaaS
• Salesforce
• Salesloft Drift
• zero-trust networks

When trust turns toxic: Lessons from the Salesloft Drift incident

Cyber Scoop November 24, 2025

When trust turns toxic: Lessons from the Salesloft Drift...

Read More

8 min read

• AI
• artificial intelligence (AI)
• Cybersecurity
• Cybersecurity and Infrastructure Security Agency (CISA)
• Department of Homeland Security (DHS)
• Government
• NTIA
• open source software
• software bill of materials
• source code
• Technology
• vulnerabilities

The slow rise of SBOMs meets the rapid advance of AI

Cyber Scoop November 24, 2025

The slow rise of SBOMs meets the rapid advance...

Read More

3 min read

• Apple
• Department of Homeland Security (DHS)
• EFF
• FOIA
• Google
• Government
• ICE
• Meta
• Privacy

Privacy group sues feds over talks with tech companies on ICE raid trackers 

Cyber Scoop November 21, 2025

Privacy group sues feds over talks with tech companies...

Read More

7 min read

• Commentary
• Cybersecurity
• fedramp
• FISMA
• Government
• HTTPS
• SQLi attack
• web forms
• XSS

Legacy web forms are the weakest link in government data security

Cyber Scoop November 21, 2025

Legacy web forms are the weakest link in government...

Read More