News
Thursday, October 16, 2025 Top 5 Cybersecurity Stories You Should Know 1. Microsoft Addresses Three Active Zero-Day Vulnerabilities in October 2025 Patch — tl;dr: In its October 2025 Patch Tuesday, Microsoft released fixes for over 175 vulnerabilities, including three zero-days: CVE-2025-24990, CVE-2025-59230, and CVE-2025-47827. CVE-2025-24990 affects a driver for the
News
Wednesday, October 15, 2025 Top 5 Cybersecurity Stories You Should Know 1. Microsoft Addresses Three Active Zero-Day Vulnerabilities in October Patch — tl;dr: In its October 2025 Patch Tuesday update, Microsoft addressed over 175 vulnerabilities, including three actively exploited zero-days: CVE-2025-24990, CVE-2025-59230, and CVE-2025-47827. CVE-2025-24990 affects a third-party driver for
Artificial Intelligence is changing the face of cybersecurity — not tomorrow, but right now. In my latest keynote, I unpack how attackers are already exploiting AI systems using prompt injections, data poisoning, and autonomous exploitation techniques, and why every security team needs to rethink their defenses. 🎥 Watch the full keynote here:
News
Tuesday, October 14, 2025 Top 5 Cybersecurity Stories You Should Know 1. Critical WordPress Flaw Exploited, SonicWall Backup Breach, Oracle Zero-Day Patched — tl;dr: A critical vulnerability in the WordPress Service Finder theme (CVE-2025-5947) has led to over 13,800 attack attempts, allowing hackers to hijack administrator accounts. SonicWall confirmed
News
Monday, October 13, 2025 Top 5 Cybersecurity Stories You Should Know 1. North Korean Hackers Deploy 338 Malicious npm Packages in Supply Chain Attack — tl;dr: North Korean state-sponsored hackers have launched a supply chain attack targeting software developers, deploying 338 malicious npm packages as part of a campaign named
News
Monday, October 13, 2025 Top 5 Cybersecurity Stories You Should Know 1. AI and the Future of American Politics — tl;dr: Two years ago, Americans anxious about the forthcoming 2024 presidential election were considering the malevolent force of an election influencer: artificial intelligence. Over the past several years, we have
News
Sunday, October 12, 2025 Top 5 Cybersecurity Stories You Should Know 1. Wireshark 4.4.10 and 4.6.0 Released, (Sun, Oct 12th) — tl;dr: Wireshark release 4.4.10 fixes 6 bugs and 1 vulnerability (in the MONGO dissector). ↪ https://isc.sans.edu/diary/rss/32358 Featured LufSec
News
Saturday, October 11, 2025 Top 5 Cybersecurity Stories You Should Know 1. Cybersecurity For Dummies, 3rd Edition eBook FREE for a Limited Time — tl;dr: In today's hyper-connected world, cyber threats are more sophisticated and frequent than ever - ransomware, data breaches, and social engineering scams, targeting everyone
Hackers. CISOs. Researchers. Engineers. Different worlds, one mission — to understand and secure the digital frontier. The LufSec Podcast is where these worlds collide. It’s where stories meet strategy, and cybersecurity stops being abstract. It’s where the people behind the firewalls finally speak. 🔐 Why We Created the LufSec Podcast
Artificial Intelligence is not just changing business—it’s rewriting the rules of cybersecurity. As attackers weaponize prompt injection, data poisoning, and model manipulation, we’re witnessing the rise of a new digital battlefield. On October 9, 2025 (10:00 AM EDT), I’ll be speaking at DevSecOps Live alongside
This past weekend, I attended BSides Orlando 2025 — my first cybersecurity event in Florida since moving here. It turned out to be a full day of learning, making connections, and hands-on fun. 📚 Roots & Reach of BSides Before diving in, a bit of context: BSides began in 2009 in Las
What is Prompt Hacking? Prompt hacking is the set of techniques that manipulate the input to a language model (or other generative AI) to produce behavior the model owner didn’t intend — from leaking hidden prompts to causing unauthorized actions. In Lesson 1 of my AI Hacking course, I cover:
