Is this you? As a journalist, you can create a free Muck Rack account to customize your profile, list your contact preferences, and upload a portfolio of your best work.
Claim your profile
Articles by Ryan Westman
Fake AI, real malware: Attackers impersonating AI brands
Threat ResearchAImalvertisinginfostealerSophos X-Ops Sophos X-Ops reviewed a year of Managed Detection and Response (MDR) cases tagged as ‘AI activity.’ Of the 34 cases that held up, nearly all were attackers creating fake versions of legitimate AI sites and software to infect users with malware. Attackers are exploiting the surge in demand for AI software by faking the software itself: names users trust, like Claude, ChatGPT, and Copilot, become delivery vehicles for malware.
Bug bounty nell’era AI: come sta cambiando la ricerca di vulnerabilità
I programmi di bug bounty stanno attraversando la più profonda trasformazione degli ultimi trent’anni. Da un lato, la diffusione di strumenti di intelligenza artificiale generativa ha provocato un aumento esponenziale di segnalazioni a basso valore aggiunto, spesso caratterizzate da analisi superficiali e risultati non verificati. Dall’altro, i modelli AI più avanzati stanno iniziando a individuare vulnerabilità reali, riproducibili e sfruttabili con una velocità senza precedenti.
A double-edged bleeding edge: Classifying AI threats
Conversations about ‘AI threats’ typically collapse into one of two extremes. On the one hand, hype: unverified claims that don’t hold up to scrutiny and invite significant criticism. On the other, dismissal: it’s just old tradecraft with new branding. As with most dichotomies like this, the truth is probably somewhere in between. Threat actors are using, and experimenting with, AI in different ways – both to facilitate attacks and as a target.
Bug bounties in the Mythos era
Bug bounties are changing faster right now than at any point in their thirty-year history. On one side, the rise of AI-assisted research has flooded many programs with low-signal ‘slop.' On the other, frontier models are starting to produce validated, reproducible, exploitable vulnerabilities at machine speed. Both trends are accelerating, and neither is going to reverse. That shift reframes what a bug bounty program is for. It’s no longer just a channel for receiving external findings.
React2Shell flaw (CVE-2025-55182) exploited for remote code execution
Threat ResearchFeaturedvulnerabilityreact2shell Sophos analysts are investigating the widespread exploitation of a critical vulnerability dubbed ‘React2Shell’ that affects React Server Components versions 19.0.0, 19.1.0, 19.1.1, and 19.2.0. This vulnerability (CVE-2025-55182) was disclosed by React on December 3, 2025, and assigned a CVSS score of 10.0. Vulnerability details React2Shell is a flaw in the way React Server Components handle data sent from a user’s browser to the server.
React2Shell flaw (CVE-2025-55182) exploited for remote code execution
Sophos analysts are investigating the widespread exploitation of a critical vulnerability dubbed ‘React2Shell’ that affects React Server Components versions 19.0.0, 19.1.0, 19.1.1, and 19.2.0. This vulnerability (CVE-2025-55182) was disclosed by React on December 3, 2025, and assigned a CVSS score of 10.0. Vulnerability details React2Shell is a flaw in the way React Server Components handle data sent from a user’s browser to the server.
React2Shell flaw (CVE-2025-55182) exploited for remote code execution
Threat ResearchFeaturedvulnerabilityreact2shell Sophos analysts are investigating the widespread exploitation of a critical vulnerability dubbed ‘React2Shell’ that affects React Server Components versions 19.0.0, 19.1.0, 19.1.1, and 19.2.0. This vulnerability (CVE-2025-55182) was disclosed by React on December 3, 2025, and assigned a CVSS score of 10.0. Vulnerability details React2Shell is a flaw in the way React Server Components handle data sent from a user’s browser to the server.
Canada’s Draft Cybersecurity Legislation Must Be Resurrected
Much has been written about the travails of the Liberal government at the end of 2024 and the subsequent prorogation of Parliament. Less discussed are the implications for the bills that were set to receive royal assent in the new year. Among the most important was Bill C-26, An Act Respecting Cyber Security.
Improving Canadian Digital Defences: A National Security Priority
Digital Policy Hub Working Paper North American organizations are vulnerable to cyberattacks, such as ransomware. The data in this working paper is compiled from eSentire, a Canada-based global cybersecurity firm with clients in 35 industries, 71 subindustries and 85 countries. The data has been cleaned to reflect cyberattacks eSentire detected and responded to in North America from January to December 2023. Cybercriminals and state-sponsored threat actors have impacted Canadian organizations.
Poor Cyber Defences Are Damaging Canada’s Economy
Cyberattacks may seem like relatively minor inconveniences to the average consumer. The reality is that such attacks have a significant, broad cost. How vulnerable is Canada to cyberattacks, including highly disruptive and damaging ransomware? The short answer is very. The past few months paint a troubling picture. In November 2022, a major Canadian grocer, Sobeys, was hit with ransomware.
Show More
loading
Actions
Is this you?
As a journalist, you can create a free Muck Rack account to customize your profile, list your contact preferences, and upload a portfolio of your best work.Get in touch with Ryan
Contact Ryan, search articles and posts on X, monitor coverage, and track replies from one place.
Learn more about Muck Rack