Hong Kong watchdog joins global agencies to warn of web scripting hack risks
A Hong Kong information security watchdog issued an “extremely high risk” warning on Thursday morning over two critical flaws in a widely used web programming…
Author: Cybernoz
Microsoft: Treat AI agents as insider threats
EVP of Microsoft Security Hayete Gallot writes in a blog post that AI agents operating independently within companies could be a serious security threat. According to Microsoft,…
Wiz is on the FedRAMP Marketplace
Here at Wiz, we are actively working towards our FedRAMP® moderate authorization and are excited to be listed as “in process” on the FedRAMP Marketplace.…
New BlackX UEFI bootkit exploiting Baton Drop
Introduction Back in October 2022, Kaspersky GReAT was looking into a peculiar advertisement on a hacking forum. A cybercriminal had been advertising a UEFI bootkit,…
The wearable wiretap.
This week, Dave and Ben look at a story that discusses the potential conflict between the next-generation of wearable technology and current state wiretapping laws.…
Lazarus hackers use post-quantum cryptography for malware delivery
North Korean hackers are using a post-quantum cryptographic mechanism to secure malicious payload delivery in new operations that combine old and new malware. The campaign targets…
Hackers Are Using Real Dell and Staples Emails to Make Their Scams Look Legitimate
Hackers are abusing genuine Dell and Staples order emails to make fake purchase alerts look credible. Instead of sending a forged message, they place scam…
She Was the DEA’s Premier Crypto Detective. The Clues Led Straight to Her Own Family
To escape the chaos of her Russian childhood, Lili Infante became an American law enforcement prodigy. She pioneered the DEA’s investigations of the dark web—never…
Hackers Plant Malware on Onamae.com Cloud Servers, 26,739 Systems Potentially Affected
Hackers gained unauthorized access to Onamae.com Desktop Cloud. They installed malicious programs in customer server environments, prompting the Japanese provider to suspend services across all…
BAE Systems Cyber Incident Disrupts US Bankruptcy Notices
A cyber incident affecting BAE Systems halted US bankruptcy notices, forcing federal courts to change service procedures and adjust some deadlines. A cybersecurity incident affecting…
Sovereignty vs. security: Microsoft’s Roger Halbheer says you’re asking the wrong question
In this interview with Help Net Security, Roger Halbheer, Customer Security Officer at Microsoft, argues that digital sovereignty is a security question first. He explains…
Signal bug could let someone keep listening after you hang up
A recently disclosed flaw in Signal’s calling software could allow another participant to keep hearing you after you hang up. The vulnerability, tracked as CVE-2026-113380…