Apple Pushes Rare iOS 18 Patch for Devices at Risk from DarkSword Exploit
Apple is taking an unusual step to protect older iPhones, confirming it will push a security update to devices still running iOS 18 to block…
Author: Cybernoz
North Korean hackers linked to Axios npm supply chain compromise
The software supply chain attack that resulted in the compromise of npm packages of Axios, an extremely popular HTTP client library, is believed to be…
Wikipedia’s AI agent row likely just the beginning of the bot-ocalypse
The Internet is filled with people who insist on being right. In the past, at least they could be reasonably sure that they were arguing…
Microsoft Warns of WhatsApp-Delivered VBS Malware Hijacking Windows via UAC Bypass
Ravie LakshmananApr 01, 2026Social Engineering / Malware Microsoft is calling attention to a new campaign that has leveraged WhatsApp messages to distribute malicious Visual Basic…
AI-driven identity must exist in a robust compliance framework
As enterprises rush to integrate artificial intelligence‑driven identity and verification solutions, it is tempting to be swept up in their operational elegance and apparent efficiency.…
WaterNSW to move on generative AI
WaterNSW is seeking to make more use of generative AI in its operations with application development and customer engagement its top priorities. WaterNSW’ Leeanne Chau.…
Toy Giant Hasbro Hit by Cyberattack
Toy and game giant Hasbro on Wednesday reported being hit by a cyberattack that has disrupted some of the company’s processes. In a filing with…
Google fixes fourth actively exploited Chrome zero-day of 2026
Google fixes fourth actively exploited Chrome zero-day of 2026 Pierluigi Paganini April 01, 2026 Google fixed a new Chrome zero-day, tracked as CVE-2026-5281, in the…
Iran-linked actors target Middle Eastern city governments to undermine missile-strike responses
Hackers associated with the Iranian government are trying to make it harder for cities in Israel and the Gulf states to respond to Iranian missile…
Vim and GNU Emacs: Claude Code helpfully found zero-day exploits for both
“Opening a file in GNU Emacs can trigger arbitrary code execution through version control (git), most requiring zero user interaction beyond the file open itself.…
WhatsApp notifies hundreds of users who installed a fake app made by government spyware maker
WhatsApp says it has notified around 200 users who were tricked into installing a malicious fake version of the chat app that contained spyware. WhatsApp…
Industrialization of the Fraud Ecosystem Blog
Payment fraud no longer operates as a collection of discrete schemes run by individual threat actors. It is increasingly sustained by an industrial support ecosystem:…