Windows Exploitation Techniques: Dangling COM Object Registrations
This short blog post is about abusing a privilege escalation bug that Microsoft recently fixed in Windows, CVE-2026-66804, that I and 14 others reported. This…
Author: Cybernoz
Upwind Security raises $400 million in Series C funding.
Marketplace Anthropic’s I.P.O. Prospectus Spells Out a Future of Promise and Peril (New York Times) The A.I. company took great pains to describe the many…
New Cisco firewall zero-day exploited to crash SSL VPN devices
Cisco released security updates to patch a denial-of-service zero-day in Adaptive Security Appliance (ASA) and Threat Defense (FTD) software that attackers are exploiting to remotely…
Hackers Attack FreePBX Servers With Malware to Steal SIP Credentials for Phone Fraud
Hackers targeting FreePBX phone servers have upgraded their malware to steal credentials that can keep phone fraud running even after an infected system is rebuilt.…
A Hacker Targeted High-Stakes Poker Players With Malware That Exposed Their Cards
In a fitting sign of the times, the hacker’s carefully laid plans were foiled by an AI agent. It was September 25, 2026, and Alex,…
Microsoft to Disable SMS and Voice Authentication in Entra ID Starting February 2027
Microsoft will begin retiring Microsoft-provided SMS and voice authentication in Microsoft Entra ID on February 1, 2027, requiring affected organizations to migrate users or arrange…
Summit Public Schools Breach Exposes 115 GB of Student and Staff Data
A hacker has leaked 115 GB of Summit Public Schools data containing billions of lines, student and staff personal records and approximately 21,000 email addresses.…
Qualys CISO on what security teams can do as exploit campaigns grow
In this Help Net Security interview, Nathan Smolenski, CISO at Qualys, talks about how security teams can handle the growing volume of AI-discovered vulnerabilities. He…
Hackers Exploited Cisco SD-WAN Flaw to Plant Malware Built to Steal Encryption Keys
Hackers exploited a critical Cisco Catalyst SD-WAN flaw, fixed in February, to plant custom malware inside the systems that control an organization’s SD-WAN network. The…
Beyond power: How to avoid water as a constraint on AI growth
For several years, the race to build AI infrastructure has centred on one question – where will the power come from? Today, across Europe and…
Ukrainian Ransomware Affiliate Sentenced To 70 Months
A Ukrainian ransomware affiliate has been sentenced to 70 months in prison for participating in cyberattacks against hospitals, businesses, law firms and government entities across…
AI’s Role In Cyberattacks On Japan: Three Cases Beyond ARTEX
A wave of data leaks from Japanese web systems in autumn 2026 has sharpened concern over AI’s role in cyberattacks on Japan. The National Cybersecurity…