9 rising malware trends every security pro should know
AI is speeding up existing attacks Although AI is yet to displace traditional attack methods, a range of security vendors report that attackers are using…
Author: Cybernoz
PSA: Patch your Plex media server before someone hacks it
The published exploit chain was part of a proof-of-concept attack that the first researcher included when submitting a bug report to Plex. The complex code…
Nozomi outlines IT and OT security priorities ahead of India’s April 2027 CEA power sector cybersecurity deadline
Following the July move by India’s Central Electricity Authority (CEA) that notified the Central Electricity Authority (Cyber Security in Power Sector) Regulations, 2026, creating the…
Detect Supply Chain Zero-Days Packages at Publication | Wiz
Modern software development depends on open source packages. Developers and AI coding agents can pull new dependencies and versions into projects at speed, helping teams…
The ballot box meets the bot.
State election officials question CISA’s commitment to election security. Stolen credentials force ConnectWise to suspend cloud services. Fake calendar invites steal Microsoft logins. Temu settles…
Nikkei discloses third data breach in a month, 1.8M records exposed
Nikkei Inc. disclosed a new data breach, the third in about a month, that exposed 1.83 million personal information records. The Japanese giant says subsets…
Microsoft Says AI Agents Cannot Be Trusted and Could Become Insider Security Threats
Microsoft warns organizations to treat AI agents as potential insider risks not because they are automatically malicious, but because they can access company data, apps,…
The Attack You Can’t Detect: AI Assistants As Exfiltration Infrastructure
The incident isn’t the story. The architecture that made it possible is. Varonis Threat Labs disclosed CVE-2026-42824 last week – a vulnerability chain in Microsoft…
OpenAI Engineer Accused of Spying on Executives Ordered to Remain in Custody
The former OpenAI engineer accused of bugging a company conference room must stay in custody while he awaits trial, a federal judge ruled on Monday…
SiteGuard Warns Patching Actively Exploited Security Flaw Could Erase Evidence of Attacks
EG Secure Solutions has warned that a flaw in SiteGuard Server Edition is being exploited and that applying a fix could remove signs of an…
OpenAI Model Hacked Crypto Wallet and Spent Funds to Deploy Smart Contracts
OpenAI disclosed that an internal AI model hacked a crypto wallet and spent Sepolia test ETH without permission to deploy smart contracts. An internal OpenAI…
Sweet Security adds one-click protection for vulnerable cloud workloads
Sweet Security has announced the release of Virtual Patching, a new capability that protects running cloud and AI applications from specific vulnerabilities the moment they…