Mustang Panda Upgrades CoolClient With a Kernel Rootkit
Mustang Panda Upgrades CoolClient With a Kernel Rootkit Pierluigi Paganini August 16, 2026 Mustang Panda upgraded CoolClient with a signed kernel driver that hides processes,…
Author: Cybernoz
Stolen Authority
We need to label this parasitic marketing technique with an adequately strong term. Stolen Authority. (From stolen Valor) It’s the deplorable tactic of doing an…
Avoiding mistakes with AWS OIDC integration conditions
A common way to allow third-party SaaS solutions to access AWS accounts is via OpenID Connect (OIDC) integrations. These integrations require specific conditions in the…
SafePal data breach impacts 39,798 customers, stolen info for sale
Cryptocurrency hardware wallet provider SafePal is warning of a data breach affecting about 39,798 customers after a flaw was exploited to steal customer order information,…
McDonald’s, Vodafone Hit by Azure Credential Theft Campaign Exposing Millions of Enterprise Records
A sprawling Azure data exfiltration campaign is unfolding across the dark web, with a threat actor systematically selling off internal employee directories stolen from some…
Claude Code and Gemini CLI Flaws Let a GitHub Issue Reach CI Workflow Secrets
Swati KhandelwalAug 07, 2026Artificial Intelligence / Vulnerability A GitHub issue opened by an account with no repository privileges was enough to execute code on the…
Anglicare transforms its IT service management
Anglicare has re-platformed its IT service management and added new monitoring and observability capabilities, transforming both the way it manages its systems and how staff…
DDoS Attacks Cause Major Threema Outages
DDoS Attacks Cause Major Threema Outages Pierluigi Paganini August 16, 2026 Large DDoS attacks disrupted Threema, causing severe communication outages. Threema On-Prem users were unaffected…
2025 Cloud Security Predictions for CISOs & Engineers
2025 has arrived! As we gear up for the new year and the next chapter in cloud security, we thought, “Why not tap into the…
New AmnesiaStealer macOS malware hijacks browser sessions via remote control
A new information-stealing malware called AmnesiaStealer, which targets macOS users via ClickFix attacks, includes a streaming module that allows the attacker to interactively control the…
AWS Certificate Manager to Discontinue Email Validation for Public Certificates
AWS Certificate Manager (ACM) has announced plans to permanently discontinue email-based domain control validation (DCV) for public certificate renewals by September 30, 2027. The deprecation…
Malware Can Abuse Windows Hello for Business Keys for Persistent Entra ID Access
Swati KhandelwalAug 07, 2026Endpoint Security / Vulnerability Entra ID researcher Dirk-jan Mollema demonstrated that malware already running in a signed-in Windows session can silently use…