Airbus CSO on supply chain blind spots, space threats, and the limits of AI red-teaming
Pascal Andrei, CSO at Airbus, knows that the aerospace and defense sector is facing a threat environment that is evolving faster than most organizations can…
Author: Cybernoz
Nasscom Calls for Vigilance as Firms Brace for Impact from West Asia Conflict – The Cyber Express
As tensions linked to the ongoing West Asia conflict continue to shape the geopolitical environment, India’s technology industry body NASSCOM has urged member companies to…
BidenCash Dumps 2.1 Million Stolen Credit Cards
What BidenCash has shared On February 28, 2023, card shop BidenCash announced its one-year anniversary. To commemorate the event, the administrators of BidenCash shared a…
Huntress Acquires Inside Agent | Huntress
Identity-based cyberattacks are becoming more pervasive, leaving businesses grappling with increasingly sophisticated threats. With 40% of security incidents now connected to identity vulnerabilities, organizations are…
Chinese APT Campaign Targets Qatar With PlugX Lures Tied to Middle East Conflict
A Chinese-linked advanced persistent threat group known as Camaro Dragon launched a targeted cyberespionage campaign against entities in Qatar just one day after the outbreak…
Anthropic Files Lawsuit Against U.S. Government Over Claude Risk Designation
Anthropic has launched an unprecedented lawsuit against the U.S. government after being designated a “supply chain risk“. The legal action, filed in a California federal…
Bug bounties are broken, and the best security pros are moving on
Penetration testing engagements are organized as scheduled contracts with defined scope, set testing windows, and direct communication channels with client teams. Cobalt’s 2026 Pentester Profile…
22 Critical Vulnerabilities Mark 120% Surge, React2Shell Dominates Threat Activity
December 2025 witnessed a dramatic 120% increase in high-impact vulnerabilities, with Recorded Future’s Insikt Group® identifying 22 vulnerabilities requiring immediate remediation, up from 10 in…
Velociraptor WSUS Exploitation, Pt. I: WSUS-Up?
Acknowledgments: Special thanks to Ben Folland for his contributions to this investigation and writeup. In November, Huntress analysts detected an incident where threat actors likely…
GhostClaw Mimic as OpenClaw to Steal Everything from Developers
A dangerous malware campaign targeting software developers has surfaced, with a rogue npm package posing as a trusted developer tool to silently drain credentials, crypto…
Autonomous Threat Operations in action: Real results from Recorded Future’s own SOC team
Key Takeaways: Recorded Future deployed Autonomous Threat Operations within its own SOC before customer release, ensuring real-world effectiveness and identifying critical capabilities. Autonomous Threat Operations…
What Is Account Takeover Fraud? A Comprehensive Guide
Threat actors don’t need to hack your network to cause damage. Often, just one stolen password is enough. Account takeover fraud is a simple and…