Microsoft Teams to add brand impersonation warnings to calls
Microsoft will soon add new fraud protection features to Teams calls, warning users about external callers who attempt to impersonate trusted organizations in social engineering…
Author: Cybernoz
Attackers Infrastructure Exposed Using JA3 Fingerprinting Tool
A new powerful method to detect and trace attacker infrastructure using JA3 fingerprinting, a technique that identifies malicious tools through network communication patterns. While many…
NVIDIA CUDA Toolkit Flaw Allows Command Injection, Arbitrary Code Execution
NVIDIA has patched critical vulnerabilities in its CUDA Toolkit that expose developers and GPU-accelerated systems to command injection and arbitrary code execution risks. Released on…
Estonian healthtech a hotbed of innovation for UK and Europe
Tartu University Hospital was founded near the start of the 19th century, but it is focused on the 21st century. It has more than 330…
Critical SmarterMail Vulnerability Under Attack, No CVE Yet
Critical SmarterMail vulnerability under attack, no CVE yet Pierluigi Paganini January 22, 2026 A SmarterMail flaw (WT-2026-0001) is under active attack just days after its…
IT teams aren’t equipped to stop rogue AI agents
Dive Brief: AI agents are involved in 40% of insider cybersecurity threats, according to a report by managed security service provider Akati Sekurity. Non-human identities outnumber humans…
Researchers Detailed r1z Initial Access Broker OPSEC Failures
U.S. authorities have pulled back the curtain on “r1z,” an initial access broker who quietly sold gateways into corporate networks around the world. Operating across…
Critical Vivotek Flaw Enables Remote Arbitrary Code Execution
Akamai’s Security Intelligence and Response Team (SIRT) uncovered a serious command injection vulnerability in legacy Vivotek IoT camera firmware. Tracked as CVE-2026-22755, the flaw lets…
DWP review of Post Office worker prosecutions yet to start, months after announcement
The Department for Work and Pensions (DWP) has yet to formally launch its review of prosecutions of subpostmasters, despite it being announced in August 2025,…
Why Active Directory password resets are surging in hybrid work
Back when everyone worked in the office, password resets were annoying but manageable. If someone forgot their credentials, they walked down the hall to IT…
Malicious PyPI Package Mimic as Popular Sympy-Dev to Attack Millions of Users
A new malicious package on the Python Package Index (PyPI), named sympy-dev, has been caught impersonating the widely used SymPy library to deliver cryptomining malware. SymPy…
New Osiris Ransomware Leverages Living Off the Land and Dual-Use Tools in Attacks
A newly discovered ransomware family, Osiris, targeted a major foodservice franchisee in Southeast Asia in November 2025. Despite sharing a name with a 2016 Locky…