Critical Vulnerabilities in Ivanti Exploited In-The-Wild
February 9, 2024 updateOn February 8, 2024, Ivanti released an advisory for a new authentication bypass high severity vulnerability, CVE-2024-22024 impacting Ivanti Connect Secure (9.x,…
Author: Cybernoz
REF2924: how to maintain persistence as an (advanced?) threat
Preamble In recent months, there has been a noticeable shift in the nature of the incidents being tracked under REF2924. Initially, the attacker employed custom,…
Viral AI actress’ hotline face-scans every caller, watches their mood
Last night, in a clip viewed more than eight million times, AI actress Tilly Norwood glitched mid-interview and unexpectedly began speaking Chinese on the Piers Morgan Uncensored…
Autonomous AI Attacks: The Hugging Face Reality Check
For several years the forecast has been constant: AI lowers the skill barrier, AI writes novel malware, AI will soon run attacks end to end with minimal human direction.…
Google Chrome 153 Update Fixes 16 Security Flaws, Including Two Critical Vulnerabilities
Google has released Chrome version 153 to the Stable desktop channel, addressing 16 security vulnerabilities, including two critical-severity flaws affecting the Dawn graphics component and…
Google Gemini Broke Into Real Company Systems After Security Test Domain Mix-Up
Ravie LakshmananSep 19, 2026Artificial Intelligence / Web Security Google’s Gemini model has become the latest artificial intelligence (AI) system to access the internet and break…
Check Point, Kaspersky, Tanium Patch Product Vulnerabilities
Cybersecurity firms Check Point, Kaspersky, and Tanium have each patched severe vulnerabilities in their products, including ones that can be exploited for remote code execution. …
Security Affairs newsletter Round 595 by Pierluigi Paganini – INTERNATIONAL EDITION
Security Affairs newsletter Round 595 by Pierluigi Paganini – INTERNATIONAL EDITION Pierluigi Paganini September 20, 2026 A new round of the weekly Security Affairs newsletter…
New EKS Access and Identity Features: A Security Analysis
On November 26 Amazon introduced EKS Pod Identity feature — a new way for cluster workloads to interact with cloud resources. About three weeks later…
Attack chain leads to XWORM and AGENTTESLA
Key Takeaways li]:list-disc”> C:WindowsMicrosoft.NETFrameworkv4.0.30319RegSvcs.exe C:WindowsMicrosoft.NETFrameworkv2.0.50727RegSvcs.exe C:WindowsMicrosoft.NETFrameworkv3.5Msbuild.exe These binaries are signed and trusted by the system and can evade detection by security software that relies on…
ShinyHunters hacks Clop leak site, threatens to extort ransomware gang
The ShinyHunters extortion gang breached the Clop (aka Cl0p) ransomware operation’s data leak site, defacing the Tor site and allegedly stealing server data and the…
BragJack Attack Lets Malicious Extensions Hijack AI Agents Across 5 Major Browsers
A new attack technique dubbed “BragJack” allows a malicious browser extension to seize trusted communication channels used by AI assistants in Chrome, Edge, Opera Neon,…