CISA publishes strategy with eye on the next four years
The Cybersecurity and Infrastructure Security Agency published a strategy Monday that focuses on taking a leading role in cyber defense, prioritizing protection of critical infrastructure…
Author: Cybernoz
In Focus | Weapon or armour? The contentious debate over China’s open-weight AI
Are China’s increasingly powerful open-weight AI models a cybersecurity threat, or could restricting them ultimately make the internet less secure? The dilemma has become a…
OpenAI, Anthropic disclosures spotlight growing AI containment challenge
The disclosure came alongside a separate assessment from Anthropic, which detailed how its Claude Mythos 5 model attempted to compromise an unrelated GitHub repository during…
Frenos warns advances in AI attack planning could increase cybersecurity risks for critical infrastructure, ICS systems
Frenos, an operational technology (OT) security company, estimates that critical infrastructure operators have about two years to prepare before artificial intelligence models can reliably plan…
Centrii flags audit risks as NERC CIP-003-9 tightens vendor remote access controls for low-impact BES systems
A new post from Centrii warned that new vendor remote access requirements under the North American Electric Reliability Corp.’s (NERC) Critical Infrastructure Protection standard CIP-003-9…
From Pod Security Policies to Pod Security Standards – a Migration Guide
In Kubernetes version 1.21, Pod Security Policies (PSP) were officially deprecated and replaced with Pod Security Admission (PSA). PSA implements Pod Security Standards (PSS), a…
Kali Linux 2026.3 released with 6 new tools, desktop updates
Kali Linux has released version 2026.3, its third release this year, featuring six new hacking tools, desktop environment improvements, refreshed build scripts, and more. This…
Kali Linux 2026.3 Released With 6 New Penetration Testing Tools and Linux Kernel 7.1
Kali Linux 2026.3 has been released as the third Kali update of 2026, bringing six new penetration testing tools, Linux kernel 7.1.5, KDE Plasma 6.7,…
Apache Camel Vulnerabilities Allow Remote Code Execution, Authentication Bypass, and Data Theft
Apache Camel’s security advisories document critical and high-severity vulnerabilities that could allow for remote code execution, authentication bypass, credential exposure, and unauthorized file access. These…
StealC Malware Returns as Stadia RAT After Operation Endgame Takedown
StealC’s seller has returned with Stadia RAT, combining credential theft, hidden desktop control, and remote command execution using code reused from StealC v3.5. Four months…
Anthropic details what stops Claude Duet from going rogue
Anthropic has outlined the security and privacy protections behind Claude Duet, its proactive AI agent that can monitor connected accounts and complete tasks while users…
A week in security (October 19 – October 25)
Last week on Malwarebytes Labs: Resident Evil maker Capcom warns of phishing after 11.7 million records exposed Crime Stoppers chapter freezes tips after breach breaks…