UK cyber agency warns LLMs will always be vulnerable to prompt injection
The UK’s top cyber agency issued a warning to the public Monday: large language model AI tools may always contain a persistent flaw that allows…
Author: Cybernoz
UK PM Starmer launches TikTok account despite government ban
Britain’s Prime Minister Keir Starmer launched a TikTok account on Monday despite the app being banned from government devices, as he attempts to connect to…
Malicious Document Reader App in Google Play With 50K Downloads Installs Anatsa Malware
A deceptive Android application lurking in the Google Play Store, disguised as a document reader and file manager, but delivering the Anatsa banking trojan to…
Hackers Exploit Delivery Receipts in Messaging Apps to Steal Users’ Private Information
A critical security vulnerability has been discovered affecting billions of WhatsApp and Signal users worldwide. Researchers found that hackers can exploit delivery receipts to secretly…
Ransomware peaked in 2023 prior to law enforcement actions
Ransomware activity reached an all-time high in 2023, totaling more than 1,500 incidents and $1.1 billion in reported payments, before dropping the following year after…
Hackers Exploit AWS IAM Eventual Consistency for Persistence
A critical persistence technique in AWS Identity and Access Management (IAM) stemming from its eventual consistency model, allowing attackers to retain access even after defenders…
US Contributes to 44% of Cyber Attacks; Public Administration Targeted for Financial Gains
Global cybercrime is accelerating toward a projected cost of 15.63 trillion dollars by 2029, up from an estimated 10.5 trillion dollars today, as criminals exploit…
Update on React Server Components RCE Vulnerability (CVE-2025-55182 / CVE-2025-66478) — API Security
The attack landscape has been dynamic following the disclosure of the React Server Components RCE vulnerability. New information has emerged regarding the initial Proof-of-Concept exploit,…
Major drug research company confirms cyberattack compromised employee and partner data
Listen to the article 2 min This audio is auto-generated. Please let us know if you have feedback. The pharmaceutical research company Inotiv has confirmed…
Defense bill addresses secure phones, AI training, cyber troop mental health
The Defense Department would require that senior leaders have secure mobile phones, that personnel would get cybersecurity training that includes a focus on artificial intelligence…
New GhostFrame Super Stealthy Phishing Kit Attacks Millions of Users Worldwide
A sophisticated new phishing kit called GhostFrame has already been used to launch over 1 million attacks. First discovered in September 2025 by Security researchers…
Hackers Exploit Multiple Ad Networks to Distribute Triada Malware to Android Users
Adex, the anti-fraud and traffic-quality platform operating under AdTech Holding, has successfully identified and neutralized a sophisticated, multi-year malware operation linked to the infamous Triada…