Deepfake posting sites depicting famous women taken down by feds
Thanks to Uncle Sam, anyone trying to find nonconsensual intimate deepfakes on CFake.com and SOCFake.com will be disappointed. The US Departments of Justice (DOJ) and…
Author: Cybernoz
Attackers Exploit Three Fortinet FortiSandbox Flaws, One Patched Last Week
Ravie LakshmananJun 16, 2026Vulnerability / Threat Intelligence Bad actors are exploiting multiple security vulnerabilities in Fortinet FortiSandbox, according to threat intelligence firm Defused Cyber. In…
UK data regulator slammed over lack of action on complaints
The Good Law Project and Open Rights Group have threatened the UK data regulator with legal action after accusing it of “brushing aside” thousands of…
SearchLeak Vulnerability Hits Microsoft 365 Copilot Users
A newly disclosed SearchLeak vulnerability in Microsoft 365 Copilot Enterprise exposed a critical pathway for attackers to steal sensitive organizational data through a specially crafted URL. The flaw chain, now…
UNC1151 Gmail Phishing Campaign Targets 2FA Credentials
The UNC1151 Gmail phishing campaign has emerged as a cyber threat targeting Polish internet users, with attackers now focusing on Gmail accounts and deploying phishing…
Security leaders say lift export controls for Anthropic’s Mythos-class models
Security industry heavyweights have published an open letter to the United States Department of Commerce, asking it to lift the suddenly imposed export controls on…
Tech Coalition ‘Athena’ Targets OSS Vulnerabilities Ahead of Disclosure
Over two dozen fintech and technology organizations have formed a coalition to secure open source software (OSS) from accelerated, AI-driven exploitation. Named Athena, it has…
U.S. CISA adds Cisco Catalyst and LiteSpeed cPanel plugin flaws to its Known Exploited Vulnerabilities catalog
U.S. CISA adds Cisco Catalyst and LiteSpeed cPanel plugin flaws to its Known Exploited Vulnerabilities catalog Pierluigi Paganini June 16, 2026 U.S. Cybersecurity and Infrastructure…
EvilTokens: A phishing attack that doesn’t steal your password
A phishing kit subverting Microsoft’s legitimate authentication flow lets attackers break into accounts without stealing passwords or creating fake login pages 15 Jun 2026 • …
Hong Kong watchdog launches data privacy academy to develop top talent in sector
Hong Kong’s privacy watchdog has launched a data privacy academy as part of efforts to align with the national strategy of developing the city into…
Willis report finds cyber insurance covers most average breach and first-party losses
More than 95% of average data breach losses and 90% of average first-party losses are adequately covered by insurance, according to a new report by…
Sovereign cloud won’t fix your AI risk. Identity governance will
US enterprises are not far behind. The SEC’s cybersecurity disclosure rules, CISA’s AI security guidance, proposed state-level AI regulations and growing board-level scrutiny of AI…