Wiz now offers DSPM for Oracle Cloud Infrastructure
Organizations store large amounts of data in the cloud, which often includes sensitive data such as Personally Identifiable Information (PII), Payment Card Industry (PCI) information,…
Author: Cybernoz
NightEagle APT targets Russian organizations
Over the past year, our Global Emergency Response Team (GERT) has investigated several incidents involving the NightEagle group (APT-Q-95). This group has been active since…
Disclosing the BLOODALCHEMY backdoor
Preamble BLOODALCHEMY is an x86 backdoor written in C and found as shellcode injected into a signed benign process. It was discovered in our analysis…
Windows Server 2022 reaches end of mainstream support next month
Microsoft has reminded customers that Windows Server 2022 will reach the end of mainstream support next month and enter extended support until October 2031. Windows…
700+ OpenAI Agents Built Their Own Message Board to Coordinate an Attack on Hugging Face
AI agents built an unauthorized communications network and coordinated activity against Hugging Face infrastructure in a capability evaluation. The constrained benchmark showed how separate AI…
Hackers Got Inside a Flock Camera. Its Data Shows How the System Really Works
Hackers ripped down a Flock camera above a roadway, made a near-complete copy of the data stored inside it, and shared the files with 404…
Acronis Backup Plugin Vulnerability Exploited in the Wild to Gain Elevated Linux Privileges
Acronis has released an urgent security update for a high-severity local privilege escalation vulnerability affecting its Backup plugin for cPanel & WHM on Linux. The…
One runaway AI agent racked up a $50,000 cloud bill
Organizations are deploying autonomous AI systems that execute API calls, optimize production configurations, and analyze telemetry across hybrid cloud environments. At the same time, attacks…
AI helps scammers build convincing antivirus renewal pages
Antivirus renewal scams often begin with a message claiming that your subscription has automatically renewed. When you follow the instructions to cancel it, you are…
Attackers Exploit WooCommerce Wholesale Lead Capture Flaw to Plant PHP Web Shells
Ravie LakshmananSep 16, 2026Vulnerability / Web Security Threat actors are exploiting a critical security flaw in WooCommerce Wholesale Lead Capture, a premium WordPress plugin that…
Advice for CIOs on AI’s ‘existential threat’
The US president has dismissed posts by the CEOs of OpenAI and Anthropic calling for an artificial intelligence (AI) slowdown as hoaxes, while Meta’s boss…
Apple Security Update: IOS 26.7 Fixes 273 Bugs
A new Apple security update has been dropped for iPhone owners, releasing iOS 26.7 alongside its major annual release, iOS 27. The move gives iPhone…