Failing to Revive AUTOEXEC.BAT on Windows 7 & 10
I was recently tagged in a Twitter thread about an obscure DOS feature in relation to auto-launching applications (commonly called persistence in offensive cyber security). Although…
Author: Cybernoz
Over 400 Arch Linux packages compromised to push rootkit, infostealer
More than 400 packages in the Arch User Repository (AUR) are distributing a Linux rootkit and infostealer malware targeting credentials and access tokens. A report…
Malicious npm Campaign Steals SSH Keys, API Tokens, Cloud Credentials, and Wallet Secrets
A fresh wave of supply chain attacks is putting blockchain developers, Web3 teams, and cloud engineers at serious risk. Researchers have uncovered a coordinated campaign…
GRU-Linked APT28 Uses MooBot Botnet and Compromised EdgeRouters for Cyber Operations
A notable operational pivot by the GRU-linked intrusion set APT28 (aka Fancy Bear, Sofacy, Forest Blizzard, Pawn Storm) that combines the MooBot botnet and compromised…
ShinyHunters Target Universities in Oracle PeopleSoft Zero-Day Attack
A massive wave of cyberattacks has hit more than 100 organisations globally, and universities are the main targets. Security researchers at Mandiant and the Google…
Code Girls: The Secret Heroes Of World War II
12 Jun Code Girls: The Secret Heroes Of World War II Posted at 08:34h in Blogs by Taylor Fox This week in cybersecurity from the…
Google sues China-based scammers over Gemini AI abuse
Google has filed a lawsuit against Outsider Enterprise, a China-based cybercrime network for using AI tools, including Gemini, to build phishing websites and scam infrastructure.…
Stolen iPhones could soon be worth a lot less to thieves
The UK’s Metropolitan Police has reached an agreement with Apple designed to make stolen iPhones harder to resell and less attractive to thieves. The approach…
Agentjacking Attack Tricks AI Coding Agents Into Running Malicious Code
Ravie LakshmananJun 12, 2026Artificial Intelligence / Vulnerability Cybersecurity researchers have described what they say is a new class of attack that can trick artificial intelligence…
CIO interview: Damian Leach, Vistra
With its customers using multiple financial professional services in its portfolio, corporate services provider Vistra wants to provide a single platform. The digital backbone will…
TCE Weekly Roundup: AI Security, Patch Tuesday & FIFA Scams
This week’s cybersecurity developments highlight a growing emphasis on proactive security measures, governance oversight, and risk management across both public and private sectors. From large-scale…
Industry Reactions to Claude Fable 5: Feedback Friday
Claude Fable 5 has become generally available, with Anthropic unveiling it as a powerful Mythos-class AI model. The release includes robust safeguards that restrict its…