FlipSwitch: a Novel Syscall Hooking Technique
FlipSwitch: a Novel Syscall Hooking Technique Syscall hooking, particularly by overwriting pointers to syscall handlers, has been a cornerstone of Linux rootkits like Diamorphine and…
Author: Cybernoz
Hackers abused Claude to extract secrets from 1.8M Android apps
Anthropic says multiple threat groups, including the financially motivated and state-sponsored espionage groups linked to Russia and China, tried to abuse its Claude AI model…
New KATARU IoT Malware Packs Linux Privilege Escalation Exploits and Mirai-Style DDoS Attacks
KATARU is a newly observed IoT malware strain that can turn poorly secured devices into DDoS attack nodes. The sample was captured after an attacker…
Anthropic Discloses Fourth Incident of Claude Breaching Real Systems During Security Tests
Anthropic has disclosed a fourth incident in which one of its Claude models broke into genuine third-party systems during what was supposed to be a…
Meta Sued Over Training Data for Its AI and Face-Recognition Systems
A set of parents and their children in Illinois and California filed a lawsuit last week in federal court in Chicago alleging that Meta illegally…
VLC Media Player Flaws Let Attackers Corrupt Memory and Leak Sensitive Data
Two security vulnerabilities in VLC media player versions 3.0.0 through 3.0.23 could allow attackers to exploit heap memory issues. These vulnerabilities can be triggered by…
Building a ransomware decision tree before the call comes in
In this Help Net Security video, Kerri Shafer-Page, VP of Incident Response at Arctic Wolf, walks through the ransomware decision tree in this video. She…
Android malware creates a hidden copy of your banking app
Researchers at Group-IB found that the Android banking Trojan Gigabud can create a separate work profile on an infected phone and run a cloned banking…
GitLab CVSS 10 File-Read Flaw Draws In-the-Wild Probes After Disclosure
Ravie LakshmananSep 11, 2026Vulnerability / Web Security GitLab has released patches to address multiple flaws, including a maximum-severity security vulnerability that has witnessed in-the-wild probes…
GDPR wasn’t designed for AI and that’s a security problem
When the General Data Protection Regulation (GDPR) came into force, generative AI wasn’t embedded in everyday business applications, AI agents were not executing multi-step tasks…
Phishing Research Challenges Conventional Security Awareness Testing
The message is simple: fine-tune future in-house phishing simulation tests through the findings and analysis of Pistachio’s research. Pistachio was founded in Oslo Norway in…
The AI Supply Chain Has a Security Problem, and Much of It Is Sitting on the Open Internet
The AI Supply Chain Has a Security Problem, and Much of It Is Sitting on the Open Internet Pierluigi Paganini September 11, 2026 Researchers found…