New infosec products of the week: September 4, 2026
Here’s a look at the most interesting products from the past week, featuring releases from BugBase, F5 Networks, Ping Identity, and Superna. F5 speeds up…
Author: Cybernoz
Thousands of OpenAI Agents Quietly Turned an Abandoned Wiki Into Their Coordination Channel
A group of AI safety researchers says a fleet of autonomous agents that identified themselves as OpenAI systems left about 18,000 posts on a dormant…
Peer demands action on DWP subpostmaster prosecutions in duty of candour debate
During a debate on the Public Office (Accountability) Bill, ministers were asked to investigate the delay to the proposed investigation into the 100 subpostmaster convictions…
12-Year-Old PostgreSQL Vulnerability Enables Database, Server Takeover
PostgreSQL releases since 2014 contain a severe vulnerability that allows attacker with low privileges to take over databases and servers, cybersecurity firm Cyera reports. An…
Google fixes the sixth actively exploited Chrome zero-day of 2026
Google fixes the sixth actively exploited Chrome zero-day of 2026 Pierluigi Paganini September 04, 2026 Google patched 12 Chrome flaws, including an actively exploited V8…
Fake Cloudflare CAPTCHA tricks victims into opening a tunnel for attackers
“While traditional ClickFix campaigns direct victims to the Windows Run dialog, TerminalFix campaigns apply the same technique but direct users to Windows Terminal or PowerShell…
OSPAR 2026 report now available with 167 services in scope
We’re pleased to confirm the successful completion of our annual Amazon Web Services (AWS) Outsourced Service Provider’s Audit Report (OSPAR) assessment on July 29, 2026,…
Forget vulnerable drivers – Admin is all you need
Introduction Bring Your Own Vulnerable Driver (BYOVD) is an increasingly popular attacker technique wherein a threat actor brings a known-vulnerable signed driver alongside their malware,…
39 New Methods That Compromise Passkey Authentication
Passkeys were introduced with a strong security proposition. Replace passwords with public key cryptography, bind the credential to the legitimate service, keep the private key…
AI Agents Breach Company Network in Under 10 Hours and Steal Root Credentials
A human attacker armed with frontier artificial intelligence models breached an enterprise network and seized root credentials in under 10 hours, a timeline that would…
Protecting Against Zero-Click Attacks – IT Security Guru
By Aimee Steele, threat intelligence analyst at Talion Cyber Security Last month, the UK’s National Cyber Security Centre (NCSC) issued an advisory around a new…
New Panzer Ransomware Hits 16 Victims Across 11 Countries With Data Theft and Encryption
Panzer ransomware has emerged as a new Ransomware-as-a-Service (RaaS) operation, publishing 16 alleged victims across 11 countries while combining data theft with file encryption. Documented…