Microsoft Details Kazuar Malware’s Modular Architecture and P2P Botnet Operations
A nation-state malware known as Kazuar has resurfaced with a far more dangerous design than anyone expected. What once started as a relatively standard backdoor…
Author: Cybernoz
Tycoon 2FA Operators Use OAuth Device Code Phishing to Bypass MFA
A new phishing campaign uncovered in late April 2026 shows how threat actors behind the Tycoon 2FA Phishing-as-a-Service (PhaaS) kit are evolving beyond traditional credential…
Deepfake detection is losing ground to generative models
Deepfake detection has been built around a single question for close to a decade. Given a video or audio clip, is it real or synthetic?…
On-Prem Microsoft Exchange Server CVE-2026-42897 Exploited via Crafted Email
Ravie LakshmananMay 15, 2026Microsoft / Vulnerability Microsoft has disclosed a new security vulnerability impacting on-premise versions of Exchange Server that it said has come under…
Post Office to contest Capture conviction appeal despite chairman support for overturning en masse
The Post Office is contesting a wrongful conviction appeal by a former subpostmaster who experienced problems with its Capture system in the 1990s. This is…
TanStack Npm Supply Chain Attack Prompts OpenAI Updates
OpenAI has disclosed details of its response to the recent TanStack npm supply chain attack, confirming that two employee devices were affected during the broader…
Node-ipc Npm Package Hit By Credential Stealer Attack
A fresh supply chain attack targeting the widely used node-ipc npm package has raised new concerns across the JavaScript ecosystem after researchers uncovered multiple malicious releases containing an obfuscated credential stealer and backdoor…
NSW cyber cops bust alleged bullion-buying BEC bandits
NSW Police have charged three people over an alleged $600,000 business email compromise (BEC) scam operation, after detectives caught a young woman buying gold bullion…
Chrome 148 Update Patches Critical Vulnerabilities
Google this week released a Chrome 148 update that resolves 79 vulnerabilities, including 14 critical-severity bugs across multiple components. The first critical issue is a…
Researchers uncover YellowKey and GreenPlasma Windows Zero-Days
Researchers uncover YellowKey and GreenPlasma Windows Zero-Days Pierluigi Paganini May 15, 2026 Researchers disclosed two new Windows zero-days named YellowKey and GreenPlasma affecting BitLocker and…
Hong Kong privacy watchdog slams Canvas owner for paying ransom to hackers
Hong Kong’s privacy watchdog has condemned the owner of an education platform for paying a ransom to hackers who stole individuals’ personal data across 9,000…
Equinix expands Fabric Geo Zones to Australia
Equinix has expanded its Equinix Fabric “Geo Zones” capability to Australia as part of a broader rollout across five continents, positioning the feature as a…