June 2026 Patch Tuesday forecast: Where are the CVEs?
My forecast from last month was only partly right. After the Anthropic Mythos announcements and the deluge of newly discovered vulnerabilities from vendors like Mozilla,…
Author: Cybernoz
AI Agent Uncovers 21 Zero-Days in FFmpeg; Chrome Patches Record 429 Bugs
Swati KhandelwalJun 06, 2026Vulnerability / Endpoint Security Two things landed within days of each other this week. A security startup reported 21 previously unknown vulnerabilities…
Industry Reactions to New Trump AI Cybersecurity Executive Order: Feedback Friday
President Donald Trump has signed an executive order establishing a voluntary framework for federal vetting of the most advanced frontier AI models before their public…
Malware could drain your fuel tank as well as your bank account
The attacks take three forms: authentication bypass and hardcoded credentials, which allow attackers to gain access to device management; OS command execution and SQL injection…
Connecting Vulnerability Intelligence to Real-World Exposure With Flashpoint EASM
The volume of vulnerability disclosures is higher than ever, yet most security teams are still struggling to act. From vulnerability scanners to public sources and…
Why Microsoft Defender Antivirus Is Worth Another Look
It seems as though the battle for the best antivirus is a never-ending one. There are many options to choose from, and among one of…
Chinese APT deploys new malware to keep access to hacked networks
A Chinese espionage group tracked as UNC5221 has been accessing Microsoft 365 environments using the Brickstorm backdoor and previously undocumented malware named Plenet and AgentPSD.…
OWASP CVE Lite CLI – New Tool to Scan for Vulnerabilities in Your Projects
CVE Lite CLI is a free, open-source vulnerability scanner officially recognized as an OWASP Incubator Project, designed to bring dependency security directly into developers’ terminals…
Trend Micro Deep Security Agent Flaw Allows Repeatable Security Bypass
Trend Micro’s Deep Security Agent for Linux contains a design flaw in its behavior-monitoring stack that allows a local, unprivileged attacker to repeatedly force short…
AI is helping low-skill hackers pull off advanced cyberattacks
Anthropic has published an analysis of cyber-related misuse of its AI systems, examining 832 accounts that were banned for malicious cyber activity between March 2025…
New Threat Cluster OP-512 Targets Microsoft IIS Servers with Custom Web Shell Framework
Ravie LakshmananJun 05, 2026Cyber Espionage / Threat Intelligence Cybersecurity researchers have discovered a previously unreported threat cluster dubbed OP-512 (where “OP” stands for “opponent”) that…
Scottish residents granted permission for group action against Capita
Capita could face a group legal action from people living in Scotland who were affected by a 2023 breach of its systems after a judge…