ACMA fines Telstra for SIM swapping prevention misses
Key points ACMA has fined Telstra $277,000 for failing to use required identity authentication processes to prevent SIM swapping fraud. The fraud caused at least…
Author: Cybernoz
Exploit Published for Fresh Cleo Harmony Vulnerability
Organizations are advised to immediately patch a fresh authentication bypass vulnerability affecting the file transfer application Cleo Harmony. Tracked as CVE-2026-84115, the security defect impacts…
Hackers Target Langflow in CVE-2026-0768 Attacks
Hackers Target Langflow in CVE-2026-0768 Attacks Pierluigi Paganini September 02, 2026 Hackers are exploiting a critical Langflow flaw that lets unauthenticated attackers remotely execute Python…
Dogged Russia-based botnet dismantled after 23-year run
Sality, a Russia-based botnet that infected more than 11 million devices during a 23-year run of operations, was dismantled Monday by law enforcement, CrowdStrike and…
I’ve been deepfaked: What do I do?
Don’t panic if you spot an illegally created image or video of you online – there are ways to request its removal 02 Sep 2026…
Cellebrite Guardian completes IRAP assessment at PROTECTED level
Cellebrite says its cloud-based digital evidence management platform, Cellebrite Guardian, has completed an assessment under the Infosec Registered Assessors Program (IRAP) at the PROTECTED classification…
How China industrialized the infrastructure behind state hacking
The quartermaster model of hacking For a year prior to the takedown, Lumen’s Black Lotus Labs tracked QTFY as it functioned as a “quartermaster,” integrating…
Wiz Threat Research Team Spots New AWS Phishing Campaign
Earlier this week, one of our employees received a phishing email to their personal inbox that attempted to lure them into providing their AWS login…
Huntress Employee Spotlight: Meet Ben Bernstein
Huntress was founded in 2015 by former NSA cyber operators who believe enterprise-grade protection shouldn’t be reserved for the 1%. Since those early days, we’ve…
WordPress backup plugin flaw exposes millions of sites to takeover attacks
An SQL injection vulnerability in the All-in-One WP Migration and Backup plugin for WordPress could allow unauthenticated attackers to execute remote code and take control…
Claude AI Now Controls Your macOS and Windows Computer in the Background
Anthropic has quietly pushed one of its most consequential agentic upgrades yet, letting Claude take control of a user’s desktop and complete tasks while they…
Black Duck brings AI-powered vulnerability scanning into Claude with new Signal integration
Application security vendor Black Duck has launched its Signal vulnerability scanning engine as an MCP server in the Claude Directory, giving developers using Anthropic’s Claude…