The OpenAI Models That Hacked Hugging Face Were ‘Active on the Internet’ for Days
Two of OpenAI’s cybersecurity-focused models broke out of a testing sandbox this week and went on to hack the AI research platform Hugging Face in…
Author: Cybernoz
Hackers Use Stealer Logs to Bypass MFA and Launch Ransomware Attacks
Infostealer malware has now become the invisible thread linking petty credential theft to full-blown ransomware campaigns. Attackers no longer bother forcing their way through firewalls…
How AI and “Mythos” Are Exacerbating the Situation Regarding GDPR, NIS2 and DORA
Through NIS2, DORA, and the GDPR, the EU has established a regulatory framework of Acts and Directives – complete with a system of financial penalties…
The automotive software vulnerabilities hiding in your dashboard
Pop the hood on a new car and you won’t find much you can fix with a wrench. What you’ll find is software, and a…
Beyond the Play Store: How Android threats really spread
You probably think of your phone’s security the way you think of your front door: as long as you’re downloading apps from the Play Store,…
Researcher Publishes GitLab RCE PoC Letting Authenticated Users Run Commands as Git
Swati KhandelwalJul 25, 2026Vulnerability / Application Security Security researchers at depthfirst published working exploit code on July 24 for a GitLab flaw that GitLab patched…
Rockwell Patches Code Execution Flaws in Arena Simulation Software
Rockwell Automation has patched four vulnerabilities in its Arena Simulation software that could let an attacker execute arbitrary code on an affected system, according to…
AI Secret Leaks in Public Code Repos: Warning to Developers
In a rush to adopt and experiment with AI, developers and other technology practitioners are willing to cut corners. This is evident from multiple recent…
Hackers hijack hotel Wi-Fi DNS to steal Microsoft 365 accounts
Hackers are changing the DNS settings on Wi-Fi devices at hotels and conference centers to redirect users to fake Microsoft 365 login pages. The campaign…
Foxit Updater Vulnerability Gives Standard Users SYSTEM-Level Control of Windows Devices
Foxit PDF Reader has been found vulnerable to a local privilege escalation flaw that allows standard Windows users to gain full SYSTEM-level control under specific…
Innovator Spotlight: American Binary – Cyber Defense Magazine
American Binary: Why “Mostly Post Quantum” Is Another Way to Say Vulnerable If you’ve sat through a vendor briefing in the last 2 years, you’ve…
Illinois Man Pleads Guilty to Phishing 4,500 Snapchat Users to Steal Private Photos
An Illinois man has pleaded guilty to a phishing and account-compromise scheme that targeted thousands of Snapchat users, leading to the theft of private images…