New “Bad Epoll” Linux Kernel Flaw Lets Unprivileged Users Gain Root, Hits Android
A newly disclosed Linux kernel flaw called Bad Epoll (CVE-2026-46242) lets an ordinary user with no special access take full control of a machine as…
Author: Cybernoz
Alleged Scattered Spider Hacker Extradited to US
A dual US-Estonian citizen was extradited to the US to face charges for his alleged involvement in the activities of the infamous hacking group Scattered…
The Anatomy of a Shadow AI Supply-Chain Breach: Lessons from the 2026 Vercel Incident
The Anatomy of a Shadow AI Supply-Chain Breach: Lessons from the 2026 Vercel Incident Pierluigi Paganini July 03, 2026 Vercel breach happened after an employee…
New CitrixBleed-like NetScaler flaw sees exploit attempts in the wild
Smaller leak but still dangerous Even though watchTowr was only able to leak bytes of data using this flaw, compared to kilobytes with previous CitrixBleed…
Snipping the Long Tail of Shai-Hulud 2.0
Since the discovery of Shai-Hulud 2.0 (aka sha1-hulud), Wiz Research has tracked a persistent “long tail” of infections. To date, this incident has impacted over…
ARToken PhaaS exposes EvilTokens’ Microsoft 365 phishing toolkit
A new phishing-as-a-service (PhaaS) platform dubbed “ARToken” appears to operate as an affiliate of the EvilTokens phishing platform, giving researchers a glimpse into an extensive toolkit designed…
Scammers Impersonate Trusted Brands in Gambling Ads to Drive Casino Traffic
Scammers are hijacking trusted brand names to push people toward online casinos unrelated to those companies. Instead of building fake bank sites or phishing emails,…
Alibaba Reportedly Bans Claude Code Over Alleged Backdoor Risk in AI Coding Tool
Alibaba is reportedly preparing to ban the use of Anthropic’s Claude Code across its internal environments starting July 10. This decision comes in light of…
FBI Seizes NetNut Domains as Google Disrupts 2M Device Proxy Network
The FBI and IRS Criminal Investigation seized domains linked to NetNut on July 2, replacing the company’s homepage with a federal seizure notice and disrupting…
New infosec products of the week: July 3, 2026
Here’s a look at the most interesting products from the past week, featuring releases from Digi International, iboss, Jamf, and Netzilo. Digi International’s DANI automates…
Unpatched Flaws Disclosed in Filesystem Bundled Into Millions of Embedded Devices
Security firm runZero has disclosed seven vulnerabilities in FatFs, a small filesystem library that lets a device read and write the FAT and exFAT formats used on USB…
Platforms must shoulder burden of proof for social media design
The harms of social media design are so clear that the “burden of proof” for safer features must fall on the companies themselves, rather than…