The Big IAM Challenge: Test Your Cloud Security Skills
Today, we are launching “The Big IAM Challenge” — a cloud security Capture The Flag (CTF) event. The mission? Identify and exploit AWS IAM misconfigurations,…
Author: Cybernoz
Ordering a new space policy.
HOST(S): Maria Varmazis is a podcast producer and journalist specializing in space, cybersecurity, and emerging technology. She translates complex industry developments into clear, engaging conversations…
BeyondTrust patches zero-day exploited in attacks since August
BeyondTrust warned customers on Thursday to patch a critical flaw in its Remote Support (RS) that has been exploited in zero-day attacks since late August.…
Hackers used Compromised ConnectWise Backup Credentials to Hack 173 Microsoft 365 accounts
Hackers used a stolen ConnectWise Cloud Backup credential to sign in to 173 Microsoft 365 partner and customer tenants, giving them access through a trusted…
Encryption Is Getting Squeezed From All Sides
First proposed in 2025, and partially revised due to blistering criticism from tech companies and civil society, Canada’s C-22 bill can broadly place requirements on…
Hackers Use ConnectWise SkyKick Credentials to Access Microsoft 365, Halting Cloud Backups
Attackers abused compromised ConnectWise Cloud Backup credentials to access Microsoft 365 customer environments, prompting ConnectWise to shut off application access and interrupt backup services. Jonathan…
Stolen AI API keys are paying for hackers’ autonomous scans
A seller on a restricted criminal forum is marketing an autonomous hacking tool that runs on stolen OpenAI, Anthropic and Google API keys, so the…
MALFEX npm Package ‘imgdecode’ Hides Shellcode Loader in Windows Native Addon
Cybersecurity researchers have discovered a malicious npm package that’s part of a recently disclosed software supply chain attack campaign dubbed MALFEX. The package, named “imgdecode,”…
Waste-to-energy firm picks Stackable on Ionos for sovereignty
Martin, a Munich-based company that builds waste-to-energy plants, has deployed the open-source Stackable data platform on German cloud provider Ionos – a move it said…
Israeli Ad Firm Doubled as Candiru’s Zero-Click Spyware Delivery Channel
Candiru spyware has infected devices at international news network Al Jazeera in zero-click attacks, via targeted advertisements, Canadian internet watchdog group Citizen Lab reports. As…
U.S. CISA adds Fortinet Multiple Products, and BeyondTrust Remote Support flaws to its Known Exploited Vulnerabilities catalog
U.S. CISA adds Fortinet Multiple Products and BeyondTrust Remote Support flaws to its Known Exploited Vulnerabilities catalog Pierluigi Paganini October 17, 2026 U.S. Cybersecurity and…
Cyberattack AIs must be trained only on air-gapped systems, hundreds of AI researchers say
Current security procedures for training AI models are inadequate, hundreds of AI researchers have warned governments and the AI community. They are calling for tougher…