Challenging AI hype narratives with director Valerie Veatch
Artificial intelligence (AI) has been engulfed by hype. Boosters and doomers alike speak prophetically about the coming utopias and dystopias that will be ushered in…
Author: Cybernoz
What the industrialization of exploitation means for defenders
Think about what your team used to rely on. Attackers left clues that telegraphed their presence – patterns you could learn, signatures you could catch…
Threat Advisory: Hackers Are Exploiting CVE-2021-40444
On September 7, Huntress was made aware of a new threat against Windows operating systems and Microsoft Office products. With the identifier CVE-2021-40444, the MSHTML…
US charges Google security engineer with Polymarket insider trading
A Google security engineer was charged with insider trading after winning $1.2 million using confidential company data to place bets on the cryptocurrency-based Polymarket decentralized prediction…
Palo Alto Networks PAN-OS Authentication Vulnerability Bypass Exploited in the Wild
Palo Alto Networks authentication bypass vulnerability, CVE-2026-0257, affecting PAN-OS and Prisma Access, is now being actively exploited in the wild, with CISA adding it to…
Trusted Dev Tools Abused to Steal Code and Secrets
Attackers are increasingly weaponizing trusted developer tools to infiltrate software supply chains, with CISA warning of multiple ongoing campaigns targeting CI/CD ecosystems and developer workflows.…
Gitea Vulnerability Exposes Private Container Images without Authentication
Ravie LakshmananMay 27, 2026Vulnerability / Software Security Cybersecurity researchers have disclosed a security flaw in Gitea, an open-source, self-hosted platform for version control, that allows…
Realities of the AI age force sustainability to the fore
For the better part of two years, the corporate world treated generative AI as a weightless innovation. It was an ethereal layer of intelligence that…
Exploit Code Published for Critical Flowise RCE Vulnerability
Obsidian Security has released technical information and proof-of-concept (PoC) code targeting a remote code execution (RCE) vulnerability in Flowise. The issue, tracked as CVE-2026-40933 (CVSS…
Lack of response to critical vulnerability in Gogs is a reminder of the limits of open source projects
Until a patch is released, developers and CSOs in organizations with the platform in use should strictly enforce restricted network access to Gogs, Emmons said,…
Should We Be Playing Offense or Defense in Cybersecurity?
Cybersecurity professionals tend to focus more on the defensive side of security. That’s the nature of the job after all—when adversaries attack, we defend. But…
Palo Alto GlobalProtect VPN auth bypass flaw now exploited in attacks
Palo Alto Networks is warning that hackers are now exploiting a PAN-OS GlobalProtect authentication bypass flaw, tracked as CVE-2026-0257, in attacks attempting to breach corporate networks.…