New backdoors from Toy Ghouls
Introduction We continue tracking the activity of Toy Ghouls (also known as Bearlyfy, Laboo.boo, and Feral Wolf), a financially motivated group that has been targeting…
Author: Cybernoz
OpenAI launches GPT-6 Astra, its first model to cross a critical cybersecurity threshold
Developers can access Astra in the API as gpt-6-astra or through Amazon Bedrock, OpenAI said, priced at $10 per million input tokens and $50 per…
Booz Allen: AI models approaching autonomous cyberattack capability as critical infrastructure response windows narrow
New research from Booz Allen found that testing of 18 U.S. and Chinese frontier AI models revealed that AI (artificial intelligence) is nearing the ability…
G7 urges governments, organizations to begin PQC transition, protect public key encryption from quantum threats
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) and the G7 Cybersecurity Working Group are urging governments and organizations to immediately begin transitioning to post-quantum…
Introducing pattern-based agentless malware detection using YARA rules
Malware poses a critical threat to cloud environments, facilitating malicious activity by threat actors that results in compromise, data breach, or disruption in operations. According…
STIXy Situations: ECSaping your threat data
Preamble Organizations that use threat indicators or observables consume, create, and/or (ideally) publish threat data. This data can be used internally or externally as information…
Microsoft: KB5120998 mouse reset bug affects only non-English PCs
Microsoft says a known issue that reverts mouse settings after installing the KB5120998 August 2026 preview update affects only non-English Windows 11 systems. The bug…
14 Fake macOS Installers Linked to DPRK Campaign Deliver Credential-Stealing RAT
Mac users are being targeted with 14 fake application installers that appear to offer familiar software but instead start a credential-stealing remote-access trojan. The files…
Microsoft 365 Direct Send Bypass Lets Attackers Spoof Internal Users Without Credentials
A Microsoft 365 email security-control bypass that lets attackers submit unauthenticated messages posing as internal users by leaving one SMTP field blank. The technique targets…
A five-part inventory for your AI agent credentials
In this Help Net Security video, Roy Katmor, co-founder and CEO of Orchid, explains why AI agents hold credentials that nobody reviews. Organizations build agents…
US Becomes Top Target in RMM Phishing Campaign Spanning 46 Countries
The Hacker NewsSep 03, 2026Social Engineering / Malware An RMM phishing campaign initially associated with Canadian targeting due to its use of Canada Revenue Agency…
Oracle executive chairman Larry Ellison called to testify over US health system overspend
The US House Committee for Veterans’ Affairs (VA) has unanimously passed a motion that will mean Oracle executive chairman and chief technology officer, Larry Ellison,…