Supply Chain Attack Targets JavaScript’s Lottie-Player
On October 30, 2024, a supply chain attack was initiated against the popular JavaScript library lottie-player, injecting malicious code that populates a Web3 wallet connection…
Author: Cybernoz
Mexico’s Cybersecurity Plan 2025-2030: Turning Ambition Into Defense
Mexico faces an increasingly complex cyber threat landscape, including ransomware, state-sponsored espionage, financial malware, data breaches, hacktivism, and cyber-enabled organized crime. Its 2025–2030 National Cybersecurity…
5 Modern Threats You Need to Watch
More tools. More alerts. More late nights. And yet, the incidents that keep blowing up your week rarely start with some flashy, sophisticated exploit. They…
Hospital operator Nutex Health says data stolen in cyberattack
Healthcare and services provider Nutex is investigating a data breach incident where an unauthorized third party exfiltrated information from company servers. The organization has disclosed the…
AI Security Startup Alice Raises $140 Million as Enterprise AI Threats Surge
Alice, the AI trust, safety, and security company formerly known as ActiveFence, has closed a $140 million funding round led by Apax Digital Funds, with…
What’s in a tag name? JavaScript, apparently
I was on my laptop, as I often am when there’s rubbish on telly, and found myself wondering what characters are allowed in a tag.…
Check Point Threat Brief: Critical Infrastructure Breaches and Emerging AI Attack Surfaces
Widespread Infrastructure Breaches and Novel AI Threats Several significant security breaches and new exploitation patterns are highlighted in the Check Point Research threat bulletin, which…
The County Prosecutors Who Became ICE Informants
This story was produced in partnership with Injustice Watch, a nonprofit newsroom in Chicago focused on the court system. Rolando Perez Samayoa had come to…
AI-Assisted ToxNetV2 Linux Botnet Uses LLM to Generate Shell and SSH Commands
ToxNetV2, an AArch64 Linux peer-to-peer botnet, integrates a large language model into its controller workflow to turn botnet and host telemetry into proposed operational actions.…
The Security Poverty Line: Fireside Chat At Black Hat USA 2026
In 2011, when Wendy Nather was at 451 Research, she coined the term Security Poverty Line, the line below which an organization cannot be effectively secured. The arrival…
INTERPOL crackdown on West African crime rings uncovers troubling new trend
Police across 22 countries arrested 58 people and identified 263 suspects during an eight-month INTERPOL operation targeting West African organized crime groups. Suspects detained in…
Grok fooled into stealing user chat, location data, and more
A new type of prompt injection attack shows why giving AI assistants access to browsers, code tools, and private data deserves extra caution. AI researchers…