Trump turns to private sector in offensive hacking operations memo
President Donald Trump signed a national security memorandum Wednesday that lays the groundwork for private sector companies to take a larger role in helping law…
Author: Cybernoz
Black Hat USA 2026: AI is racing ahead of cybersecurity controls
AI took center stage, but the clearest lesson was less about what AI can do than about who is accountable when something goes wrong 12…
[tl;dr sec] #341 – Hugging Face Incident Black Hat Talk, CSS Bomb in your Inbox, GitHub Supply Chain Security Improvements
Deep dive and timeline of HF from OpenAI, Portswigger shows how CSS in webmail clients can be weaponized, GitHub’s platform improvements I hope you’ve been…
AI agents wage near-autonomous cyberattack on Asian government networks
Autonomous AI agents built on open-source frameworks breached Taiwanese government systems, compromised credentials, and probed a nuclear safety agency in a multi-day cyberattack that researchers…
Darktrace completes IRAP assessment for OT and network security platforms in Australia
Darktrace announced on Wednesday that it has completed an assessment by the InfoSec Registered Assessors Program (IRAP) of its Darktrace / NETWORK and Darktrace /…
Certificate Transparency Monitoring is now generally available
Since we launched Certificate Transparency Monitoring in public beta in 2019, we’ve been emailing subscribers whenever a new TLS certificate appears in a public Certificate…
Navigating AI-Driven Cyber Threats: Insights from Flashpoint’s 2026 GTIR Midyear Edition
In the first half of 2026, the global threat landscape reached a clear operational inflection point: threat operations have fundamentally transitioned from human-led campaigns to…
White House taps security firms for offensive hack-back operations
A new White House memo signed by U.S. President Donald Trump instructs the National Coordination Center (NCC) to establish a program that would allow private…
North Korean IT Workers Use AI-Forged IDs and Remote Desktops to Become Trusted Employees
A joint undercover investigation has pulled back the curtain on how North Korean IT worker operatives don’t just slip past hiring checks; they settle in,…
Scammers Exploit Shopify’s Own Notification System in New ‘Fake Refund’ Scam
Security researchers have identified a phishing campaign that abuses Shopify’s own Shop app to deliver fake order and refund notifications directly to victims’ phones, marking…
CBP Workers Allegedly Used Government Databases to Spy on Exes, Crushes, and Colleagues
Internal records obtained by WIRED reveal how, for years, United States Customs and Border Protection employees and contractors were accused of abusing sensitive government databases…
Critical Dell VMware vSphere Client Flaw Lets Remote Attackers Execute Commands as Root
Dell has disclosed a significant security vulnerability in its Virtual Storage Integrator (VSI) for VMware vSphere Client. This vulnerability could allow unauthenticated remote attackers to…