North Korea-Linked npm Packages Mimic Rollup Polyfills to Steal Developer Secrets
Threat actors with ties to North Korea have been linked to a fresh set of malicious npm packages that masquerade as Rollup polyfill tooling to…
Author: Cybernoz
Interview: Oracle NetSuite’s Evan Goldberg – SaaSpocalypse averted
Evan Goldberg, executive vice-president of Oracle NetSuite, recently took a class in artificial intelligence (AI) at Stanford University to brush up on his knowledge, he…
In Other News: Canadian Hacker Jailed, Open Source Zero-Days, Two Sentenced for ATM Jackpotting
SecurityWeek’s cybersecurity news weekly roundup offers a concise overview of important developments that may not receive full standalone coverage but remain relevant to the broader…
JADEPUFFER: First End-to-End AI-Driven Ransomware Operation
JADEPUFFER: First End-to-End AI-Driven Ransomware Operation Pierluigi Paganini July 03, 2026 Sysdig reports an AI agent ran a full ransomware attack end-to-end, exploiting flaws, stealing…
Alibaba bans staff from using Claude Code over Anthropic spyware concerns
Alibaba Group Holding has banned its employees from using Anthropic’s Claude Code for work, citing security risks related to the US artificial intelligence firm’s previous…
Adobe premieres a second Patch Tuesday each month to deliver fixes faster
As an early indicator of the need for the faster rhythm, it issued two security advisories dealing with a number of critical vulnerabilities on June…
Wiz Recognized as a 2025 Customers’ Choice in the Gartner® Peer Insights Voice of the Customer for CNAPP
At Wiz, everything starts with the trust our customers place in us. The insights and experiences shared by practitioners guide our roadmap and drive the…
Cisco finally confirms attackers exploiting Unified CM flaw
Cisco confirmed that attackers are now exploiting a Unified Communications Manager (Unified CM) vulnerability patched in early June. Unified CM (formerly known as Cisco CallManager)…
FBI Warns TeamPCP Hackers Compromise Developer Tools in Large-Scale Supply Chain Attacks
A new wave of software supply chain attacks has put developers and security teams on high alert. The threat group behind it, known as TeamPCP,…
Pegasus Spyware Hacked European Parliament Member Investigating Spyware Abuse
A newly disclosed forensic investigation has revealed that Pegasus spyware was used to hack a sitting Member of the European Parliament (MEP) who was actively…
Non-interactive SSH attacks dominate after login
Anyone who runs a server with SSH exposed to the internet sees the same pattern in the logs. A steady stream of automated scanners tries…
European Parliament Member Investigating Spyware Was Hacked With Pegasus
A new report from the Citizen Lab has revealed that former Member of the European Parliament Stelios Kouloglou had his mobile device repeatedly hacked with…