How China industrialized the infrastructure behind state hacking
The quartermaster model of hacking For a year prior to the takedown, Lumen’s Black Lotus Labs tracked QTFY as it functioned as a “quartermaster,” integrating…
Author: Cybernoz
Wiz Threat Research Team Spots New AWS Phishing Campaign
Earlier this week, one of our employees received a phishing email to their personal inbox that attempted to lure them into providing their AWS login…
Huntress Employee Spotlight: Meet Ben Bernstein
Huntress was founded in 2015 by former NSA cyber operators who believe enterprise-grade protection shouldn’t be reserved for the 1%. Since those early days, we’ve…
WordPress backup plugin flaw exposes millions of sites to takeover attacks
An SQL injection vulnerability in the All-in-One WP Migration and Backup plugin for WordPress could allow unauthenticated attackers to execute remote code and take control…
Claude AI Now Controls Your macOS and Windows Computer in the Background
Anthropic has quietly pushed one of its most consequential agentic upgrades yet, letting Claude take control of a user’s desktop and complete tasks while they…
Black Duck brings AI-powered vulnerability scanning into Claude with new Signal integration
Application security vendor Black Duck has launched its Signal vulnerability scanning engine as an MCP server in the Claude Directory, giving developers using Anthropic’s Claude…
Singularity Rootkit Bypasses Elastic Defend eBPF Module Load Detection
Security researcher has disclosed a technique used by the Singularity Linux rootkit to evade Elastic Defend by suppressing module-load telemetry to avoid detection across multiple…
SonicWall SMA 1000 appliances under attack via zero-day flaws
Attackers are exploiting two previously undisclosed vulnerabilities (CVE-2026-83548, CVE-2026-83549) in SonicWall SMA 1000 appliances, the vendor confirmed on Tuesday. The vulnerabilities (CVE-2026-83548, CVE-2026-83549) The SonicWall…
153M+ driver’s licenses for sale on new dark web platform
A new dark web platform called Nexus claimed to be selling 153 million driver’s license scans and millions of other identity and medical cards. The…
Fake Software Installers Disable Windows Update and Weaken Microsoft Defender
An active malware campaign is using bogus software-download websites to impersonate trusted vendors and distribute malicious installers. “The campaign has targeted users looking to download…
When the intern has admin rights: GDPR in the agentic age
The General Data Protection Regulation (GDPR) was built for a world where personal data was easier to govern. You could map where it came from,…
Airservices Australia wants to build an ‘AI front door’
Key points Airservices Australia is exploring a “broker platform” within its AWS tenancy to act as a single governed entry point for all AI interactions.…