Malicious sites use JavaScript to build malware in browser memory
A massive malvertising campaign is using fake Solana, Luno, and TradingView webpages with malicious JavaScript that instructs browsers to assemble malware directly in memory. The…
Author: Cybernoz
SBOM/CVE: The Duck and Cover of Cyber War
We are doing security drills diligently for the wrong catastrophe. Here is what actually duck and cover for cyber threat looks like. By Dr. Arun Lakhotia…
Google Launches Unified Cryptonym-Based Naming System for Threat Actors
Google Threat Intelligence Group (GTIG) has introduced a unified cryptonym-based naming system for cyber threat actors, aiming to simplify attribution, improve analyst workflows, and eliminate…
The best-funded companies open the most phishing attachments
An employee gets an email dressed as a password reset. She clicks the link, types her credentials into a page built to copy her company’s…
Fastjson 1.x RCE Vulnerability Targeted in Attacks With No Patched Available
Swati KhandelwalJul 25, 2026Vulnerability / Application Security Security firms ThreatBook and Imperva say attackers are targeting a critical flaw in Fastjson, Alibaba’s JSON library for…
Wiz Integrates with NVIDIA Enterprise AI Factory
As AI becomes the foundation of modern enterprise infrastructure, organizations face a dual mandate: secure the infrastructure powering AI, and leverage AI to drive smarter,…
OpenAI confirms ChatGPT is down worldwide
ChatGPT is experiencing a major outage, and users are unable to load chats, including previous conversations. The outage started at approximately 5 AM ET and…
Cl0p Hackers Exploit Windchill Servers to Steal Companies’ Secret Product Designs
Cl0p ransomware affiliates are exploiting exposed PTC Windchill and FlexPLM servers to steal engineering and product-design data. The campaign combines software flaws to gain access…
FBI and CISA Warn of Escalating Iranian Cyber Attacks
Escalating Threats to Critical Infrastructure On July 22, 2026, federal agencies led by the FBI, CISA, and NSA released an updated joint alert warning that…
The OpenAI Models That Hacked Hugging Face Were ‘Active on the Internet’ for Days
Two of OpenAI’s cybersecurity-focused models broke out of a testing sandbox this week and went on to hack the AI research platform Hugging Face in…
Hackers Use Stealer Logs to Bypass MFA and Launch Ransomware Attacks
Infostealer malware has now become the invisible thread linking petty credential theft to full-blown ransomware campaigns. Attackers no longer bother forcing their way through firewalls…
How AI and “Mythos” Are Exacerbating the Situation Regarding GDPR, NIS2 and DORA
Through NIS2, DORA, and the GDPR, the EU has established a regulatory framework of Acts and Directives – complete with a system of financial penalties…