More PayPal emails hijacked to deliver tech support scams
Scammers have found another way to get deceptive messages delivered through PayPal’s legitimate services. In December 2025, we reported that PayPal closed a loophole that…
Author: Cybernoz
PyTorch Lightning and Intercom-client Hit in Supply Chain Attacks to Steal Credentials
Ravie LakshmananApr 30, 2026Supply Chain Attack / Malware In yet another software supply chain attack, threat actors have managed to compromise the popular Python package…
Almost half of UK businesses hit by cyber attacks
The general cyber security threat to UK organisations remains “widespread and significant” with 43% of businesses, 28% of charities and 69% of large firms having…
Intelligence × Trust: the equation that will decide Australia’s AI winners
When Microsoft CEO Satya Nadella took the stage at the Microsoft AI Tour in Sydney on 23 April, the headline was a A$25 billion commitment…
Anthropic Unveils Claude Security to Counter AI-Powered Exploit Surge
Mythos in the hands of attackers threatens a storm beyond the power of security teams to weather. Claude Security is designed to counter this. Anthropic’s…
Copy Fail: New Linux bug enables Root via page‑cache corruption
Copy Fail: New Linux bug enables Root via page‑cache corruption Pierluigi Paganini April 30, 2026 Linux flaw CVE‑2026‑31431, ‘Copy Fail,’ lets any local user write…
PwC partners with Google Cloud to take on the managed security market
The professional services firm is stepping up its managed security ambitions with a Google Cloud-powered service that leans on agentic AI. The target market is…
Two new extortion crews are speedrunning the Scattered Spider playbook
A pair of persistent and problematic threat groups affiliated with The Com are actively targeting organizations across multiple critical infrastructure sectors for rapid data theft…
France probes teenage suspect in massive ID data breach
The Paris prosecutor’s office has opened an investigation into a 15-year-old, suspected of having hacked the country’s ID agency and trying to sell the data…
![[tl;dr sec] #326 - AI Auto Exploiting Vulnerabilities, GitHub RCE, Autonomous Cloud Hacking Agent](https://image.cybernoz.com/wp-content/uploads/2026/04/tldr-sec-326-AI-Auto-Exploiting-Vulnerabilities-GitHub-RCE-600x340.png)
[tl;dr sec] #326 – AI Auto Exploiting Vulnerabilities, GitHub RCE, Autonomous Cloud Hacking Agent
Hackathon This week Semgrep friends have flown in from all over the world to crazily build together. Engineers, security researchers, designers, and, as we are…
Max-severity RCE flaw found in Google Gemini CLI
“The vulnerability allowed an unprivileged external attacker to force their own malicious content to load as Gemini configuration,” Novee researcher, Elad Meged, said in a…
Research finds EnOcean SmartServer vulnerabilities could let attackers take over BMS and IoT devices
Claroty’s threat research team, Team82, uncovered two vulnerabilities in EnOcean’s SmartServer IoT platform affecting version 4.60.009 and earlier. One of the flaws, tracked as CVE-2026-20761,…