SAP npm Packages Compromised to Harvest Developer and CI/CD Secrets
A new supply chain attack dubbed “mini Shai Hulud” has compromised four SAP-related npm packages by injecting malicious preinstall scripts that silently execute during dependency…
Author: Cybernoz
Cursor AI Extension Flaw Exposes Developer Tokens to Credential Theft
Security researchers at LayerX have uncovered a high-severity vulnerability in the popular AI-powered development environment, Cursor. Dubbed “CursorJacking,” this flaw carries a CVSS score of…
New AI-Powered Bluekit Phishing Kit Targets Major Platforms with MFA Bypass Attacks
Varonis Threat Labs has discovered a new phishing-as-a-service kit called Bluekit that is making it much easier for cyberattackers to bypass security, even when users…
Scam-checking just got a lot easier: Malwarebytes is now in Claude
For years, Malwarebytes has protected people by going where they are, and where people are today is increasingly within AI tools. As these chatbots tackle more everyday questions—like what to…
SAP-Related npm Packages Compromised in Credential-Stealing Supply Chain Attack
Ravie LakshmananApr 29, 2026Supply Chain Attack / Malware Cybersecurity researchers are sounding the alarm about a new supply chain attack campaign targeting SAP-related npm Packages…
IT workers say AI is making their jobs more demanding
A survey, commissioned and published by SolarWinds, reveals 71% of IT workers say artificial intelligence (AI) is making their jobs more demanding, leading to a…
CERT-In Warns MSMEs Of Rising AI Cyberattack Risks
India’s cybersecurity watchdog, CERT-In, has raised concerns of the nature of modern cyber threats, particularly those driven by artificial intelligence. In its latest advisory, the cybersecurity…
Macquarie Bank saves 130,000 hours in seven months of Gemini Enterprise use
Macquarie Bank says that “close to 80 percent” of its 5000 staff use Google’s Gemini Enterprise on a daily basis, seven months on from signing…
Hundreds of Internet-Facing VNC Servers Expose ICS/OT
Millions of remote access RDP and VNC servers are exposed to the internet, and hundreds of them may provide access to industrial control systems (ICS)…
Internet censorship index reveals Russia’s lead and widespread content blocking
Internet censorship index reveals Russia’s lead and widespread content blocking Pierluigi Paganini April 29, 2026 Global study shows targeted internet censorship worldwide, with Russia leading;…
CISA adds Microsoft, ConnectWise vulnerabilities to active exploitation catalog
Russia has used one of the flaws, security experts said, while North Korea has used the other. Source link
AWS leans on prior ingenuity to face future AI and quantum threats
As Amazon celebrates the 20th anniversary of its AWS cloud this year, the world’s biggest cloud computing provider now faces two giant cybersecurity threats —…