Chrome, Firefox Updates Patch 114 Flaws as Mozilla Unveils Firefox Enterprise
Google and Mozilla on Tuesday announced fresh Chrome and Firefox updates that resolve 114 vulnerabilities. The Chrome update was rolled out with fixes for 37…
Author: Cybernoz
How a leaked builder of XWorm turned a remote access trojan into a surveillance kit
How a leaked builder of XWorm turned a remote access trojan into a surveillance kit Pierluigi Paganini October 14, 2026 Netskope tracks four XWorm versions…
DOJ charges 14 over a sprawling North Korean remote work scheme
Federal authorities have charged 14 people and seized roughly 187 computers in their newest effort to disrupt North Korea’s remote IT worker scheme. The Justice…
OpenAI’s AI misalignment problem is growing
OpenAI’s misalignment problems seem to only be getting worse, based on yet another trio of reports detailing its models’ troubling and overzealous behaviors. In ad…
Linux rootkits explained – Part 1: Dynamic linker hijacking
Rootkits are a type of malware used by threat actors to gain complete control over a compromised resource and hide malicious activity. They are often…
Malware Indicators of Compromise (IoCs)
One malware hash can turn a vague alert into a concrete investigation. Analysts can search endpoints for the exact file, trace where it appeared, and…
Business Leader First, CMO Second with Tracey Moon of BlackCloak
Episode Summary: Tracey Moon is a multi-time CMO and currently leads marketing at BlackCloak, a company that protects executives and their families in their personal…
Ghostscript flaw lets hackers hijack servers via PDF uploads
A critical heap buffer overflow vulnerability (CVE-2026-39919) in the Ghostscript interpreter and rendering engine could allow remote code execution through specially crafted PDF files. The flaw…
Microsoft Windows Shell 0-Day Vulnerability Actively Exploited in Attacks
Microsoft has patched an actively exploited Windows Shell zero-day vulnerability that allows attackers to bypass Mark of the Web protections. Tracked as CVE-2026-96951, the flaw…
SAP Patches Critical NetWeaver and S/4HANA Security Flaws Affecting Enterprise Systems
SAP’s Security Patch Day on October 13, 2026, addresses critical vulnerabilities found in enterprise applications, integration platforms, and developer libraries. The October bulletin details the…
MS Teams Phishing, ClickFix and Shai-Hulud npm Attacks Dominate Threat Report
Ontinue’s 1H 2026 threat report shows attackers increasingly abusing Microsoft Teams, npm packages, device-code logins and blockchain ClickFix tactics to steal access and spread malware.…
GitLab admins urged to patch critical RCE flaw (CVE-2026-97229)
GitLab is urging users of self-managed instances to patch a critical vulnerability (CVE-2026-97229) in its CI/CD Regular Expression Compiler that could allow remote attackers to…