Investment scams double during winter as hackers turn friends into financial influencers
Financial scam attempts in Australia more than doubled during winter over the past two years, according to new data from Gen, the company behind Norton.…
Author: Cybernoz
The Red Agent POV: Exploiting Broken Object-Level Authorization in an Airline GraphQL API
This Red Agent POV focuses on Broken Object-Level Authorization (BOLA), and deep dives into a critical authorization bypass vulnerability discovered in an airline’s GraphQL booking…
The Hacker’s 2026 Playbook: Dark Web Tactics Targeting You
Sometimes it starts with something as simple as dragging a link into your browser. Three seconds later, a cybercriminal has the tokens they need to…
NAIC says public data stolen in ShinyHunters’ PeopleSoft breach
The National Association of Insurance Commissioners (NAIC) says the ShinyHunters extortion group stole only publicly available data, outdated logs, and configuration files after breaching its…
Nissan Confirms Data Breach Following Oracle PeopleSoft 0-Day Attacks
Nissan Americas has officially confirmed a data breach affecting current and former employees across four countries after threat actors exploited a critical zero-day vulnerability in…
ClawHavoc Attack Hits ClawHub With 1,184 Malicious Skills and 247,000 Installations
The AI-agent ecosystem experienced its largest supply-chain compromise to date when ClawHavoc detonated across ClawHub, the official skill marketplace for OpenClaw. Our full AIG-powered scan…
From Agile to Agentic: The Blueprint for an Autonomous SDLC
The world of software development is undergoing its most profound transformation since the Agile Manifesto. For the past decade, we have lived in a human-led,…
Bluekit Phishing Kit Uses Browser-in-the-Middle Attacks to Evade Detection
A new phishing-as-a-service (PHaaS) platform called Bluekit is letting cybercriminals steal user accounts using a tricky method. While Varonis Threat Labs first spotted and reported…
Sycophantic chatbots and the harms that build over many chats
People use AI chatbots for company, advice, and emotional support, and these systems answer in ways meant to hold their attention. Researchers describe the resulting…
Mustang Panda Uses Zoho WorkDrive as Command Channel in Indian Government Attacks
Ravie LakshmananJun 29, 2026Threat Intelligence / Malware The China-aligned espionage group Mustang Panda is running two campaigns against the Indian government and hydropower targets, deploying new malware…
India’s Hexaware to add 1,200 UK tech staff
Hexaware is recruiting around 1,200 tech and techno-functional staff in the UK, with the IT services planning to spread its operation north. The company is…
Soaring bills reshape how businesses choose AI models
Silicon Valley’s powerful and pricey AI models have been a necessity for businesses looking to future-proof themselves. But now a growing number of tech CEOs…