Attackers hid malware inside Oracle Database after SQL injection breach
The attackers could have simply extracted or manipulated data through SQL injection, but instead, they expanded the exploit to include long-term persistence and remote command…
Author: Cybernoz
Introducing Wiz Lens: Role-based views for every security team
Organizations adopting cloud and AI at scale face a tough challenge: balancing centralized security control with speed and agility across diverse teams. Enter Wiz Lens—a…
Weekly Cyber Security Newsletter — OWASP Top 10 for LLM, Cisco IOS XE Flaw, and 1-Click Cursor RCE +20 Stories
This week’s roundup covers active exploitation of Apache Tomcat and SonicWall SMA, a nearly two-decade-old Linux kernel flaw, critical bugs in N-able N-Central, Veeam ONE,…
4 Steps for Making Sure Domain Impersonation Takedown Requests Don’t Get Rejected
Brand impersonation is one of the fastest growing threats facing organizations today. Bad actors create fake websites using an organization’s name, logos, and visual identity to exploit brand trust and steal a customer, partner, or employee’s credentials, money, or sensitive data.…
New NatJack Attacks Hijack TCP Sessions and Spoof DNS by Manipulating NAT Tables
Swati KhandelwalAug 07, 2026Network Security / Vulnerability Security researcher Malcolm Stagg has disclosed a new attack class called NatJack that manipulates network address translation (NAT)…
U.S. Defense Manufacturer IEH Hit by Phishing Attack, Exposing Potentially Export-Controlled Data
U.S. Defense Manufacturer IEH Hit by Phishing Attack, Exposing Potentially Export-Controlled Data Pierluigi Paganini August 09, 2026 IEH was breached by a phishing attack that…
Autonomy is earned, not claimed
After more than 300,000 production penetration tests (pentests), our company has learned something that may surprise people watching the recent wave of autonomous security announcements.…
This ‘adversarial’ pattern can prevent surveillance cameras from detecting you
Bill Swearingen has spent the past year running largely the same test, over and over again. The goal was to produce a computer-generated pattern that…
2025 State of Code Security: Key Trends and Risks
In cloud-native environments, the security of your code repositories and development pipelines is critical. The 2025 State of Code Security Report sheds light on the…
CSS Bomb Attacks Turn Malicious Emails Into Password-Stealing Keyloggers
A new class of email-based attacks that exploit ordinary CSS styling code to hijack webmail interfaces, spy on user activity, and even steal passwords in…
Storm-1175 Launches StormEncryptor Ransomware Attacks Using N-able Security Flaw
Microsoft Threat Intelligence has identified a new ransomware campaign attributed to the financially motivated threat actor Storm-1175 that began deploying a previously undocumented ransomware strain,…
18-Year-Old Linux SCTP Flaw Could Let Local Users Gain Root and Escape Containers
Swati KhandelwalAug 07, 2026Linux / Vulnerability A use-after-free bug in Linux’s SCTP networking code can be turned into full root on a host, and Tencent…