U.S. Offers $10 Million Reward for Russian Hackers Behind Signal and WhatsApp Phishing
U.S. Targets Russian Cyber Spies With $10M Bounty Over Messaging App Attacks Pierluigi Paganini June 29, 2026 The U.S. offers up to $10M for information…
Author: Cybernoz
Supreme Court delivers ‘major win’ for tech privacy in Chatrie ruling
The Supreme Court ruled Monday that collecting phone location data from a geographic area is a Fourth Amendment search, in a decision that both privacy…
Investment scams double during winter as hackers turn friends into financial influencers
Financial scam attempts in Australia more than doubled during winter over the past two years, according to new data from Gen, the company behind Norton.…
The Red Agent POV: Exploiting Broken Object-Level Authorization in an Airline GraphQL API
This Red Agent POV focuses on Broken Object-Level Authorization (BOLA), and deep dives into a critical authorization bypass vulnerability discovered in an airline’s GraphQL booking…
The Hacker’s 2026 Playbook: Dark Web Tactics Targeting You
Sometimes it starts with something as simple as dragging a link into your browser. Three seconds later, a cybercriminal has the tokens they need to…
NAIC says public data stolen in ShinyHunters’ PeopleSoft breach
The National Association of Insurance Commissioners (NAIC) says the ShinyHunters extortion group stole only publicly available data, outdated logs, and configuration files after breaching its…
Nissan Confirms Data Breach Following Oracle PeopleSoft 0-Day Attacks
Nissan Americas has officially confirmed a data breach affecting current and former employees across four countries after threat actors exploited a critical zero-day vulnerability in…
ClawHavoc Attack Hits ClawHub With 1,184 Malicious Skills and 247,000 Installations
The AI-agent ecosystem experienced its largest supply-chain compromise to date when ClawHavoc detonated across ClawHub, the official skill marketplace for OpenClaw. Our full AIG-powered scan…
From Agile to Agentic: The Blueprint for an Autonomous SDLC
The world of software development is undergoing its most profound transformation since the Agile Manifesto. For the past decade, we have lived in a human-led,…
Bluekit Phishing Kit Uses Browser-in-the-Middle Attacks to Evade Detection
A new phishing-as-a-service (PHaaS) platform called Bluekit is letting cybercriminals steal user accounts using a tricky method. While Varonis Threat Labs first spotted and reported…
Sycophantic chatbots and the harms that build over many chats
People use AI chatbots for company, advice, and emotional support, and these systems answer in ways meant to hold their attention. Researchers describe the resulting…
Mustang Panda Uses Zoho WorkDrive as Command Channel in Indian Government Attacks
Ravie LakshmananJun 29, 2026Threat Intelligence / Malware The China-aligned espionage group Mustang Panda is running two campaigns against the Indian government and hydropower targets, deploying new malware…