North Korean Hackers Blamed for Mastra NPM Supply Chain Attack
The North Korean state-sponsored threat actor Sapphire Sleet is behind the Mastra supply chain attack that hit over 140 NPM packages last week, Microsoft reports.…
Author: Cybernoz
WhatsApp Malware Campaign Hijacks Trust, Installs Legitimate Admin Tools
WhatsApp Malware Campaign Hijacks Trust, Installs Legitimate Admin Tools Pierluigi Paganini June 22, 2026 WhatsApp accounts were hijacked to spread fake debt notices that install…
CISA urges device hardening after thousands of Fortinet credentials compromised
Security researchers warn of a months-long FortiBleed campaign targeting western organizations. Source link
Court rules SAVE database illegal, orders it dismantled
A federal court ruled Monday that the Trump administration’s national voter database violates federal privacy laws, interferes with Americans’ right to vote, and must be…
Klue breach exposed Salesforce CRM data through stolen OAuth tokens
Security vendor and Klue customer Huntress published its own investigation filling in that gap. The attackers had pushed a code update to a Klue integration…
Following user outcry, AMD reinstates memory encryption in consumer CPUs
Over the weekend, AMD said it planned to do just that in a firmware update scheduled for release next month. More often than not, the…
Bringing Security Visibility to Vercel with Wiz
Modern application development has changed dramatically. Today’s apps are increasingly built using frontend frameworks, serverless functions, and edge infrastructure. Platforms like Vercel make it possible…
Guarding AI memory | Microsoft Security Blog
In this article AI memory transforms an AI system from a stateless tool into a learning collaborator. That unlocks powerful experiences, but it also increases…
CNAPP’s New Normal: Hyper-Prioritization and Autonomous Remediation at Cloud Scale
AI-powered detection has crossed a threshold. Security teams can now surface vulnerabilities, misconfigurations, and active attack paths at a speed and scale that was unimaginable…
FortiBleed campaign used custom FortiGate sniffer to steal credentials
Security firm SOCRadar says the large-scale FortiBleed campaign targeting Fortinet FortiGate devices used custom sniffers to harvest authentication secrets from compromised firewalls and steal credentials.…
AryStinger Botnet Hijacks 4,300+ Routers to Build Global Attack Proxy Network
A newly discovered botnet called AryStinger has quietly hijacked more than 4,300 routers across the globe, turning them into a silent army of attack proxies.…
Cloud Managed Services For Modern Cybersecurity To Secure Cloud
Cloud adoption has grown at an unprecedented pace over the past decade. Enterprises across industries now run critical workloads, applications, and sensitive data on cloud…