Microsoft Exchange, Windows 11, and Cursor Zero-Days Exploited on Pwn2Own Day 2
Pwn2Own Berlin 2026 is rapidly escalating into one of the most intense offensive security contests in recent years, with Day Two delivering a fresh wave…
Author: Cybernoz
The Security Mistakes Being Repeated With Ai
There’s a pernicious cycle in cybersecurity that has repeated for decades. Products are released before they are properly secured — security-by-design principles are skipped —…
JDownloader Website Hack Exposes Windows and Linux Users to Malicious Installers
A popular open-source download manager trusted by millions suddenly became a malware delivery platform after attackers compromised its official website, replacing legitimate installers with trojanized…
AI Voice Cloning: The Technology Behind It, Who’s Building It, and Where It’s Headed
AI Voice Cloning meant having a voice model trained for hours, acquiring extremely high-quality recordings in a studio, and deploying a team of high-level researchers.…
Zombie linkages are keeping expired domains trusted for years
Domains expire, get transferred, and return to the market every day. The systems connected to those domains can continue trusting the original owner long after…
Ghostwriter Targets Ukrainian Government With Geofenced PDF Phishing, Cobalt Strike
The Belarus-aligned threat group known as Ghostwriter has been attributed to a fresh set of attacks targeting governmental organizations in Ukraine. Active since at least…
Software developers shift to AI code reviewers
The use of artificial intelligence (AI) in coding is shifting the role of software development, but measuring lines of code is no longer a valid…
PoC Code Published for Critical NGINX Vulnerability
Technical details and proof-of-concept (PoC) exploit code targeting a newly patched critical-severity vulnerability in NGINX are now available. Tracked as CVE-2026-42945 (CVSS score of 9.2),…
OpenAI hit by supply chain attack linked to malicious TanStack packages
OpenAI hit by supply chain attack linked to malicious TanStack packages Pierluigi Paganini May 16, 2026 OpenAI said the TanStack supply chain attack compromised two…
Why geopolitical turmoil is a gift for scammers, and how to stay safe
Conflict is a boon for opportunistic fraudsters. Look out for their ploys. 15 May 2026 • , 5 min. read It didn’t take long for…
The economics of ransomware 3.0
Guidance: NIST’s Cybersecurity Framework 2.0 provides the most widely adopted reference architecture for incident response capability maturity, covering identification, protection, detection, response and recovery functions.…
Incident Response: A Choose Your Own Adventure Exercise
When I was a kid, I loved choose your own adventure books. You made decisions and could become a powerful Sho-Gun warrior—or if you chose…