The Dumbest Hack of the Year Exposed a Very Real Problem
In the wee hours of the night last April, someone stopped at roughly 20 street intersections across Silicon Valley and launched an unprecedented cyberattack that…
Author: Cybernoz
VIPERTUNNEL Python Backdoor Hidden in Fake DLL, Obfuscated Loader Chain
Hackers are abusing a stealthy Python backdoor called VIPERTUNNEL, hiding it behind a fake DLL file and a multi‑stage obfuscated loader to quietly tunnel traffic out…
Seized VerifTools servers expose 915,655 fake IDs, 8 arrested
On April 7 and 8, Dutch police arrested eight suspects in a nationwide operation targeting users of the VerifTools platform as part of an identity…
A week in security (April 6 – April 12)
Last week on Malwarebytes Labs: Stay safe! We don’t just report on scams—we help detect them Cybersecurity risks should never spread beyond a headline. If…
OpenAI Revokes macOS App Certificate After Malicious Axios Supply Chain Incident
OpenAI revealed a GitHub Actions workflow used to sign its macOS apps led to the download of the malicious Axios library on March 31, but…
If we can’t kick the habit, how do we manage AI’s energy needs?
Sam Altman, CEO of OpenAI, recently made a comparison between how much energy had been consumed by humanity over the millennia and the energy consumption…
Authorities Dismantle ‘W3LL’ Phishing Empire
An international operation, coordinated between the FBI Atlanta Field Office and Indonesian law enforcement agencies has led to a taken down of a major phishing…
Adobe Fixes Acrobat Reader Flaw Zero-Day CVE-2026
Adobe has issued emergency security updates addressing a severe Acrobat Reader flaw tracked as CVE-2026-34621, a high-impact Adobe vulnerability that has already been observed being exploited in real-world attacks. The issue, rated…
The death of standing privilege in the age of AI agents
If you work in Privileged Access Management (PAM), you know the job has never been glamorous. It’s about cleaning up messes and root accounts no…
Gmail Brings End-to-End Encryption to Android and iOS for Enterprise Users
Google has announced the availability of end-to-end encryption (E2EE) in Gmail for enterprise users on Android and iOS. Building on the rollout of Gmail E2EE…
CPUID watering hole attack spreads STX RAT malware
CPUID watering hole attack spreads STX RAT malware Pierluigi Paganini April 13, 2026 Threat actors compromised the CPUID website and spread STX RAT through fake…
Was ist Federated Identity Management?
Der Blick auf eine High-Level-SSO-Architektur. Foto: Foundry / Matthew Tyson In jedem Fall erfordert Federated Identity Management eine zentrale Institution, die die gemeinsamen Anmeldeinformationen zwischen…