APT28 Deploys PRISMEX Malware in Campaign Targeting Ukraine and NATO Allies
Ravie LakshmananApr 08, 2026Vulnerability / Cloud Security The Russian threat actor known as APT28 (aka Forest Blizzard and Pawn Storm) has been linked to a fresh…
Author: Cybernoz
Hyperscaler datacentres set to dominate by 2031
Immense concentration continues apace in the cloud industry, with hyperscalers expected to comprise 67% of global datacentre capacity by 2031, or 14 times the capacity…
Citigroup says AI helps speed account openings and systems upgrades
Citigroup is using artificial intelligence to speed up account openings and the retirement of old software, the US bank’s head of technology, Tim Ryan, said,…
Shaky Ceasefire Unlikely to Stop Cyberattacks From Iran-Linked Hackers for Long
Hackers backing Tehran say an uncertain ceasefire between Iran and the United States and Israel won’t end their retaliatory cyberattacks, a warning that American cybersecurity…
Russia-linked APT28 uses PRISMEX to infiltrate Ukraine and allied infrastructure with advanced tactics
Russia-linked APT28 uses PRISMEX to infiltrate Ukraine and allied infrastructure with advanced tactics Pierluigi Paganini April 08, 2026 APT28 targets Ukraine and allies with PRISMEX…
Cracks in the Bedrock: Agent God Mode
Executive Summary Our first article about the boundaries and resilience of Amazon Bedrock AgentCore focused on the Code Interpreter sandbox, and how it can be…
Questions raised about how LinkedIn uses the petabytes of data it collects
“Assuming the BrowserGate allegations are true, LinkedIn users should consider reducing the amount of identifiable, trackable, or sensitive data their browser exposes, and organizations should…
Huntress Is Now a CVE Numbering Authority. But What Does
Huntress has been authorized by the Common Vulnerabilities and Exposures (CVE) Program as a CVE Numbering Authority (CNA). This sounds fancy (and it is), but…
Hackers use pixel-large SVG trick to hide credit card stealer
A massive campaign impacting nearly 100 online stores using the Magento e-commerce platform hides credit card-stealing code in a pixel-sized Scalable Vector Graphics (SVG) image.…
IBM Identity and Verify Access Vulnerabilities Allow Remote Attacker to Access Sensitive Data
A critical security bulletin highlights multiple vulnerabilities in Verify Identity Access and Security Verify Access products. If left unpatched, these widespread security flaws could allow…
MIWIC26: Nicole Bucala, CEO of DataBee, A Comcast Company
Organised by Eskenzi PR in media partnership with the IT Security Guru, the Most Inspiring Women in Cyber Awards aim to shed light on the remarkable women in…
EvilTokens Uses Stolen Microsoft 365 Tokens, AI to Supercharge BEC
EvilTokens is a new Phishing-as-a-Service (PhaaS) platform that turns stolen Microsoft 365 tokens and AI into an end‑to‑end factory for Business Email Compromise (BEC) at…