CVE-2022-27518 exploited in the wild by APT5: everything you need to know
On December 13, 2022, the National Security Agency (NSA) released an advisory warning of exploitation in-the-wild of Citrix products by APT5, a threat actor attributed…
Author: Cybernoz
Democracy without a safety net.
CISA scales back its Election Day role. Google takes down a massive Android TV botnet. The UK warns of AI-powered attacks on critical infrastructure. German…
Hackers hijack cPGuard autoupdate to deploy backdoor, steal data
Attackers have compromised the update infrastructure for the cPGuard web security suite to distribute a backdoor and a data-stealing script. OpsShield, the cPGuard developer, published…
North Korean Hackers Abuse Internal AI Tool and Fake Job Interviews in $6.34 Billion Binance Heist
North Korean hackers used a fake job interview, a poisoned coding task, and a hijacked internal AI tool to reach Binance’s wallet systems. The FBI…
NIST Releases New Cybersecurity Guidelines to Protect Small Businesses From Phishing and Ransomware Attacks
The National Institute of Standards and Technology (NIST) released new cybersecurity guidance to help solo business owners protect themselves against threats like phishing, ransomware, and…
Cursor Distributed Claude Code Extensions With SSH Backdoor Code
Developers installing Claude Code through Cursor’s extension marketplace were offered tampered packages designed to collect information about their computers and give attackers remote access. Cursor…
Novee puts forgotten internet-facing assets through penetration testing
Novee’s External Surface Testing is a new capability in its AI penetration testing platform that helps security teams discover internet-facing assets and validate exploitable vulnerabilities.…
Revolve card breach: 1.5 million people may be affected
In this article Fashion retailer Revolve said customers’ payment card numbers and expiration dates were stolen Data at risk includes card numbers and expiration dates,…
mSecure Warns Users to Change Passwords, Reset 2FA and Passkeys After Suspicious Activity
Swati KhandelwalNov 03, 2026Password Security / Incident Response Customers of the mSecure password manager are being urged to act now to protect the confidential information…
Exposing state threats still matters – resilience matters more
On 8 October 2026, 10 agencies from across seven countries, from the FBI in the US to the UK’s National Cyber Security Centre (NCSC) to…
Toyota Finance Australia upgrades its ERP
Key points Toyota Finance Australia has completed a 13-month migration from a 16-year-old SAP ECC environment to S/4HANA cloud public edition, going live in early…
CrowdStrike Reportedly Paying $495 Million for AI Security Firms Fiddler, Dreadnode
CrowdStrike on Tuesday announced agreements to acquire AI agent observability firm Fiddler AI and AI security testing company Dreadnode, in deals reportedly worth a combined…