Security News This Week: LastPass Users Had Their Data Stolen—Again
A WIRED investigation this week offers insight into a predictive policing program in Bristol, England that has involved 23 separate models over more than a…
Author: Cybernoz
Claude Mythos 5 Redeployed to Help U.S. Organizations Strengthen Cyber Defense
Anthropic has officially restored access to its Claude Mythos 5 artificial intelligence model for a select group of U.S. organizations tasked with defending critical national…
OpenAI Previews GPT-5.6 Sol With Restricted Access and Stronger Cyber Safeguards
OpenAI on Friday released three versions of GPT-5.6, called Sol, Terra, and Luna, as a limited preview to a small number of companies as part…
Canvas breach hit 160 UK unis but caused limited damage
The April 2026 cyber incident that hit Infrastructure Holding’s Canvas learning management system (LMS) is now thought to have affected approximately 160 British higher education…
Chinese Framework Powers 200,000 Scam Sites
More than 200,000 websites are using investment scam templates built with the Chinese open source framework Uni-App, Infoblox reports. A cross-platform development toolkit, Uni-App allows…
DirtyClone: A Linux Privilege Escalation That Leaves No Trace on Disk
DirtyClone: Fourth Linux Kernel Flaw in Six Weeks Escalates to Root Pierluigi Paganini June 27, 2026 DirtyClone: a Linux kernel privilege escalation that silently rewrites…
Mythos is a signal, not a siren: What frontier AI should change for CISOs
That is why I view Mythos as a signal, not a siren. It signals that the economics of cyber offense and defense are changing. It…
Wiz Achieves CPSTIC Certification in Spain
Wiz has certified its commercial platform in the Spanish National Cryptologic Center (CCN) ICT Security Products and Services Catalog (CPSTIC). Inclusion in this catalogue enables…
Cybersecurity firms targeted by fraudulent OpenAI organization invites
Threat actors are creating OpenAI tenants that impersonate legitimate companies and inviting employees to join them, in what appears to be a ploy to trick…
New Bucket Hijacking Attack Allows Hackers to Reroute Cloud Data Streams to External Storage
A critical cloud storage attack technique dubbed “bucket hijacking” a method that enables threat actors to silently redirect an organization’s active cloud data streams, including…
Linux Kernel DirtyClone Vulnerability Lets Local Attackers Gain Root Privileges
A critical Local Privilege Escalation flaw has been uncovered within the Linux kernel, allowing unprivileged local users to seamlessly gain root access by manipulating the…
Microsoft gives Windows 10 users an unexpected extra year of free security updates
Microsoft has given Windows 10 users another year of free security updates, extending its consumer Extended Security Updates (ESU) program until October 12, 2027. “Windows…