Amazon Q Developer Flaw Could Let Malicious Repos Run Code via MCP Configs
Swati KhandelwalJun 26, 2026AI Security / Vulnerability A high-severity flaw in Amazon Q Developer let a malicious repository run commands and steal a developer’s cloud…
Author: Cybernoz
Metropolitan Police chief warns against law updates amid substantial tech expansion
Metropolitan Police commissioner Mark Rowley has set out the force’s plan to drastically upscale its use of artificial intelligence (AI), live facial recognition (LFR) and…
Linux Foundation Unveils New Open Source Security Project Akrites
The Linux Foundation on Thursday announced a new industry effort aimed at efficiently addressing vulnerabilities in the open source software (OSS) ecosystem. Named Akrites, it…
Third-Party Breach at Polymarket Leads to $2.94M Crypto Theft
Third-Party Breach at Polymarket Leads to $2.94M Crypto Theft Pierluigi Paganini June 26, 2026 Polymarket confirmed hackers stole funds from some users after attackers injected…
Proposed US law would make AI risk reporting a legal obligation
The reporting requirement would also apply to theft or attempted theft of model weights, capabilities that could materially enable offensive cyber operations against important software…
FedRAMP Incident Response: Accelerating Compliance with Wiz
Closing the Loop: Why Reactive Still Matters Modern cloud attacks move at machine speed. And even with the automated, risk-based ConMon and “Secure by Design”…
Polymarket customers lose $3 million in supply-chain attack
Polymarket says it will fully reimburse customers who lost an estimated $3 million after hackers injected a malicious script into the platform’s frontend following a…
Anthropic Confirms Claude Mythos 5 Redeployment for US Critical Infrastructure Organizations
Anthropic has confirmed that Claude Mythos 5, its most powerful AI cybersecurity model, will be redeployed to a select set of U.S. organizations responsible for…
Hackers Exploit WinRAR CVE-2025-8088 to Plant Startup Shortcut and Run PowerShell Loader
Hackers have weaponized a WinRAR path-traversal flaw tracked as CVE-2025-8088 to silently plant a Startup shortcut and run a multi-stage PowerShell loader that maps a…
Mystery hackers use novel SharkLoader dropper against governments, software devs
Kaspersky researchers have uncovered a previously unknown cyberattack campaign that has compromised government organizations and software development companies in multiple countries. They first stumbled onto…
New SharkLoader Malware Deploys Cobalt Strike in StrikeShark Cyberattacks
A newly discovered cyber attack campaign has been observed delivering a previously undocumented malware family called SharkLoader that acts as a loader for deploying Cobalt…
Former ICO boss found using ‘vulgar’ language with female staff
Evidence of “vulgar and highly sexualised language” was found by an independent investigation into the UK’s former information commissioner John Edwards, leading to his resignation…