Identify AI model overuse with User Insights
When we launched User Insights last month, we wanted to help teams answer a basic question: What are people actually doing with AI? User Insights…
Author: Cybernoz
Elastic Security opens public detection rules repo
At Elastic, we believe in the power of open source and understand the importance of community. By putting the community first, we ensure that we…
CISA warns of critical pre-auth RCE flaw in MikroTik RouterOS
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) is warning of a new critical vulnerability in MikroTik RouterOS that could lead to remote code execution…
Cloudflare Builds Post-Quantum CA With Merkle Tree Certificates for Faster Quantum-Safe TLS
Cloudflare is building a certificate authority to make post-quantum website authentication practical without burdening TLS connections with oversized signatures. The company plans to issue conventional…
Attacker signs up as a member to plant webshells on parks and recreation platform, hunts for card data
Security researchers at Huntress have detailed a multi-stage intrusion in which a threat actor compromised three web servers belonging to a popular recreation management platform…
RedFlick Uses Scheduled Tasks and Password-Protected Archives to Deploy CosmicPulse Backdoor
Russian state-linked threat actor Star Blizzard has expanded its cyberespionage operations in 2026 with a phishing and malware-delivery technique tracked by Microsoft as RedFlick. Microsoft…
Global Group Ransomware Abuses WinMerge to Deploy Encryptor
A Ransomware-as-a-Service (RaaS) operation known as Global Group is targeting large enterprises with phishing emails that deliver a file-encrypting payload. Research shared with Hackread.com by…
BreachLock 2026 Penetration Testing Intelligence Report
The fifth annual BreachLock Penetration Testing Intelligence Report analyzes 531,770 security findings from 4,970 penetration tests across more than 60 industries, revealing the vulnerabilities, attack…
Suspected state-sponsored hackers exploited NetScaler zero-day since early September (CVE-2026-88772)
“Advanced and suspected state-sponsored threat actors” are likely to be behind the initial targeted intrusions that leveraged CVE-2026-88772, one of the two recently disclosed NetScaler…
Hackers steal protective order and foster care records from Arizona courts
“Arizona’s court system was targeted by a cyber attack from criminal hackers or their bots.” This is how the Arizona Supreme Court announced that hackers…
Cisco Warns of Attackers Exploiting Critical Authentication Bypass in SD-WAN Manager
Swati KhandelwalSep 30, 2026Vulnerability / Network Security Attackers are exploiting a new critical zero-day flaw in Cisco Catalyst SD-WAN Manager, the system companies use to…
IT event dive: AI for its own sake at Tobacco Dock with Everpure
I’m once again overnighting in Brick Lane. It seems to have been a theme this year as I visit new venues in my role as…