Malicious Claude Code Extension Served in Cursor Supply Chain Attack
Cursor users have been targeted with malicious versions of Anthropic’s Claude Code extension in a new supply chain attack. The incident occurred on October 29…
Author: Cybernoz
Another fridge cyberattack hits European supermarkets, this time in Belgium, Luxembourg, Sweden and Estonia
New wave of fridge cyberattacks hits European supermarkets, this time in Belgium, Luxembourg, Sweden and Estonia Pierluigi Paganini November 02, 2026 A new wave of…
Could Nick Andersen’s leadership outlast the clock on his acting role?
The clock is running out on Nick Andersen’s time to serve as acting director of the Cybersecurity and Infrastructure Security Agency, but there appear to…
Cursor removes malicious Claude Code extension after SSH backdoor attempt
“An extension marketplace is effectively another software supply chain,” Kadakia said. “When malicious code can reach developers through what appears to be a legitimate, routine…
ODVA’s CIP Security achieves TÜV Rheinland certification against IEC 62443-4-2 at Security Level 3
ODVA announced that CIP Security has been formally certified by TÜV Rheinland to meet the applicable requirements of IEC 62443-4-2 at Security Level Capability 3…
Lumen details Volt Typhoon’s Silent Train framework exploiting zero-days to target US critical infrastructure sites
New research from Lumen Technologies’ Black Lotus Labs detailed how China-linked cyber threat group Volt Typhoon used a covert operational framework, dubbed Silent Train, to…
Wiz introduces Dangling Domain Detection to help you prevent subdomain takeovers
A subdomain takeover is a common network security threat that allows attackers to hijack traffic to your services or take over your domain. Detecting these…
Ivanti patches two more Connect Secure zero-days chained in attacks
Ivanti released security updates to patch two more Connect Secure (ICS) remote access gateway flaws that have been chained in zero-day attacks since at least…
Hackers Use CyberStrikeAI Agents to Automate Windows Domain Takeovers and Credential Theft
Hackers are now using an AI-driven command framework called CyberStrikeAI to break into Windows networks and take over entire domains. Education organizations in Africa and…
Hundreds of Mundane AI Apps Are Hiding Sexually Abusive Deepfake Features
At first glance, the self-proclaimed “pet portrait” app Viefur appears to be just another AI slop generator. Using digital coins sold in the app—around $4…
11 Best Security Data Lake Platforms (2026 Buyer’s Guide)
Security Data Lake Platforms The security data lake decision is a custody decision: who owns your telemetry bytes, in what format, queryable by whose engines,…
DeepSeek open-sources Super-Agent, a coding agent that watches team chats for work
Deepseek released a research prototype of dsh-superagent, a coding agent that does work on a GitHub repository for you. Who can ask for work The…