Shadow AI risks deepen as 31% of users get no employer training
Between one-fifth and one-third of workers use AI outside the influence and governance of the IT function, according to a global survey of 6,000 full-time…
Author: Cybernoz
Google Fixes CVSS 10 Gemini CLI CI RCE and Cursor Flaws Enable Code Execution
Google has addressed a maximum severity security flaw in Gemini CLI — the “@google/gemini-cli” npm package and the “google-github-actions/run-gemini-cli” GitHub Actions workflow — that could…
Global study reveals biggest risks of AI in finance sector
Data privacy and hallucinations are the biggest risks to the financial services sector brought by artificial intelligence (AI), while half of global regulators are just…
Bunnings’ tech capability “incredibly underestimated”
Bunnings’ technology operations are “incredibly underestimated”, the hardware chain’s boss says, with the retailer’s recent courting by Google viewed internally as proof of its digital…
SonicWall Urges Immediate Patching of Firewall Vulnerabilities
SonicWall on Wednesday rolled out fixes for three SonicOS vulnerabilities, urging customers to immediately patch their Gen 6, Gen 7, and Gen 8 firewalls. “These…
Former incident responders sentenced to 4 years in prison for committing ransomware attacks
Two former cybersecurity professionals who moonlighted as cybercriminals, committing a series of ransomware attacks in 2023, were each sentenced to four years in prison, the…
This month in security with Tony Anscombe – April 2026 edition
Warnings about helpdesk impersonation scams and Iran-linked hackers targeting critical sectors in the US, plus the most damaging scams of 2025 – here’s some of…
DigiCert launches AI Trust architecture for agents, models and content
DigiCert has announced a new “AI Trust” architecture aimed at helping organisations secure AI systems and verify AI-generated outputs, as enterprises increasingly deploy autonomous agents…
‘Trivial’ exploit can give attackers root access to Linux kernel
The exploit Theori created worked on Ubuntu, Amazon Linux, RHEL, and SUSE Linux. Shared systems under ‘extreme risk’ “The exploit is trivial,” said DeepCove Security’s…
Enhancing Cybersecurity for MSPs in Australia and New Zealand
Recently, we held our first ANZ-focused fireside chat, aimed at helping MSPs across ANZ elevate their cybersecurity offerings and conversations with their customers. We were…
Romanian leader of online swatting ring gets 4 years in prison
A Romanian national who led an online swatting ring that targeted more than 75 public officials, multiple journalists, and four religious institutions was sentenced to…
Jenkins Plugin Updates Fix Path Traversal and Stored XSS Bugs
The Jenkins project released a critical security advisory addressing seven vulnerabilities across multiple widely used plugins. The disclosed flaws include high-severity path traversal and stored…