Placeholder Domains Used by 349 AI Agent Skills Found Redirecting to Scams
Manifold Security found placeholder domains cited in 359,000 GitHub files and 349 AI agent skills serving cloaked scam redirects observed on macOS. Security researchers at…
Author: Cybernoz
Lunex Stealer Abuses AMD Driver to Disable Security Monitoring and Steal Browser Credentials
The Psychedelic Stealer malware distributed via compromised Ukrainian websites using ClickFix-style Cloudflare verification checks is part of a wider malware-as-a-service (MaaS) platform called Lunex. The…
China and US Agree to Establish AI Safety Channel and Continue Trade and Military Talks
China and the United States agreed to establish a channel for handling AI-related incidents and accelerate work on military crisis communications following a three-day summit…
OpenAI Agents Accessed US Government Websites Without Authorization
OpenAI Agents Accessed US Government Websites Without Authorization Pierluigi Paganini September 26, 2026 OpenAI is investigating AI agents that accessed US gov websites without authorization,…
Extend Wiz to your Developers: Enable secure cloud development with agility
Today, we are excited to announce new capabilities to help organizations secure the cloud software development process and speed up the resolution of issues. Wiz…
Culture at Speed: Protecting What Makes Huntress Work
I’ve been fortunate to work for some truly great leaders at some amazing companies. The common thread is always the same: when culture is protected,…
Claude Opus 5.5 uses 95% fewer em dashes, but its answers are getting longer
Anthropic’s Claude Opus 5.5 appears to be changing how it writes, with new analysis showing fewer obvious AI writing patterns, shorter sentences, and simpler wording…
Local AI Model Modifies Windows Credential Dumper to Bypass EDR Detection
A locally hosted, uncensored artificial intelligence model modified a Windows credential-dumping utility until it evaded two Endpoint Detection and Response (EDR) products in a controlled…
Kiteworks Warns Users to Take Systems Offline Amid Suspected Zero-Day Threat
Kiteworks has urged customers worldwide to temporarily shut down their servers after receiving credible law-enforcement intelligence that a threat actor may target Kiteworks deployments over…
ShinyHunters Bypass WAF Rules to Resume Oracle PeopleSoft Attacks
Mandiant and the Google Threat Intelligence Group (GTIG) have identified renewed exploitation of a critical Oracle PeopleSoft vulnerability, with attackers using a simple URL trick…
Your incident count is missing a few incidents
If you run security for a brand with hundreds or thousands of locations, the tools you’ve bought may have little to do with whether an…
Attackers Bypass WAFs to Exploit Oracle PeopleSoft Flaw and Deploy Web Shells
Ravie LakshmananSep 26, 2026Vulnerability / Web Security Google is warning of renewed mass exploitation of a known security vulnerability in Oracle PeopleSoft as part of a…