Progress Software fixes sneaky WAF bypass vulnerability (CVE-2026-21876)
Progress Software has fixed a slew of high-severity vulnerabilities in MOVEit WAF and LoadMaster, including a flaw (CVE-2026-21876) that may allow attackers to bypass firewall…
Author: Cybernoz
Researcher claims Claude Desktop installs “spyware” on macOS
Security researcher Alexander Hanff wrote an article titled Anthropic secretly installs spyware when you install Claude Desktop. Claims like that are bound to create two…
Lotus Wiper Malware Targets Venezuelan Energy Systems in Destructive Attack
Ravie LakshmananApr 22, 2026Malware / Critical Infrastructure Cybersecurity researchers have discovered a previously undocumented data wiper that has been used in attacks targeting Venezuela at…
UK government beats drum for fintech industry at London Fintech Week
The UK government has declared its intention to modernise payment services regulation, updating it to support innovations in money and payments, according to an HM…
2026 Threat Landscape: Ransomware, Breaches & Exploits
The 2026 threat landscape continued to intensify in March, with ransomware attacks, expanding data breach activity, and a growing underground market for compromised access shaping the global cybersecurity…
Meta to start capturing employee mouse movements, keystrokes
Meta is installing new tracking software on US-based employees’ computers to capture mouse movements, clicks and keystrokes for use in training its artificial intelligence models,…
Mirai Botnet Targets Flaw in Discontinued D-Link Routers
A Mirai botnet is targeting discontinued D-Link routers impacted by a command injection vulnerability disclosed a year ago, Akamai reports. Tracked as CVE-2025-29635, the security…
Venezuela energy sector targeted by highly destructive Lotus wiper
Venezuela energy sector targeted by highly destructive Lotus wiper Pierluigi Paganini April 22, 2026 Lotus Wiper hit Venezuelan energy systems, used scripts to disable defenses,…
The AI era demands a different kind of CISO
Many security leaders are still operating with frameworks built for a different era. For years, success was measured by fixed checkpoints, such as passing audits,…
Anthropic bets on EPSS for the coming bug surge
Anthropic’s Mythos has intensified a problem that vulnerability management programs were already struggling to contain: too many vulnerabilities and not enough clarity about which ones…
Phishing Techniques Spotted: Email Examples & Red Flags
In this article, we break down five real phishing email examples using the latest email phishing techniques, and share the phishing red flags that can…
Microsoft releases emergency patches for critical ASP.NET flaw
Microsoft has released out-of-band (OOB) security updates to patch a critical ASP.NET Core privilege escalation vulnerability. The security flaw (tracked as CVE-2026-40372) was found in…