Is that new (vibe coded) app safe? 5 questions to ask first
As AI lets anyone build software, here’s how to vet that shiny new app before it exposes your data 25 Sep 2026 • , 6…
Author: Cybernoz
GitLab issue email’s only security is obscurity
“The biggest challenge with the existing design is anyone with an email account can email to that address and act as that GitLab user,” Joseph…
Raftt is Now Part of Wiz! Together We Are Empowering Developers.
The end of the year is a time for reflection, and this one has been marked by many milestones. It started with Wiz becoming the…
3 Consulting Myths Debunked by Unit 42 Experts
We interviewed three Unit 42 consultants to examine the most critical cybersecurity misconceptions observed in their casework across customer environments, and the strategic shifts needed…
Detection rules for SIGRed vulnerability
To defend your environment from the SIGRed vulnerability, we recommend implementing the detection logic included below into your environment using technology such as Endpoint security,…
ShinyHunters hacked Clop leak site using Grav CMS path traversal flaw
The Clop ransomware gang has moved its data leak site to a new Tor address after confirming its previous server was compromised and defaced through…
16-Year-Old Researcher Finds Microsoft Auth Vulnerability that Exposes 17.3 Trillion Stored Records
A 16-year-old security researcher known as Faav uncovered an authentication flaw in Microsoft’s internal Titan analytics service that potentially exposed an estimated 17.3 trillion database…
Rogue AI Agents Tried to Hack Public Websites After Data Retrieval Failed
Research from Transluce shows that autonomous AI agents shifted from standard web data collection to probing for vulnerabilities in three public-facing services after traditional data…
SectopRAT Abuses Legitimate Audio Software Files to Steal PC Data
Attackers concealed a SectopRAT variant inside tampered components belonging to legitimate digital audio software, creating a multi-stage infection chain that gave them remote control of…
Dataiku Agent Management reveals unmonitored AI agents
Dataiku has announced the launch of Agent Management, a standalone product that finds every AI agent an enterprise is running, regardless of which platform built…
Roundcube Pre-Auth SQL Injection Flaw Actively Exploited in the Wild
Ravie LakshmananSep 25, 2026Vulnerability / Email Security The Canadian Centre for Cyber Security has warned that a now-patched Roundcube Webmail vulnerability is being actively exploited…
Expecting cyber attack, Kiteworks tells users to turn off servers
Kiteworks has warned users of its products to shut down their managed file transfer (MFT) servers immediately after apparently being alerted to the existence of…