Cursor AI Vulnerability Exposed Developer Devices
A vulnerability chain in Cursor AI could have allowed attackers to hijack developer machines via prompts hidden in malicious repositories, Straiker discovered. Dubbed NomShub, the…
Author: Cybernoz
U.S. CISA adds a flaw in Apache ActiveMQ to its Known Exploited Vulnerabilities catalog
U.S. CISA adds a flaw in Apache ActiveMQ to its Known Exploited Vulnerabilities catalog Pierluigi Paganini April 17, 2026 The U.S. Cybersecurity and Infrastructure Security…
Supply chain dependencies: Have you checked your blind spot?
Some cyber business risks only show up when you take a closer look. Supply chain blind spots are a perfect example. Behind these essential third-party…
Australia’s data centre capital: what it means for security and infrastructure planning
By Mike Fisher* The news that NSW aims to make itself a world-class data centre capital has major implications for architects, builders, facility managers, security…
Positiv denken für Sicherheitsentscheider: 6 Mindsets, die Sie sofort ablegen sollten
Security wiederum ist wie Qualität kein fertiges Produkt, sondern (wie bereits angemerkt) eine fortlaufende Disziplin. Sicherheit als eine Praxis zu betrachten, die ständig verfeinert werden…
Your Staging Site Is More Important than You Think
A third-party security researcher recently found a vulnerability in our staging environment. That’s not a fun sentence to write, even when the person finding it…
ZionSiphon malware designed to sabotage water treatment systems
A new malware called ZionSiphon, specifically designed for operational technology, is targeting water treatment and desalination environments to sabotage their operations. The threat can adjust…
Microsoft Confirms Windows 11 Updates May Force BitLocker Recovery Key Entry
Microsoft has officially acknowledged a known issue affecting Windows 11 users following the release of its April 2026 Patch Tuesday cumulative updates. Devices running certain…
Q&A: Your Face Is Now Part of the Threat Landscape, Warns Sarah Armstrong-Smith
Sarah Armstrong-Smith brings rare front-line authority to the cyber resilience conversation, with a career shaped by some of the most defining digital threats of the…
New PoC Exploit Published for Microsoft Defender 0-Day Flaw
A security researcher operating under the alias “Chaotic Eclipse” has publicly released a proof-of-concept (PoC) exploit for a vulnerability in Microsoft Defender. Published on April…
13.5M Device Botnet Drives 2 Tbps DDoS Attacks on FinTech
A new Qrator Labs report reveals that the largest DDoS botnet has grown to 13.5 million devices, and hackers can now launch massive 2 Tbps…
Credit Resources Vault: Why this credit email set off our scam alarms
If there is anything that annoys me more than a scammer, it’s companies that behave like one, while staying just on the right side of…