Rapid7 Analysis: ClickFix-style Phishing Campaign Uses Fake Claude Installer
Overview It is no secret that phishing campaigns utilizing various ClickFix techniques have been a commonly used method of social engineering. One of the main…
Author: Cybernoz
New ATHR vishing platform uses AI voice agents for automated attacks
A new cybercrime platform called ATHR can harvest credentials via fully automated voice phishing attacks that use both human operators and AI agents for the…
Microsoft 365 Web Services Hit by Google Chrome 147 Compatibility Issue
Microsoft is actively investigating a widespread authentication issue affecting users attempting to access Microsoft 365 web-based services through Google Chrome version 147. The problem, first…
UAC-0247 Hits Hospitals, Governments With Browser and WhatsApp Data Theft
A surge of targeted cyberattacks was detected against local governments and municipal healthcare institutions particularly clinical and ambulance hospitals. The campaign has been attributed to…
Cybersecurity Risks of Hiring a Virtual Assistant and How to Protect Your Business
The growth of remote work has normalised a business practice that many organisations have not fully stress-tested from a security perspective: granting third-party individuals access…
Fortinet fixes critical FortiSandbox vulnerabilities (CVE-2026-39813, CVE-2026-39808)
Two vulnerabilities (CVE-2026-39813, CVE-2026-39808) in FortiSandbox could be leveraged by unauthenticated attackers to bypass authentication and execute unauthorized code or commands on vulnerable systems. Both…
Browser Guard gets even better with Access Control
Have you ever been on a website when a pop-up suddenly asked for access to your camera, microphone, location, or notifications? Whether you clicked “allow,”…
![[Webinar] Find and Eliminate Orphaned Non-Human Identities in Your Environment](https://image.cybernoz.com/wp-content/uploads/2026/04/Webinar-Find-and-Eliminate-Orphaned-Non-Human-Identities-in-Your-Environment-600x340.jpg)
[Webinar] Find and Eliminate Orphaned Non-Human Identities in Your Environment
The Hacker NewsApr 16, 2026Artificial Intelligence / Enterprise Security In 2024, compromised service accounts and forgotten API keys were behind 68% of cloud breaches. Not phishing.…
Cyber Essentials closes the MFA loophole but leaves some organisations adrift
On 27 April, the government backed security certification scheme, Cyber Essentials v3.3, takes effect and multi-factor authentication (MFA) becomes a pass-or-fail requirement for the first…
MiningDropper Android Malware Exploits Lumolight App
Researchers have uncovered an Android malware framework dubbed the MiningDropper. Security researchers at Cyble Research and Intelligence Labs (CRIL) have identified a sharp increase in campaigns using MiningDropper, a modular platform capable of distributing multiple types…
Hacker Matthew Lane Sentenced In PowerSchool Breach
Hacker Matthew Lane, now 20, played a central role in the PowerSchool data breach, one of the largest cyberattacks in U.S. education history. As he headed to…
South32 sues Siemens over alleged software flaw
South32 Aluminium is suing Siemens after a steam turbine generator overheated and was “effectively destroyed”, allegedly owing to missing code in a programmable logic controller.…