Majority of Ivanti EPMM threat activity linked to hidden IP
More than 80% of exploitation activity targeting critical vulnerabilities in Ivanti Endpoint Manager Mobile were traced to a single IP address hiding behind a bulletproof…
Author: Cybernoz
Threat Actors Weaponize ChatGPT, Grok and Leverages Google Ads to Distribute macOS AMOS Stealer
Cybercriminals have developed a sophisticated attack campaign that exploits user trust in artificial intelligence platforms to distribute the Atomic macOS Stealer (AMOS), marking a dangerous…
Kimwolf Botnet Swamps Anonymity Network I2P – Krebs on Security
For the past week, the massive “Internet of Things” (IoT) botnet known as Kimwolf has been disrupting The Invisible Internet Project (I2P), a decentralized, encrypted…
CodeHunter expands behavioral intent analysis to secure the software supply chain
CodeHunter is expanding its behavioral intent technology beyond traditional malware analysis to address supply chain risk and security decision-making across the software development lifecycle (SDLC).…
Peer ‘disappointed’ that DWP review of subpostmaster prosecutions is still months away
The slow response from the Department of Work and Pensions (DWP) to demands surrounding a review of its prosecutions of subpostmasters continues, as peer Prem…
Legacy IRC Botnet Campaign Uses Automated SSH Compromise Pipeline to Enroll Linux Hosts at Scale
SSHStalker is a newly discovered Linux botnet that brings back Internet Relay Chat (IRC) control while using automation to compromise servers over SSH. It mainly…
GTIG Warns of Rising Espionage and Supply Chain Cyber Threats Targeting Defense Sector
The defense industry is facing an intense, multi-front cyber onslaught as espionage, personnel targeting, and supply chain attacks converge into a persistent, strategic risk to…
Ivanti EPMM exploitation: Researchers warn of “sleeper” webshells
A massive wave of exploitation attempts has followed the disclosure of CVE-2026-1281, a critical pre-authentication Ivanti EPMM vulnerability, the Shadowserver Foundation has warned. Some of…
The Security Interviews: Mick Baccio, Splunk
A lot of people struggle to pronounce the name of American politician Pete Buttigieg. When Mick Baccio, now global security advisor at Splunk SURGe and…
Reynolds ransomware uses BYOVD to disable security before encryption
Reynolds ransomware uses BYOVD to disable security before encryption Pierluigi Paganini February 11, 2026 Researchers discovered Reynolds ransomware, which uses BYOVD technique to disable security…
Cephalus Ransomware Emerges as Go-Based Double-Extortion Threat Targeting Exposed RDP
Cephalus has surfaced as a Go-built ransomware strain linked to victim activity as early as June 2025, with wider public reporting appearing in August. It…
Black Duck Signs MSSP Agreement with Accenture
Black Duck has announced a managed security service provider (MSSP) agreement with Accenture, in a move designed to strengthen the delivery of enterprise-grade application security…