The Rise of Ghost APIs
Key Takeaways Ghost APIs are deprecated endpoints that remain live and accessible; policy says dead, reality says otherwise. Unlike Shadow APIs (unknown to the org),…
Author: Cybernoz
Zero trust at year two: What nobody planned for
In this Help Net Security video, Jim Alkove, CEO of Oleria, walks through where zero trust programs typically stand one to two years in. Most…
North Korea’s APT37 Uses Facebook Social Engineering to Deliver RokRAT Malware
Ravie LakshmananApr 13, 2026Social Engineering / Threat Intelligence The North Korean hacking group tracked as APT37 (aka ScarCruft) has been attributed to a fresh multi-stage, social…
‘Grand Theft Auto’ publisher Rockstar hit by hackers again
UK-based Rockstar Games, publisher of the long-running Grand Theft Auto (GTA) series, has fallen victim to another cyber attack orchestrated by the ShinyHunters operation, which…
Dead cars tell tales by storing data that’s never wiped
Unbeknowst to vehicle drivers, newer cars record and store GPS data that can be retrieved, providing accurate location information going back years, security researchers have…
International Operation Targets Multimillion-Dollar Crypto Theft Schemes
An international operation involving law enforcement agencies from the United States, the United Kingdom, and Canada has targeted multimillion-dollar cryptocurrency theft schemes. Dubbed Operation Atlantic,…
Iran-linked group Handala claims to have breached three major UAE organizations
Iran-linked group Handala claims to have breached three major UAE organizations Pierluigi Paganini April 13, 2026 Iran-linked group Handala claims to have breached three major…
duty-free.cc
forum.duty-free.cc is a Russian-language forum focused on information security and hacking-related topics, where users discuss penetration testing, vulnerabilities, exploits, OSINT, and real-world cases. The platform…
OpenAI’s Mac apps need updates thanks to the Axios hack
OpenAI updated its security certificates and is requiring all macOS users to update to the latest versions after determining its products, along with many others,…
Anthropic’s Mythos signals a structural cybersecurity shift
Evron told CSO that assembling that level of input among so many leaders so quickly reflects the nature of cybersecurity itself: “The cybersecurity industry is…
31 High-Impact Vulnerabilities Identified, Interlock Ransomware Group Exploits Cisco FMC Zero-Day
In March 2026, Insikt Group® identified 31 high-impact vulnerabilities that should be prioritized for remediation, 29 of which had a Very Critical Recorded Future Risk…
Deep Scan: Expanding Vulnerability Detection Beyond Traditional Boundaries
Security teams estimate that a significant percentage of enterprise software is installed outside standard system directories or package-managed locations, creating persistent visibility gaps for traditional…