Censys finds 5,219 devices exposed to attacks by Iranian APTs, majority in U.S.
Censys finds 5,219 devices exposed to attacks by Iranian APTs, majority in U.S. Pierluigi Paganini April 11, 2026 Censys researchers found 5,219 exposed Rockwell PLCs…
Author: Cybernoz
CMMC compliance in the age of AI
Cybersecurity Maturity Model Certification 2.0 (CMMC 2.0) is pushing federal contractors to demonstrate, not just assert, that they can protect sensitive government data. Eligibility for…
Examining the Impact of Ransomware on the Healthcare
It’s no secret that ransomware has been a huge problem for years, but the targets typically involved every industry other than healthcare—until recently. Since the…
Google Chrome adds infostealer protection against session cookie theft
Google has rolled out Device Bound Session Credentials (DBSC) protection in Chrome 146 for Windows, designed to block info-stealing malware from harvesting session cookies. macOS…
OpenAI Warns macOS Users to Update ChatGPT and Codex Immediately
OpenAI has disclosed a security incident tied to the compromise of Axios, a widely used third-party JavaScript developer library, as part of a broader software…
Middle East Espionage Attack Uses Fake Secure Messaging Apps to Deliver ProSpy
Hackers are impersonating popular secure messaging apps to deploy a sophisticated Android spyware tool called ProSpy against journalists, activists, and political figures across the Middle East, in…
Rapid Recovery in Smart Healthcare IoT: Restoring Connectivity and Patient Trust Post-Breach
The Internet of Things (IoT) has revolutionized healthcare by enabling smart medical devices to provide real-time patient care, streamline workflows, and enhance data-driven decision-making. These…
FBI Recovers Deleted Signal Messages Through iPhone Notifications
The FBI successfully recovered private Signal messages from a defendant’s iPhone even after the app was deleted. Learn how this security loophole works and the…
What vibe hunting gets right about AI threat hunting, and where it breaks down
In this Help Net Security interview, Aqsa Taylor, Chief Security Evangelist, Exaforce, explains vibe hunting, an AI-driven approach to threat detection that inverts traditional hypothesis-driven…
Docker CVE-2026-34040 Lets Attackers Bypass Authorization and Gain Host Access
Ravie LakshmananApr 07, 2026Vulnerability / DevSecOps A high-severity security vulnerability has been disclosed in Docker Engine that could permit an attacker to bypass authorization plugins (AuthZ)…
Microsoft Finds Vulnerability Exposing Millions of Android Crypto Wallet Users
Microsoft security researchers discovered that a third-party Android SDK widely used in cryptocurrency wallet applications is affected by a severe vulnerability that could expose highly…
GlassWorm evolves with Zig dropper to infect multiple developer tools
GlassWorm evolves with Zig dropper to infect multiple developer tools Pierluigi Paganini April 11, 2026 The GlassWorm campaign uses a Zig-based dropper hidden in a…