Cybersecurity firm ReversingLabs (RL) has detected a sophisticated, long-running campaign targeting developers on the Visual Studio Code (VS Code) Marketplace. In total, 19 malicious extensions…
As 2025 draws to a close, I find myself reflecting on how dramatically the conversation around IT sustainability has shifted in the past 12 months.…
Cyber security is under intense scrutiny these days, especially as more adversarial AI-based attacks such as Scattered Spider can use a variety of living-off-the-land methods…
GitHub is experiencing user-reported outages, with many developers greeted by a prominent error featuring the platform’s unicorn mascot and the message “No server is currently…
Oracle has posted revenue of $16.1bn for Q2 FY26, a 13% increase year-over-year, which it said marks three consecutive quarters of double-digit growth. The enterprise…
I hope you’ve been doing well! La Vie de Clint Some recent anecdotes from my life: I caught up with my friend David Molnar, who…
Microsoft now pays security researchers for finding critical vulnerabilities in any of its online services, regardless of whether the code was written by Microsoft or a third…
The popular text editor Notepad++ has addressed a severe security weakness in its update mechanism that could allow attackers to hijack network traffic and push…
This is a predictions blog. We know, we know; everyone does them, and they can get a bit same-y. Chances are, you’re already bored with…
A new variation of the ClickFix attack dubbed ‘ConsentFix’ abuses the Azure CLI OAuth app to hijack Microsoft accounts without the need for a password…
A critical zero-day vulnerability in Gogs, a widely used self-hosted Git service, is currently being exploited in the wild. Designated as CVE-2025-8110, this flaw allows…
A new mobile threat is allowing remote attackers to hijack Android devices, turning phones into surveillance tools and locking users out of their own data.…
![[tl;dr sec] #308 - MCP Security, AWS re:Invent Recaps, Detecting Malicious Pull Requests with AI](https://image.cybernoz.com/wp-content/uploads/2025/12/tldr-sec-308-MCP-Security-AWS-reInvent-Recaps-Detecting.png){kind=small}
