Cybernoz https://validator.w3.org/feed/docs/rss2.html Why post-quantum cryptography is a national security priority Copia Automation joins OTCC to strengthen critical infrastructure resilience through OT backup and recovery ENISA launches Single Reporting Platform as EU Cyber Resilience Act vulnerability reporting obligations take effect “Google Cloud Security Foundations for Dummies” by Wiz Dissecting REMCOS RAT: An in-depth analysis of a widespread 2024 malware, Part Three Microsoft: September updates cause RDS failures on Windows Server Hackers Leverage Claude to Exfiltrate Secrets from 1.8M Android apps Sexually Explicit Deepfake Sites Target 100-Plus Politicians in Europe Sandworm-Linked Cyclops Blink Returns With Network Scanning and Packet-Sniffing Capabilities WhatsApp Restricted Chat locks a conversation to your primary phone A week in security (September 7 – September 13) Malicious Twitch Browser Extension Leaks OAuth Tokens From Nearly 31,000 Users Three JFrog Artifactory Flaws Exploited for Backdoor Deployment Anthropic CEO Calls for an AI Slowdown. Is It Possible? Discovering a stored XSS that affects over 900k websites (CVE-2016-9751) — Jon Bottarini Security Posture Management for GitHub: spotting and fixing risks in your GitHub organization just got a lot easier Dissecting REMCOS RAT: An in-depth analysis of a widespread 2024 malware, Part Four NCSC Warns of Critical Check Point VPN Flaws as Large-Scale Exploitation Is Expected Casbaneiro Banking Trojan Uses Distributed C2 Servers to Evade Detection and Target Bank Users Permify: Open-source authorization as a service DeepSeek Harness Flaw Let AI Agents Disable Their Own File Sandbox Without Approval Cyber Risk in the Mythos Era – Where do we begin? Conti Hacker Who Built Malware and Attacked Victims Gets Four-Year Sentence XSS vulns galore (plus a cool shirt!) — Jon Bottarini CVE-2024-3094: Critical RCE Vulnerability Found in XZ Utils Microsoft Management Console for initial access and evasion Anthropic Discloses Fourth AI Hacking Incident Involving Claude Opus 4.6 Inspect Element leads to Stripe Account Lockout Authentication Bypass — Jon Bottarini Top security talks from KubeCon Europe 2024 Dismantling Smart App Control CISA Flags Exploited Cisco, Citrix, Fortinet Flaws, Sets Sept. 12 Federal Patch Deadline SECURITY AFFAIRS MALWARE NEWSLETTER ROUND 114 Abusing internal API to achieve IDOR in New Relic — Jon Bottarini Wiz4Wiz: Wiz using Wiz for cloud security Beyond the wail: deconstructing the BANSHEE infostealer Hackers exploit Tencent app flaw to deploy GrayRabbit malware Critical Dell ObjectScale Vulnerabilities Allows Malicious Users to Compromise the Affected system Cisco FMC Flaws Exploited to Steal Credentials and Deploy Qilin Ransomware Anthropic CEO Dario Amodei Says AI Industry Needs to Give Safety Measures Time to Catch Up GitLab CVE-2026-85706: One HTTP Request, No Authentication, Full File Read – Exploited Within 24 Hours Get as image function pulls any Insights/NRQL data from any New Relic account (IDOR) — Jon Bottarini The XZ Utils backdoor, and defense-in-depth strategy Elastic publishes 2024 Global Threat Report Microsoft Excel KB5002914 update breaks copy and paste for some users Plesk Backup Manager Flaw Lets Low-Privileged Users Gain Root Access to Servers Attackers Use Passkey Phishing to Hijack Microsoft Cloud Accounts and Exfiltrate Data Anthropic CEO urges AI companies to slow model development Using Burp Suite match and replace settings to escalate your user privileges and find hidden features — Jon Bottarini AEC’s election donation system build more than doubles to $70m Security Affairs newsletter Round 594 by Pierluigi Paganini – INTERNATIONAL EDITION