Cybernoz https://validator.w3.org/feed/docs/rss2.html Zero‑Days in the Age of AI: Behind the Scenes of ZeroDay.cloud 2025, with a Record High of CVEs in Critical Cloud Infra Alibaba to Ban Claude Code Over Alleged Embedded Backdoor Risks Verified X Sponsored Ad Spreads Mac Malware While ConsentFix Hijacks Microsoft 365 Accounts PamStealer Uses Fake Maccy Sites and PAM Checks to Steal Mac Login Passwords MCP to Vibe Coding Full Endpoint Visibility in AI Security Hackers Abuse SEO Poisoning and Hidden HTML to Trick AI Agents Into Following Malicious Instructions Avalon Malware Uses Legal Document Lure to Deliver CrownX Ransomware Capabilities Armored Likho Targets Government Agencies, Power Sector with BusySnake Stealer U.S. Government Agency Paid $1M to Data Extortion Group Kairos Wiz Adds OCI IAM to Unified Cloud Identity Graph JadePuffer ransomware used AI agent to automate entire attack Multiple Apache ActiveMQ Vulnerabilities Enable DoS Attacks and Lead to Crashes Armored Likho APT Deploys BusySnake Stealer Against Government and Power Sector Targets The Lean Expansion Playbook AI Startups Are Using to Build Global Teams U.S. Government Entity Paid Kairos $1 Million in Data-Theft Extortion Case Kenna EOL and the Shift to Exposure Management Medtronic notifies customers impacted by ShinyHunters data breach New “Bad Epoll” 0-Day Vulnerability Allows Root Access on Linux Servers and Android Devices Security Roundup: Apple’s Hide My Email Service Fails to Hide Your Email Parrot 7.3 released With new menu system and smoother day-to-day use North Korean Hackers Publish 108 Malicious Packages and Extensions in PolinRider Campaign Critical Cursor AI Code Editor Flaws Could Lead to OS-Level Remote Code Execution FBI: TeamPCP Compromised Dev Tools to Steal Cloud Credentials MongoBleed: Critical MongoDB Vulnerability CVE-2025-14847 OpenAI Lets Cyber Vendors Embed GPT-5.5 in Defenses Opera rolls out Paste Protect feature to fight ClickFix attacks PamStealer Mimic as Maccy Clipboard Manager Silently Harvest Data and Clipboard Contents TimbreStealer Malware Targets Mexico Companies With Advanced Evasion Techniques New Avalon Malware Framework Packs CrownX Ransomware Capabilities Google, FBI Disrupt NetNut Residential Proxy Network Powered by Millions of Devices Government and Healthcare Are the Weakest Links in Global Email Security Cyber readiness for SMBs: Getting the basics right Validated External Risk Issues: SOC Alerts for Zero-Days CISA: Microsoft SharePoint RCE flaw now actively exploited Multiple FatFs Vulnerabilities Expose Millions of Embedded Devices to Cyber Risks Fake Google and Cloudflare Verification Pages Spread StealC, HijackLoader, and NetSupport Malware New “Bad Epoll” Linux Kernel Flaw Lets Unprivileged Users Gain Root, Hits Android Alleged Scattered Spider Hacker Extradited to US The Anatomy of a Shadow AI Supply-Chain Breach: Lessons from the 2026 Vercel Incident New CitrixBleed-like NetScaler flaw sees exploit attempts in the wild Snipping the Long Tail of Shai-Hulud 2.0 ARToken PhaaS exposes EvilTokens’ Microsoft 365 phishing toolkit Scammers Impersonate Trusted Brands in Gambling Ads to Drive Casino Traffic Alibaba Reportedly Bans Claude Code Over Alleged Backdoor Risk in AI Coding Tool FBI Seizes NetNut Domains as Google Disrupts 2M Device Proxy Network New infosec products of the week: July 3, 2026 Unpatched Flaws Disclosed in Filesystem Bundled Into Millions of Embedded Devices Platforms must shoulder burden of proof for social media design Medtronic Data Breach Impacts 3.8 Million People Pegasus Used Against MEP Investigating Pegasus, Citizen Lab Finds