<unnamed>

Public Key

npub13pstz4yme247djhn5cqs8wdrnwq26n5x8cvnt03dlep843la84ns0p5djv

Profile Code

nprofile1qqsgsc932jdu42lxete6vqgrhx3ehq9df6rruxf4hcklusn6cl7n6ecpz4mhxue69uhkummnw3ezuerpw3sju6rpw4esmptyxa

Publishing to

nostr.data.haus

Last Notes

2026-07-17 09:42:26 CEST

GPT-5.6 Codex is Reportedly Deleting Files From Home Directories
OpenAI is currently investigating a small number of reports indicating that the GPT-5.6 Codex unintentionally deleted files from users’ home directories. These incidents reportedly occurred when Codex was granted full filesystem access without the necessary sandbox protections or automated review controls. According to Tibo Sottiaux, a member of OpenAI’s Codex team, the issue most commonly […]
The post https://cybersecuritynews.com/gpt-5-6-codex-delete-files/ appeared first on https://cybersecuritynews.com.
https://cybersecuritynews.com/gpt-5-6-codex-delete-files/

2026-06-20 05:23:20 CEST

AutoJack – A Single Web Page Can Hijack Your AI Agent to Execute Malicious Code
A critical exploit chain dubbed AutoJack that allows a single malicious web page to hijack Microsoft’s AutoGen Studio browsing agent and execute arbitrary code on the host machine without any user interaction beyond submitting a URL. AutoJack is a three-vulnerability exploit chain targeting AutoGen Studio, Microsoft Research’s open-source prototyping UI for multi-agent AI systems. The […]
The post https://cybersecuritynews.com/autojack/ appeared first on https://cybersecuritynews.com.
https://cybersecuritynews.com/autojack/

2026-06-19 16:04:02 CEST

eFAQ Publishes Investigation Into Alleged Scam Activity and Coordinated Reputation Attacks
New York, USA, June 19th, 2026, CyberNewswire eFAQ has published a documented investigation into a coordinated reputation attack campaign aimed at influencing brand perception in search results and how AI assistants surface and summarize information. The campaign followed a recognizable pattern. Dozens of accounts — most created days before publishing and most deleted shortly after […]
The post https://cybersecuritynews.com/efaq-publishes-investigation-into-alleged-scam-activity-and-coordinated-reputation-attacks/ appeared first on https://cybersecuritynews.com.
https://cybersecuritynews.com/efaq-publishes-investigation-into-alleged-scam-activity-and-coordinated-reputation-attacks/

2026-06-08 19:18:01 CEST

Check Point VPN 0-day Vulnerability Exploited in the Wild to Deploy Ransomware
Check Point Research has uncovered active exploitation of CVE-2026-50751, a critical authentication bypass vulnerability (CVSS 9.3) in Check Point Remote Access VPN and Mobile Access deployments, with confirmed post-compromise activity linked to the Qilin ransomware gang. CVE-2026-50751 targets deployments configured to use the deprecated IKEv1 key exchange protocol. By exploiting a logic flaw in certificate […]
The post https://cybersecuritynews.com/check-point-vpn-0-day-vulnerability/ appeared first on https://cybersecuritynews.com.
https://cybersecuritynews.com/check-point-vpn-0-day-vulnerability/

2026-06-08 18:01:55 CEST

Malspam Attack Uses Google DoubleClick Redirects to Deliver Fileless .NET Loader
Cybercriminals have found a new way to sneak malware past email security tools, and this time they are hiding behind a name that most systems trust without question. A recent malspam campaign has been caught using Google’s own DoubleClick ad-tracking infrastructure to route victims toward a fileless .NET loader, a type of malware that runs […]
The post https://cybersecuritynews.com/malspam-attack-uses-google-doubleclick-redirects/ appeared first on https://cybersecuritynews.com.
https://cybersecuritynews.com/malspam-attack-uses-google-doubleclick-redirects/

2026-06-08 16:54:14 CEST

WhatsApp Disrupts NSO-Linked Cyberattack Targeting Users with Pegasus Spyware
Meta’s WhatsApp has identified and disrupted a fresh wave of spear-phishing campaigns linked to NSO Group, the Israeli spyware firm blacklisted by the U.S. government, and is now asking a federal court to hold the company in contempt for violating a permanent injunction issued just last year. In May 2025, a U.S. federal jury ordered […]
The post https://cybersecuritynews.com/whatsapp-disrupts-nso-cyberattack/ appeared first on https://cybersecuritynews.com.
https://cybersecuritynews.com/whatsapp-disrupts-nso-cyberattack/

2026-06-08 16:29:52 CEST

Chrome Patches 429 Vulnerabilities Including 22 Critical Ones – Update Now!
Chrome users should treat the latest stable update as an urgent security priority, with Google patching 429 vulnerabilities, including 22 rated critical, in Chrome 149.0.7827.53 across Windows, macOS, Linux and Chrome for iOS. Google has promoted Chrome 149.0.7827.53 to the stable channel with one of the largest security patch bundles seen in a single release […]
The post https://cybersecuritynews.com/chrome-patches-429-vulnerabilities/ appeared first on https://cybersecuritynews.com.
https://cybersecuritynews.com/chrome-patches-429-vulnerabilities/

2026-06-04 21:35:36 CEST

IronWorm Supply Chain Attack Uses Malicious npm Packages to Steal Developer Secrets
A newly discovered malware campaign called IronWorm has been silently targeting software developers through poisoned npm packages, stealing credentials, API keys, and even cryptocurrency wallet recovery phrases. The attack is built to spread itself through trusted developer workflows, making it one of the more sophisticated supply-chain threats seen in recent years. The malware travels inside […]
The post https://cybersecuritynews.com/ironworm-supply-chain-attack-uses-malicious-npm-packages/ appeared first on https://cybersecuritynews.com.
https://cybersecuritynews.com/ironworm-supply-chain-attack-uses-malicious-npm-packages/

2026-06-04 14:51:47 CEST

Payouts King Ransomware Evades EDR With Obfuscation and Direct System Calls
A new ransomware group known as Payouts King has quietly been building a reputation since it first appeared in April 2025. While it spent most of last year flying under the radar, early 2026 brought a noticeable spike in activity tied to former affiliates of the now-defunct BlackBasta operation. The group targets organizations through well-worn […]
The post https://cybersecuritynews.com/payouts-king-ransomware-evades-edr/ appeared first on https://cybersecuritynews.com.
https://cybersecuritynews.com/payouts-king-ransomware-evades-edr/

2026-05-22 16:44:33 CEST

Operation Dragon Whistle Uses Malicious LNK Files to Target Changzhou University
A newly uncovered cyber operation has raised concerns among security professionals after a coordinated wave of attacks targeted government institutions in Pakistan. The campaign, now tracked as Operation Dragon Whistle, used highly convincing phishing emails to trick employees into opening malicious file attachments. Once those files were opened, they set off a chain of events […]
The post https://cybersecuritynews.com/operation-dragon-whistle-uses-malicious-lnk-files/ appeared first on https://cybersecuritynews.com.
https://cybersecuritynews.com/operation-dragon-whistle-uses-malicious-lnk-files/

2026-04-06 07:45:36 CEST

36 Malicious npm Strapi Packages Used to Deploy Redis RCE and Persistent C2 Malware
A coordinated supply chain attack has been uncovered targeting developers who build applications on Strapi, a widely used open-source content management system. Thirty-six malicious npm packages disguised as legitimate Strapi plugins were published to the npm registry, carrying payloads designed to exploit Redis for remote code execution, steal credentials, and establish persistent command-and-control access on […]
The post https://cybersecuritynews.com/36-malicious-npm-strapi-packages/ appeared first on https://cybersecuritynews.com.
https://cybersecuritynews.com/36-malicious-npm-strapi-packages/

2026-04-04 08:05:12 CEST

Top 10 Best VPN For Chrome in 2026
In ever-changing technology and networks, privacy is becoming increasingly difficult to achieve. People are so used to using the Internet and IoT devices that the sensitive data they share on the web has become a prime target for hackers or malicious actors. As we all know, data is crucial. Protecting data is vital since even […]
The post https://cybersecuritynews.com/best-vpn-for-chrome/ appeared first on https://cybersecuritynews.com.
https://cybersecuritynews.com/best-vpn-for-chrome/

2026-04-03 16:09:26 CEST

Hackers Abuse Trusted Platforms to Steal Bank Credentials From Philippine Users
A coordinated phishing campaign has been quietly targeting banking customers across the Philippines since early 2024, and it remains active today. The attackers are not relying on crude tricks — they are hiding behind widely trusted internet platforms to steal banking credentials and one-time passwords, then using them to drain victims’ accounts within minutes. The […]
The post https://cybersecuritynews.com/hackers-abuse-trusted-platforms/ appeared first on https://cybersecuritynews.com.
https://cybersecuritynews.com/hackers-abuse-trusted-platforms/

2026-04-03 12:28:10 CEST

Hackers Use Phorpiex Botnet to Spread Ransomware, Sextortion, and Crypto-Clipping Malware
A botnet that has been running since 2011 is back in the spotlight — not because it is new, but because it keeps reinventing itself. Phorpiex, also known as Trik, has grown from a basic spam tool into a full-scale criminal platform capable of delivering ransomware, sending sextortion emails to millions of victims, and silently […]
The post https://cybersecuritynews.com/hackers-use-phorpiex-botnet-to-spread-ransomware/ appeared first on https://cybersecuritynews.com.
https://cybersecuritynews.com/hackers-use-phorpiex-botnet-to-spread-ransomware/

2026-04-03 09:25:19 CEST

CERT-EU Confirms Trivy Supply Chain Attack Led to European Commission AWS Breach
The European Commission’s primary web platform, “europa.eu,” recently suffered a severe data breach stemming from a supply-chain compromise involving the popular open-source vulnerability scanner, Trivy. On April 3, 2026, CERT-EU published an official advisory detailing how a threat actor known as TeamPCP exploited the compromised continuous integration and continuous delivery (CI/CD) tool to harvest Amazon […]
The post https://cybersecuritynews.com/european-commission-breach-trivy/ appeared first on https://cybersecuritynews.com.
https://cybersecuritynews.com/european-commission-breach-trivy/

2026-04-02 18:58:08 CEST

How Elite SOCs Cut Escalation Rates by Arming Tier 1 With Better Threat Intelligence
In a mature Security Operations Center, escalation is supposed to work like a scalpel, precise, intentional, and reserved for alerts that genuinely demand deeper expertise. But across many teams today, it has become something far less disciplined: a reflex, a pressure valve, a way to pass uncertainty up the chain. The consequences are predictable. Tier […]
The post https://cybersecuritynews.com/reduce-soc-escalation-rates-tier-1-alert-triage/ appeared first on https://cybersecuritynews.com.
https://cybersecuritynews.com/reduce-soc-escalation-rates-tier-1-alert-triage/

2026-04-02 17:42:35 CEST

Qilin Ransomware Uses Malicious DLL to Kill Almost Every Vendor’s EDR Solutions
Qilin ransomware group is deploying a sophisticated, multi-stage infection chain via a malicious msimg32.dll that can disable over 300 endpoint detection and response (EDR) drivers from virtually every major security vendor. As organizations increasingly rely on EDR solutions, which offer far greater behavioral visibility than legacy antivirus, threat actors have adapted by weaponizing EDR killers […]
The post https://cybersecuritynews.com/qilin-ransomware-kill-edr/ appeared first on https://cybersecuritynews.com.
https://cybersecuritynews.com/qilin-ransomware-kill-edr/

2026-04-02 04:29:40 CEST

Public PoC Exploit Released for Nginx-UI Backup Restore Vulnerability
A critical security flaw has been disclosed in the Nginx-UI backup restore mechanism, tracked as CVE-2026-33026. This vulnerability allows threat actors to tamper with encrypted backup archives and inject malicious configurations during the restoration process. With a public Proof-of-Concept (PoC) exploit now available, unpatched deployments are at immediate risk of full system compromise. Cryptographic Flaw […]
The post https://cybersecuritynews.com/nginx-ui-backup-restore-vulnerability/ appeared first on https://cybersecuritynews.com.
https://cybersecuritynews.com/nginx-ui-backup-restore-vulnerability/

2026-04-02 04:05:20 CEST

Microsoft to Remove EXIF Data for Images Shared on Teams
In a significant move to enhance corporate privacy and operational security, Microsoft has announced an important update for its Teams platform. As part of the March 2026 feature rollout, Microsoft Teams will now automatically remove EXIF metadata from all images shared across chats and channels. This privacy-by-default measure aims to protect users from unintentionally leaking […]
The post https://cybersecuritynews.com/microsoft-remove-exif-data-teams/ appeared first on https://cybersecuritynews.com.
https://cybersecuritynews.com/microsoft-remove-exif-data-teams/

2026-03-31 12:48:43 CEST

ChatGPT Vulnerability Let Attackers Silently Exfiltrate User Prompts and Other Sensitive Data
Users routinely trust AI assistants with highly sensitive information, including medical records, financial documents, and proprietary business code. Check Point Research recently disclosed a critical vulnerability in ChatGPT’s architecture that allowed attackers to extract this exact type of user data silently. By abusing a covert outbound channel in ChatGPT’s isolated code execution environment, attackers could […]
The post https://cybersecuritynews.com/chatgpt-vulnerability/ appeared first on https://cybersecuritynews.com.
https://cybersecuritynews.com/chatgpt-vulnerability/

2026-03-13 03:14:01 CET

Meta Launches New Anti-Scam Tools on WhatsApp, Facebook and Messenger
Meta has launched a suite of advanced anti-scam tools across WhatsApp, Facebook, and Messenger to combat the growing industrialization of online fraud. These new defenses combine artificial intelligence, behavioral alerts, and global law enforcement partnerships to protect users proactively. To protect users from evolving social engineering tactics, Meta introduced specific warning mechanisms across its ecosystem. […]
The post https://cybersecuritynews.com/meta-new-anti-scam-tools/
.
https://cybersecuritynews.com/meta-new-anti-scam-tools/

2026-02-25 03:34:10 CET

US Sanctions Network of Exploit Brokers That Stole US Government Cyber Tools
The U.S. Department of the Treasury’s Office of Foreign Assets Control (OFAC) on February 24, 2026, designated Russian national Sergey Sergeyevich Zelenyuk and his St. Petersburg-based company Matrix LLC operating publicly as Operation Zero, along with five associated individuals and entities, for acquiring and distributing cyber tools directly harmful to U.S. national security. This marks […]
The post https://cybersecuritynews.com/us-sanctions-exploit-brokers/
.
https://cybersecuritynews.com/us-sanctions-exploit-brokers/