CosmicBytez Labs https://labs.cosmicbytez.ca IT & Cybersecurity Intelligence - News, Security Advisories, HOWTOs, and Project Guides en-ca Sun, 15 Nov 2026 03:12:53 GMT https://labs.cosmicbytez.ca/images/icon.png CosmicBytez Labs https://labs.cosmicbytez.ca <![CDATA[Apple Reveals How Secure Exclaves Shield Camera and Microphone Data]]> https://labs.cosmicbytez.ca/news/2026-11-14-apple-reveals-how-secure-exclaves-shield-camera-and-microphone-data https://labs.cosmicbytez.ca/news/2026-11-14-apple-reveals-how-secure-exclaves-shield-camera-and-microphone-data Sat, 14 Nov 2026 00:00:00 GMT news Apple Privacy Hardware Security General <![CDATA[UnrealIRCd Flaw CVE-2026-114713 Exploited for Server-Level Command Injection]]> https://labs.cosmicbytez.ca/news/2026-11-14-attackers-exploit-unrealircd-flaw-that-enables-server-level-command-injection https://labs.cosmicbytez.ca/news/2026-11-14-attackers-exploit-unrealircd-flaw-that-enables-server-level-command-injection Sat, 14 Nov 2026 00:00:00 GMT news Vulnerability CISA KEV UnrealIRCd IRC <![CDATA[Cursor Confirms Breach That Pushed Malicious Claude Code Extension to Its Marketplace]]> https://labs.cosmicbytez.ca/news/2026-11-14-cursor-confirms-security-breach-led-to-malicious-claude-code-extension https://labs.cosmicbytez.ca/news/2026-11-14-cursor-confirms-security-breach-led-to-malicious-claude-code-extension Sat, 14 Nov 2026 00:00:00 GMT news Data Breach Supply Chain Cursor Fireworks AI Claude Code VS Code <![CDATA[No Signs of Hacking in FAA Ground Stop as FBI Reportedly Probes Software Update]]> https://labs.cosmicbytez.ca/news/2026-11-14-no-signs-of-hacking-in-faa-ground-stop-as-fbi-reportedly-probes-software-update https://labs.cosmicbytez.ca/news/2026-11-14-no-signs-of-hacking-in-faa-ground-stop-as-fbi-reportedly-probes-software-update Sat, 14 Nov 2026 00:00:00 GMT news FAA Outage FBI Security Updates <![CDATA[CVE-2026-109445: PLANET GS-5220-8P2T2S Stack Buffer Overflow via webstax_auth Cookie (CVSS 9.8)]]> https://labs.cosmicbytez.ca/security/cve-2026-109445 https://labs.cosmicbytez.ca/security/cve-2026-109445 Sat, 14 Nov 2026 00:00:00 GMT security Vulnerability CVE NVD Security Updates PLANET Network Switch <![CDATA[CVE-2026-82504: VITEC EZ TV Platform Server Unauthenticated File Upload (CVSS 9.8)]]> https://labs.cosmicbytez.ca/security/cve-2026-82504 https://labs.cosmicbytez.ca/security/cve-2026-82504 Sat, 14 Nov 2026 00:00:00 GMT security Vulnerability CVE NVD Security Updates VITEC File Upload <![CDATA[Ransomware Attack on Belarusian Cloud Firm ActiveCloud Disrupts Businesses for Days]]> https://labs.cosmicbytez.ca/news/2026-11-13-activecloud-belarus-ransomware-cloud-outage https://labs.cosmicbytez.ca/news/2026-11-13-activecloud-belarus-ransomware-cloud-outage Fri, 13 Nov 2026 00:00:00 GMT news Ransomware Cloud Security Cybercrime Outage <![CDATA[Check Point Patches Gaia Zero-Day Exploited for Root Access Since Late October]]> https://labs.cosmicbytez.ca/news/2026-11-13-check-point-gaia-zero-day-cve-2026-123039-root-exploitation https://labs.cosmicbytez.ca/news/2026-11-13-check-point-gaia-zero-day-cve-2026-123039-root-exploitation Fri, 13 Nov 2026 00:00:00 GMT news Zero-Day Check Point Vulnerability Privilege Escalation <![CDATA[DOJ Tallies Gootloader's Damage: 44 US Ransomware Victims and $28.8 Million]]> https://labs.cosmicbytez.ca/news/2026-11-13-doj-gootloader-44-ransomware-attacks-29-million https://labs.cosmicbytez.ca/news/2026-11-13-doj-gootloader-44-ransomware-attacks-29-million Fri, 13 Nov 2026 00:00:00 GMT news Ransomware Malware Cybercrime Operation Endgame Gootloader <![CDATA[FBI Flash Alert: Artex AI Tool Takes Intrusions From Targeting to Privileged Access in Under Three Hours]]> https://labs.cosmicbytez.ca/news/2026-11-13-fbi-flash-alert-artex-machine-speed-attacks https://labs.cosmicbytez.ca/news/2026-11-13-fbi-flash-alert-artex-machine-speed-attacks Fri, 13 Nov 2026 00:00:00 GMT news Artex FBI AI Security Threat Intelligence Offensive Security <![CDATA[City of Osaka Warns 1 Million Email Addresses Exposed in Vendor Breach]]> https://labs.cosmicbytez.ca/news/2026-11-13-osaka-arara-email-breach-1-million https://labs.cosmicbytez.ca/news/2026-11-13-osaka-arara-email-breach-1-million Fri, 13 Nov 2026 00:00:00 GMT news Data Breach Japan Supply Chain Phishing <![CDATA[PostgreSQL Patches 52 Flaws, Including 22-Year-Old Bug Enabling Authenticated RCE]]> https://labs.cosmicbytez.ca/news/2026-11-13-postgresql-patches-52-flaws-cve-2026-6460 https://labs.cosmicbytez.ca/news/2026-11-13-postgresql-patches-52-flaws-cve-2026-6460 Fri, 13 Nov 2026 00:00:00 GMT news PostgreSQL Security Updates Vulnerability RCE Database <![CDATA[SilentAir Hijacks Asian Telecom Networks to Intercept SMS 2FA Codes and Spy on Taiwanese Users]]> https://labs.cosmicbytez.ca/news/2026-11-13-silentair-asian-telecom-sms-2fa-interception https://labs.cosmicbytez.ca/news/2026-11-13-silentair-asian-telecom-sms-2fa-interception Fri, 13 Nov 2026 00:00:00 GMT news Nation-State Telecom SS7 2FA Espionage <![CDATA[Apache HTTP Server Patches Critical HTTP/2 Remote Code Execution Flaw]]> https://labs.cosmicbytez.ca/news/2026-11-12-apache-http-server-patches-critical-http2-remote-code-execution-flaw https://labs.cosmicbytez.ca/news/2026-11-12-apache-http-server-patches-critical-http2-remote-code-execution-flaw Thu, 12 Nov 2026 00:00:00 GMT news Vulnerability Apache RCE HTTP/2 Security Updates BleepingComputer <![CDATA[Apify Rotates API Tokens and Prompts 2FA Resets After Breach]]> https://labs.cosmicbytez.ca/news/2026-11-12-apify-rotates-api-tokens-prompts-2fa-resets-after-breach https://labs.cosmicbytez.ca/news/2026-11-12-apify-rotates-api-tokens-prompts-2fa-resets-after-breach Thu, 12 Nov 2026 00:00:00 GMT news Data Breach Apify API Security BleepingComputer <![CDATA[Hackers Plant GSocket on Linux Servers for Persistent Access]]> https://labs.cosmicbytez.ca/news/2026-11-12-hackers-plant-gsocket-on-linux-servers-for-persistent-access https://labs.cosmicbytez.ca/news/2026-11-12-hackers-plant-gsocket-on-linux-servers-for-persistent-access Thu, 12 Nov 2026 00:00:00 GMT news Linux Persistence GSocket Microsoft Defender Security Updates BleepingComputer <![CDATA[Operation Endgame Dismantles Gootloader, CastleRAT and StealC, Exposing 6.4 Million Stolen Credentials]]> https://labs.cosmicbytez.ca/news/2026-11-12-international-operation-dismantles-malware-networks-exposes-64-million-stolen-cr https://labs.cosmicbytez.ca/news/2026-11-12-international-operation-dismantles-malware-networks-exposes-64-million-stolen-cr Thu, 12 Nov 2026 00:00:00 GMT news Malware Ransomware Cybercrime Law Enforcement Infostealer BleepingComputer <![CDATA[Microsoft Fixes USB Audio Failures Caused by Security Updates Since September]]> https://labs.cosmicbytez.ca/news/2026-11-12-microsoft-fixes-audio-issues-caused-by-september-security-updates https://labs.cosmicbytez.ca/news/2026-11-12-microsoft-fixes-audio-issues-caused-by-september-security-updates Thu, 12 Nov 2026 00:00:00 GMT news Microsoft Windows Security Updates BleepingComputer <![CDATA[Microsoft Fixes Exchange Sign-In Failures Caused by October Windows Server Updates]]> https://labs.cosmicbytez.ca/news/2026-11-12-microsoft-fixes-exchange-sign-ins-broken-by-windows-server-updates https://labs.cosmicbytez.ca/news/2026-11-12-microsoft-fixes-exchange-sign-ins-broken-by-windows-server-updates Thu, 12 Nov 2026 00:00:00 GMT news Microsoft Windows Exchange Security Updates BleepingComputer <![CDATA[N-central '4EverAble2Shell' Exploited Within Hours: Cryptominers on 21 Servers, 19 Fully Patched]]> https://labs.cosmicbytez.ca/news/2026-11-12-n-central-4everable2shell-agent2shell-exploits-work-against-patched-servers https://labs.cosmicbytez.ca/news/2026-11-12-n-central-4everable2shell-agent2shell-exploits-work-against-patched-servers Thu, 12 Nov 2026 00:00:00 GMT news Zero-Day N-able N-central RMM Cryptojacking BleepingComputer <![CDATA[SignDrop Zero-Day Exploit Claims SYSTEM Access via Windows CLFS Log Authentication]]> https://labs.cosmicbytez.ca/news/2026-11-12-signdrop-windows-clfs-zero-day-system-exploit https://labs.cosmicbytez.ca/news/2026-11-12-signdrop-windows-clfs-zero-day-system-exploit Thu, 12 Nov 2026 00:00:00 GMT news Zero-Day Windows Privilege Escalation CLFS The Hacker News <![CDATA[US Seizes $1.2 Billion Stolen From Binance and Disrupts North Korea's FaceStealer Scheme]]> https://labs.cosmicbytez.ca/news/2026-11-12-us-seizes-12-billion-binance-theft-north-korea-facestealer https://labs.cosmicbytez.ca/news/2026-11-12-us-seizes-12-billion-binance-theft-north-korea-facestealer Thu, 12 Nov 2026 00:00:00 GMT news North Korea APT Cryptocurrency Social Engineering Nation-State Law Enforcement <![CDATA[CVE-2026-126607: hMailServer Plugin Folder Path Handling Flaw (CVSS 7.8)]]> https://labs.cosmicbytez.ca/security/cve-2026-126607 https://labs.cosmicbytez.ca/security/cve-2026-126607 Thu, 12 Nov 2026 00:00:00 GMT security CVE hMailServer Windows NVD Vulnerability <![CDATA[CVE-2026-126797: NextScan ns-admin Authentication Bypass via Hardcoded JWT Key (CVSS 9.8)]]> https://labs.cosmicbytez.ca/security/cve-2026-126797 https://labs.cosmicbytez.ca/security/cve-2026-126797 Thu, 12 Nov 2026 00:00:00 GMT security Vulnerability CVE NVD Authentication Bypass <![CDATA[CVE-2026-126812: blueprintUE Docker Compose Examples Expose MariaDB With Empty Root Password (CVSS 9.8)]]> https://labs.cosmicbytez.ca/security/cve-2026-126812 https://labs.cosmicbytez.ca/security/cve-2026-126812 Thu, 12 Nov 2026 00:00:00 GMT security Vulnerability CVE NVD Docker Misconfiguration <![CDATA[Active ScreenConnect Attacks Breach MSPs, Impact Dozens of Organizations]]> https://labs.cosmicbytez.ca/news/2026-11-11-active-screenconnect-attacks-breach-msps-impact-dozens-of-organizations https://labs.cosmicbytez.ca/news/2026-11-11-active-screenconnect-attacks-breach-msps-impact-dozens-of-organizations Wed, 11 Nov 2026 00:00:00 GMT news Malware Data Breach ScreenConnect MSP Supply Chain <![CDATA[Baker Tilly Notifies Clients of Data Breach at Third-Party Provider]]> https://labs.cosmicbytez.ca/news/2026-11-11-baker-tilly-notifies-clients-of-data-breach-at-third-party-provider https://labs.cosmicbytez.ca/news/2026-11-11-baker-tilly-notifies-clients-of-data-breach-at-third-party-provider Wed, 11 Nov 2026 00:00:00 GMT news Data Breach Baker Tilly Third-Party Risk Supply Chain <![CDATA[CISA Adds Cisco BroadWorks and Openwave Flaws to KEV as Exploitation Continues]]> https://labs.cosmicbytez.ca/news/2026-11-11-cisco-broadworks-and-openwave-flaws-actively-exploited-despite-available-patches https://labs.cosmicbytez.ca/news/2026-11-11-cisco-broadworks-and-openwave-flaws-actively-exploited-despite-available-patches Wed, 11 Nov 2026 00:00:00 GMT news Cisco BroadWorks CISA KEV XXE Security Updates Telecom <![CDATA[eBPF Rootkits: Why Underground Actors Are Taking Notice]]> https://labs.cosmicbytez.ca/news/2026-11-11-ebpf-rootkits-why-underground-actors-are-taking-notice https://labs.cosmicbytez.ca/news/2026-11-11-ebpf-rootkits-why-underground-actors-are-taking-notice Wed, 11 Nov 2026 00:00:00 GMT news Linux eBPF Rootkit Threat Intelligence BPFDoor Detection <![CDATA[eMudhra Revokes 8 More CA Certificates After Private Key Mishap]]> https://labs.cosmicbytez.ca/news/2026-11-11-emudhra-revokes-8-more-ca-certificates-after-private-key-mishap https://labs.cosmicbytez.ca/news/2026-11-11-emudhra-revokes-8-more-ca-certificates-after-private-key-mishap Wed, 11 Nov 2026 00:00:00 GMT news PKI Certificate Authority eMudhra TLS Incident <![CDATA[Hackers Use AntiFox AI Agents in AWS Credential-Theft Attacks]]> https://labs.cosmicbytez.ca/news/2026-11-11-hackers-use-antifox-ai-agents-in-aws-credential-theft-attacks https://labs.cosmicbytez.ca/news/2026-11-11-hackers-use-antifox-ai-agents-in-aws-credential-theft-attacks Wed, 11 Nov 2026 00:00:00 GMT news Cloud Security AWS AI Security AntiFox Credential Theft Arctic Wolf <![CDATA[Maersk Confirms Data Breach as WhiteArmor Ransomware Demands $5 Million]]> https://labs.cosmicbytez.ca/news/2026-11-11-maersk-confirms-data-breach-as-whitearmor-ransomware-demands-5-million https://labs.cosmicbytez.ca/news/2026-11-11-maersk-confirms-data-breach-as-whitearmor-ransomware-demands-5-million Wed, 11 Nov 2026 00:00:00 GMT news Ransomware Data Breach Maersk WhiteArmor Supply Chain Logistics <![CDATA[N-able Releases Hotfixes for N-central Zero-Days After PoC Exploits Go Public]]> https://labs.cosmicbytez.ca/news/2026-11-11-n-able-releases-security-hotfixes-for-zero-day-vulnerabilities https://labs.cosmicbytez.ca/news/2026-11-11-n-able-releases-security-hotfixes-for-zero-day-vulnerabilities Wed, 11 Nov 2026 00:00:00 GMT news Zero-Day N-able N-central RMM MSP Vulnerability <![CDATA[Microsoft Releases Windows 10 KB5131096 Extended Security Update]]> https://labs.cosmicbytez.ca/news/2026-11-11-windows-10-kb5131096-extended-security-update https://labs.cosmicbytez.ca/news/2026-11-11-windows-10-kb5131096-extended-security-update Wed, 11 Nov 2026 00:00:00 GMT news Microsoft Windows Security Updates Windows 10 ESU <![CDATA[CVE-2026-108186 — Zoom Workplace for Windows Privilege Escalation (CVSS 9.6)]]> https://labs.cosmicbytez.ca/security/cve-2026-108186 https://labs.cosmicbytez.ca/security/cve-2026-108186 Wed, 11 Nov 2026 00:00:00 GMT security CVE-2026-108186 Zoom Windows Privilege Escalation Input Validation NVD <![CDATA[CVE-2026-124194: Outlook Spoofing Zero-Day Leaks NTLM Hashes (Exploited)]]> https://labs.cosmicbytez.ca/security/cve-2026-124194-outlook-ntlm-spoofing-zero-day https://labs.cosmicbytez.ca/security/cve-2026-124194-outlook-ntlm-spoofing-zero-day Wed, 11 Nov 2026 00:00:00 GMT security CVE-2026-124194 Microsoft Outlook Zero-Day NTLM CISA KEV Vulnerability <![CDATA[CVE-2026-60043: Critical Unauthenticated XSS Enables Backend Takeover]]> https://labs.cosmicbytez.ca/security/cve-2026-60043 https://labs.cosmicbytez.ca/security/cve-2026-60043 Wed, 11 Nov 2026 00:00:00 GMT security CVE NVD Vulnerability XSS <![CDATA[Gitleaks: Stopping Leaked Secrets with Pre-Commit Hooks and CI Enforcement]]> https://labs.cosmicbytez.ca/projects/2026-11-11-gitleaks-secret-scanning-pre-commit-ci https://labs.cosmicbytez.ca/projects/2026-11-11-gitleaks-secret-scanning-pre-commit-ci Wed, 11 Nov 2026 00:00:00 GMT project DevSecOps Gitleaks Secrets-Management Git CI/CD GitHub-Actions <![CDATA[Anthropic Releases Claude Fable 5.2 and Mythos 5.2, Tops Cyberattack Benchmark]]> https://labs.cosmicbytez.ca/news/2026-11-10-anthropic-claude-fable-5-2-mythos-5-2-cyber-benchmarks https://labs.cosmicbytez.ca/news/2026-11-10-anthropic-claude-fable-5-2-mythos-5-2-cyber-benchmarks Tue, 10 Nov 2026 00:00:00 GMT news AI Security Anthropic Claude Benchmarks Offensive AI <![CDATA[Artex: The AI Pen-Test Tool Hackers Turned Into a Weapon]]> https://labs.cosmicbytez.ca/news/2026-11-10-artex-ai-pen-test-tool-weaponized-forks https://labs.cosmicbytez.ca/news/2026-11-10-artex-ai-pen-test-tool-weaponized-forks Tue, 10 Nov 2026 00:00:00 GMT news Artex AI Security Offensive Security Cloud Security Credential Attacks <![CDATA[Hackers Now Exploit Critical Barracuda ESG Flaws to Gain Root Access]]> https://labs.cosmicbytez.ca/news/2026-11-10-barracuda-esg-root-exploitation https://labs.cosmicbytez.ca/news/2026-11-10-barracuda-esg-root-exploitation Tue, 10 Nov 2026 00:00:00 GMT news Barracuda Email Security Gateway Exploited Root Vulnerability <![CDATA[Chrome 157 Patches Exploited XML Zero-Day, the Eighth of 2026]]> https://labs.cosmicbytez.ca/news/2026-11-10-chrome-157-exploited-xml-zero-day-cve-2026-125350 https://labs.cosmicbytez.ca/news/2026-11-10-chrome-157-exploited-xml-zero-day-cve-2026-125350 Tue, 10 Nov 2026 00:00:00 GMT news Zero-Day Chrome CVE-2026-125350 Browser Security Patch <![CDATA[Critical Xen Orchestra Auth Bypass Flaw Exploited to Hijack VM Servers]]> https://labs.cosmicbytez.ca/news/2026-11-10-critical-xen-orchestra-auth-bypass-flaw-exploited-to-hijack-vm-servers https://labs.cosmicbytez.ca/news/2026-11-10-critical-xen-orchestra-auth-bypass-flaw-exploited-to-hijack-vm-servers Tue, 10 Nov 2026 00:00:00 GMT news Vulnerability Xen Orchestra XCP-ng Authentication Bypass Virtualization <![CDATA[US Cuts Off MEXC Crypto Exchange Over Sanctions Evasion and Cybercrime Links]]> https://labs.cosmicbytez.ca/news/2026-11-10-fincen-cuts-off-mexc-crypto-exchange-sanctions-evasion https://labs.cosmicbytez.ca/news/2026-11-10-fincen-cuts-off-mexc-crypto-exchange-sanctions-evasion Tue, 10 Nov 2026 00:00:00 GMT news Cryptocurrency Sanctions FinCEN Cybercrime Money Laundering <![CDATA[Fireworks AI Breach Widens to Customer Datasets, Model Weights and Notion AI Chats]]> https://labs.cosmicbytez.ca/news/2026-11-10-fireworks-ai-confirms-wider-breach-affecting-customer-datasets-model-weights-and https://labs.cosmicbytez.ca/news/2026-11-10-fireworks-ai-confirms-wider-breach-affecting-customer-datasets-model-weights-and Tue, 10 Nov 2026 00:00:00 GMT news Data Breach Fireworks AI Notion AI Security LLMjacking <![CDATA[France Blames Iranian IRGC-Linked Hackers for Supermarket Attacks That Sparked Fires]]> https://labs.cosmicbytez.ca/news/2026-11-10-france-attributes-supermarket-refrigeration-attacks-iran-shahid-kaveh https://labs.cosmicbytez.ca/news/2026-11-10-france-attributes-supermarket-refrigeration-attacks-iran-shahid-kaveh Tue, 10 Nov 2026 00:00:00 GMT news Iran Nation-State ICS OT Security France Cold Chain <![CDATA[GRC Teams Face 'Agentification': Three Skills for Governing AI Agents]]> https://labs.cosmicbytez.ca/news/2026-11-10-grc-agent-governance-skills https://labs.cosmicbytez.ca/news/2026-11-10-grc-agent-governance-skills Tue, 10 Nov 2026 00:00:00 GMT news GRC AI Agents Compliance Governance Opinion <![CDATA[Japanese Furniture Giant Nitori Says Hackers May Have Stolen 37.6M Customer Records]]> https://labs.cosmicbytez.ca/news/2026-11-10-japanese-furniture-giant-nitori-says-hackers-stole-376m-customer-records https://labs.cosmicbytez.ca/news/2026-11-10-japanese-furniture-giant-nitori-says-hackers-stole-376m-customer-records Tue, 10 Nov 2026 00:00:00 GMT news Data Breach Nitori Japan Retail Privacy <![CDATA[November 2026 Patch Tuesday: Exploited Outlook Zero-Day Among 1,094 Flaws]]> https://labs.cosmicbytez.ca/news/2026-11-10-november-2026-patch-tuesday-outlook-zero-day https://labs.cosmicbytez.ca/news/2026-11-10-november-2026-patch-tuesday-outlook-zero-day Tue, 10 Nov 2026 00:00:00 GMT news Patch Tuesday Microsoft Zero-Day Outlook CVE-2026-124194 Windows <![CDATA[Railway Breach Leads to $740,000 in Fraudulent AI Charges]]> https://labs.cosmicbytez.ca/news/2026-11-10-railway-breach-740000-fraudulent-ai-charges https://labs.cosmicbytez.ca/news/2026-11-10-railway-breach-740000-fraudulent-ai-charges Tue, 10 Nov 2026 00:00:00 GMT news Data Breach Cloud Security Railway LLMjacking Secrets