Cyber Tzar (@cybertzar) header
Cyber Tzar (@cybertzar) profile picture

Cyber Tzar

@cybertzar

Official Twitter account of Cyber Tzar. Cyber Security Assessment, Score Carding, Benchmarking, and Risk Management Platform.

cybertzar.com
Joined December 2020
  • Tweets10.5K
  • Following4.5K
  • Followers1.2K
126Media
Photo by Cyber Tzar (@cybertzar)Photo by Cyber Tzar (@cybertzar)Photo by Cyber Tzar (@cybertzar)Photo by Cyber Tzar (@cybertzar)Photo by Cyber Tzar (@cybertzar)Photo by Cyber Tzar (@cybertzar)
Exciting news! Cyber Tzar is now part of the Cyber Runway Scale Programme by @Plexalcity - @PlexalCyber & @DSITgov, with support from @Deloitte & @CSIT_QUB! cybertzar.com/embracing-grow… #Cybersecurity #Innovation #AI #CyberRunway #CyberTzar #NCSCForStartups
Embracing Growth and Innovation: Cyber Tzar Joins the Cyber Runway Scale Programme - Cyber Tzar

Embracing Growth and Innovation: Cyber Tzar Joins the Cyber Runway Scale Programme - Cyber Tzar

Welcome to Cyber Runway Scale We’re thrilled to announce that Cyber Tzar has been selected to participate in the Cyber Runway Scale Programme, an exciting initiative backed by the Department for...

cybertzar.com
2
1
7
1,353
A security researcher has released a proof-of-concept exploit for a recently patched Android vulnerability, dubbed "SMS of Death" and tracked as CVE-2026-58882. #cybersecurity bleepingcomputer.com/news/se…
New Android SMS of Death exploit can remotely crash unpatched phones

New Android SMS of Death exploit can remotely crash unpatched phones

A security researcher has released a proof-of-concept exploit for a recently patched Android vulnerability, dubbed "SMS of Death" and tracked as CVE-2026-58882, that lets attackers remotely disrupt...

bleepingcomputer.com
35
One retail scam used more than 1,200 look-alike .shop domains sharing a single IP address. The sites reused HTML, JavaScript and payment-page designs intended to harvest card numbers, expiry dates and security codes. #cybersecurity helpnetsecurity.com/2026/10/…
Scammers rebuild fake shopping sites within hours of a takedown - Help Net Security

Scammers rebuild fake shopping sites within hours of a takedown - Help Net Security

Online scams exploit trusted brands, while fake account abuse drives payment card testing, bonus fraud and major account takeovers.

helpnetsecurity.com
15
American blockchain analysis firm Chainalysis said it was the target of a cybersecurity incident in which an external actor accessed non-sensitive customer data. #cybersecurity thehackernews.com/2026/10/ch…
Chainalysis Confirms Intrusion Into Internal Tools and Exposure of Customer Identity Data

Chainalysis Confirms Intrusion Into Internal Tools and Exposure of Customer Identity Data

Chainalysis confirms an attack using agentic techniques exposed customer names, emails, and user IDs, but not credentials or session tokens.

thehackernews.com
13
Anthropic has denied allegations that a malicious version of the official Claude Code extension published to Cursor’s marketplace was linked to any kind of compromise of its own systems. #cybersecurity theregister.com/cyber-crime/…
Anthropic: That Claude Code extension compromise… couldn't be us

Anthropic: That Claude Code extension compromise… couldn't be us

Claudeshop fingers 'malicious actor' in targeted supply-chain attack on Cursor

theregister.com
15
A malicious version of Anthropic's Claude Code VS Code extension was distributed through Cursor's extension marketplace for approximately 11 hours on October 29, exposing up to 5,000 developers to malware. #cybersecurity bleepingcomputer.com/news/se…
Malicious Claude Code extension on Cursor planted SSH backdoors

Malicious Claude Code extension on Cursor planted SSH backdoors

A malicious version of Anthropic's Claude Code VS Code extension was distributed through Cursor's extension marketplace for approximately 11 hours on October 29, exposing up to 5,000 developers to...

bleepingcomputer.com
21
Online fashion retailer Revolve warned investors that cybercriminals gained access to payment card numbers and expiration dates during a recent cyber incident. #cybersecurity therecord.media/resolve-fash…
Fashion retailer Resolve says hackers stole payment card information

Fashion retailer Resolve says hackers stole payment card information

The company, billing itself as “the next-generation fashion retailer for Millennial and Generation Z consumers,” said a recent hack exposed customer payment card numbers.

therecord.media
16
Chinese state-sponsored threat actors have been observed using a Go-based artificial intelligence (AI)-powered penetration testing framework called ARTEX in attacks aimed at high-value targets simultaneously. #cybersecurity thehackernews.com/2026/10/ch…
Chinese Hackers Use AI-Powered ARTEX to Target Over 200 Organizations Worldwide

Chinese Hackers Use AI-Powered ARTEX to Target Over 200 Organizations Worldwide

China-linked Vapor Panda used ARTEX AI agents to target over 200 organizations, with post-exploitation activity confirmed at nine.

thehackernews.com
17
Thousands of GCHQ storage drives containing sensitive data have been lost for years, and the British signals intelligence agency still cannot explain where they are. #cybersecurity theregister.com/security/202…
British intelligence agency misplaced 'thousands' of storage devices, years later still can't say...

British intelligence agency misplaced 'thousands' of storage devices, years later still can't say...

Other agency errors included an unchecked software bug that led to Terrorism Act detentions

theregister.com
8
CVE-2026-20127 is a max-severity flaw that Cisco patched in February 2026, which allows remote attackers to gain privileged access to Catalyst SD-WAN Controller and Manager and add rogue peers. #cybersecurity bleepingcomputer.com/news/se…
Hackers exploit Cisco SD-WAN flaw to deploy custom KeyDrift malware

Hackers exploit Cisco SD-WAN flaw to deploy custom KeyDrift malware

A newly identified advanced persistent threat (APT) group tracked as UAT-11473 was observed exploiting CVE-2026-20127, an authentication-bypass flaw in Cisco Catalyst SD-WAN Controllers, to deploy a...

bleepingcomputer.com
46
Fake GitHub projects posing as desktop versions of ChatGPT and Claude have been used to spread a malware chain that ends with a cryptocurrency miner, Check Point has found. #cybersecurity helpnetsecurity.com/2026/10/…
Yoba malware hides in fake desktop versions of ChatGPT and Claude - Help Net Security

Yoba malware hides in fake desktop versions of ChatGPT and Claude - Help Net Security

Fake ChatGPT and Claude desktop apps on GitHub use signed OpenAI and Anthropic executables to load Yoba malware and a cryptominer.

helpnetsecurity.com
23
A flaw in the Linux kernel's TCP code, tracked as CVE-2026-98432, affects Ubuntu, Red Hat Enterprise Linux (RHEL), and other Linux distributions. The kernel's own CVE team rates it 9.8 out of 10 on the CVSS scale. #cybersecurity thehackernews.com/2026/10/li…
Linux Kernel TCP Flaw With 9.8 CVSS Score Affects Ubuntu, Red Hat and Other Distributions

Linux Kernel TCP Flaw With 9.8 CVSS Score Affects Ubuntu, Red Hat and Other Distributions

Ubuntu and RHEL lack fixes for a Linux TCP use-after-free that Anthropic says it exploited to run commands as root on MPTCP servers.

thehackernews.com
1
120
Belgium's finance and tax agency has pulled "several" digital services offline after a cyberattack on the organization. #cybersecurity theregister.com/security/202…
Belgium's tax agency confirms cyberattack, pulls services offline

Belgium's tax agency confirms cyberattack, pulls services offline

Officials confirm this week’s tax deadlines extended to November as a result

theregister.com
18
Chinese state-sponsored hacking group Volt Typhoon has been using a framework that relies on rotating chains of connected devices compromised on demand, including for zero-day attacks targeting high-value systems. #cybersecurity bleepingcomputer.com/news/se…
Volt Typhoon hides zero-day attacks using 'Silent Train' framework

Volt Typhoon hides zero-day attacks using 'Silent Train' framework

Chinese state-sponsored hacking group Volt Typhoon has been using a framework that relies on rotating chains of connected devices compromised on demand, including for zero-day attacks targeting...

bleepingcomputer.com
1
1
2
58
Humans are fickle and would rather be popular within a group than seek the truth, a survey of 14 of the world's top AI models has found. #cybersecurity cybernews.com/ai-news/what-a…
AI models say humans choose belonging over truth

AI models say humans choose belonging over truth

14 AI models in a Model Compare test said humans value belonging over truth, despite coming from 10 labs. Read what the findings show

cybernews.com
16
The China-nexus cyber espionage group known as Volt Typhoon has been attributed to a now-disrupted covert access network dubbed Silent Train that has been put to use for zero-day exploitation and strategic access. #cybersecurity thehackernews.com/2026/10/vo…
Volt Typhoon Used Covert Silent Train Network in Four Zero-Day Exploitation Campaigns

Volt Typhoon Used Covert Silent Train Network in Four Zero-Day Exploitation Campaigns

Volt Typhoon used the disrupted Silent Train network for four zero-day campaigns targeting enterprise management systems and strategic networks.

thehackernews.com
22
UK domain registrar 123 Reg (no relation – Ed) says it was the victim of an “AI-driven cyberattack” that exposed customer data. #cybersecurity theregister.com/cyber-crime/…
123 Reg discloses 'AI cyberattack' on customer data, suspects China nexus

123 Reg discloses 'AI cyberattack' on customer data, suspects China nexus

Company chiefs believe the attackers could be the same as those who used ARTEX to breach South Korea’s financial giants

theregister.com
19
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added two critical PHP vulnerabilities collectively tracked as PHP2Shell to its catalog of actively exploited security flaws. #cybersecurity bleepingcomputer.com/news/se…
CISA confirms PHP2Shell vulnerabilities now exploited in attacks

CISA confirms PHP2Shell vulnerabilities now exploited in attacks

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added the PHP2Shell vulnerabilities to its catalog of actively exploited security flaws and ordered federal agencies to patch...

bleepingcomputer.com
30
Wiz Research has recovered more than 13,500 planted branches from 850+ compromised GitHub accounts, the work of a campaign it calls Gheist, after the user agent the tool sends with its GitHub API requests. #cybersecurity helpnetsecurity.com/2026/10/…
Private repos still leak secrets to Gheist, a stolen GitHub token campaign - Help Net Security

Private repos still leak secrets to Gheist, a stolen GitHub token campaign - Help Net Security

GitHub token abuse campaign Gheist dumps secrets from private repos, where GitHub’s approval hold on malicious workflows doesn’t apply.

helpnetsecurity.com
28
A criminal using the Amadey malware can no longer access or steal data from 180,000 infected computers around the world, including some in Australia, the Australian Signals Directorate (ASD) says. #cybersecurity thehackernews.com/2026/10/au…
Australia Gets Into Amadey Malware Backend, Cuts Off Access to 180,000 Infected Computers

Australia Gets Into Amadey Malware Backend, Cuts Off Access to 180,000 Infected Computers

Australia's ASD says it disconnected an Amadey malware operator from 180,000 infected computers worldwide after accessing the operation's backend.

thehackernews.com
15
The University of New Mexico is canceling classes across the medicine, nursing, and pharmacy faculties for a second day amid continued efforts to recover from a "cybersecurity event. #CyberSecurity theregister.com/cyber-crime/…

Day 2 of canceled classes at University of New Mexico after Health Sciences Center cyberattack

University hospitals once again accepting patients after initial ambulance diversion, but recovery to continue in phases

theregister.com
19
Load more