Top 3 MS Office Exploits Hackers Use in 2025 – Stay Alert!
Hackers have long used Word and Excel documents as delivery vehicles for malware, and in 2025, these tricks are far from outdated. From phishing schemes…
Month: March 2025
Can regulatory oversight alone unlock cloud competition?
Cloud computing’s rise is a success story under scrutiny. It has been nothing short of transformative, enabling businesses to scale operations, innovate rapidly, and optimise…
Ingress-NGINX Controller Flaws Require Immediate Fix
A set of vulnerabilities have been identified in Ingress-NGINX Controller for Kubernetes, posing a risk to organizations relying on the affected versions. These vulnerabilities impact…
CVE-2025-26512: Critical SnapCenter Security Risk
A serious security vulnerability has recently been identified in NetApp’s SnapCenter software, a widely used enterprise solution for managing data protection. This flaw, tracked as…
CBA opens a ‘tech hub’ in Seattle – Financial Services – Cloud – Software
CBA has opened a ‘tech hub’ in Seattle this month that will act as a “strategic gateway” to collaborate with technology vendors, at a time…
Hive Five 216 – The Hacker Always Wins
Habits are so good. They even compound! But, they can be hard to start and maintain. I’ve successfully started new ones and then stacked on…
Arkana Security group claims the hack of US telco provider WideOpenWest (WOW!)
Arkana Security group claims the hack of US telco provider WideOpenWest (WOW!) Pierluigi Paganini March 27, 2025 Arkana Security, a new ransomware group, claims to…
![[tl;dr sec] #271 - Threat Modeling (+ AI), Backdoored GitHub Actions, Compromising a Threat Actor's Telegram](https://image.cybernoz.com/wp-content/uploads/2025/03/1743072871_tldr-sec-271-Threat-Modeling-AI-Backdoored-GitHub.png)
[tl;dr sec] #271 – Threat Modeling (+ AI), Backdoored GitHub Actions, Compromising a Threat Actor’s Telegram
Threat modeling (with) LLMs, tj-actions woes, reading a threat actor’s Telegram C2 I hope you’ve been doing well! Working on Your Personality One family ritual…
Security Update: Publicly Exposed Ingress NGINX Admission
A series of vulnerabilities, known as IngressNightmare (CVE-2025-1097, CVE-2025-1098, CVE-2025-24514, CVE-2025-1974), have been identified in ingress-nginx, a widely used Kubernetes ingress controller. When exploited together,…
Intigriti insights into latest beg bounty scam
The Intigriti team have recently observed an abuse scenario, trending across the industry, where malicious actors are posing as legitimate white-hat hackers, deceiving targeted companies…
My information was stolen. Now what?
Back in May 2023, I wrote the blogpost You may not care where you download software from, but malware does as a call to arms,…
Commerce limits 19 Chinese, Taiwanese companies from buying U.S. tech
The Commerce Department plans to finalize economic sanctions this week on nearly 20 Chinese and Taiwanese organizations, citing the need to limit their access to…