Ransomware gang claims Conduent breach: what you should watch for next
Even if you’ve never heard of Conduent, you could be one of the many people caught up in its recent data breach. Conduent provides technology…
Month: October 2025
Post Office scandal investigator warns public inquiry about Horizon defect at large for years
A Horizon system “operational defect” brought to the attention of the Post Office in 2019, but left unresolved, could be at the root of unexplained…
![[tl;dr sec] #303 - MCP Security Scanners, Attacking GitLab CI/CD, AI SOC Benchmarks](https://image.cybernoz.com/wp-content/uploads/2025/10/tldr-sec-303-MCP-Security-Scanners-Attacking-GitLab-CICD.png)
[tl;dr sec] #303 – MCP Security Scanners, Attacking GitLab CI/CD, AI SOC Benchmarks
I hope you’ve been doing well! Fight Robots Fight! New #PeakBayArea experience: this week I attended a TechCrunch Disrupt-adjacent event with the normal food, drinks,…
Canadian authorities warn of hacktivists targeting exposed ICS devices
Canadian authorities on Wednesday warned that hacktivist groups have breached critical infrastructure facilities in recent weeks, including water, energy and agricultural sites, by manipulating industrial…
New Malware Targeting WooCommerce Sites with Malicious Plugins Steals Credit Card Data
A sophisticated malware campaign has emerged targeting WordPress e-commerce sites, particularly those leveraging the WooCommerce plugin to process customer transactions. The threat, discovered in August…
NASA’s Quiet Supersonic Jet Takes Flight
The X-59 will generate a lower “sonic thump” thanks to its unique design. It was given a long, slender nose that accounts for about a…
Critical Blink Vulnerability Lets Attackers Crash Chromium Browsers in Seconds
Security researchers have discovered a critical architectural flaw in the Blink rendering engine that powers Chromium-based browsers, exposing over 3 billion users to denial-of-service attacks.…
Ericsson and SAR unite to drive 5G-powered rail transformation in Saudi Arabia
Ericsson and the Saudi Railway Company (SAR) have signed a memorandum of understanding (MoU) to deploy 5G-enabled technologies across the national rail network. The partnership…
12 Malicious Extension in VSCode Marketplace Steal Source Code and Exfiltrate Login Credentials
A recent discovery has shaken the Visual Studio Code (VSCode) ecosystem, unveiling a sophisticated supply chain attack targeting developers worldwide. At least a dozen malicious…
Threat Actors Abuse AzureHound Tool to Enumerate Azure and Entra ID Environments
The cybersecurity landscape continues to shift toward cloud-based attacks, with threat actors increasingly exploiting legitimate security tools for malicious reconnaissance. AzureHound, a penetration testing utility…
WhatsApp now lets you secure chat backups with passkeys
Messaging service WhatsApp is launching passkey-encrypted chat backups for iOS and Android, allowing users to encrypt their stored message history using their face, fingerprint, or…
Microsoft CEO speaks of global cloud factory as Azure stalls
On the day CEO Satya Nadella discussed Microsoft’s “planet-scale cloud and AI factory,” Azure cloud – the IT infrastructure underpinning this – was offline for…