Amazon to cut about 14,000 corporate jobs in AI push
Amazon will reduce its global corporate workforce by about 14,000 people, with more cuts expected next year, in a major shakeup driven in part by…
Author: Cybernoz
F5 asserts limited impact from prolonged nation-state attack on its systems
F5 CEO François Locoh-Donou said on a company earnings call that there were two categories of impact on customers following a nation-state attacker’s long-term, persistent…
Threat Actors Merging FileFix and Cache Smuggling Attacks to Evade Security Controls
Cybersecurity researchers have uncovered a sophisticated phishing campaign that combines two emerging attack techniques to bypass conventional security defenses. The hybrid approach merges FileFix social…
Home Affairs streamlines risk vetting for gov tech suppliers
Home Affairs is streamlining its security vetting procedures for Commonwealth technology suppliers, but there is a quid pro quo for vendors: ‘security can no longer…
CISA warns of two more actively exploited Dassault vulnerabilities
The Cybersecurity & Infrastructure Security Agency (CISA) warned today that attackers are actively exploiting two vulnerabilities in Dassault Systèmes’ DELMIA Apriso, a manufacturing operations management…
New TEE.Fail Side-Channel Attack Extracts Secrets from Intel and AMD DDR5 Secure Enclaves
Oct 28, 2025Ravie LakshmananEncryption / Hardware Security A group of academic researchers from Georgia Tech, Purdue University, and Synkhronix have developed a side-channel attack called…
UK Afghan Data Leak Linked To 49 Deaths
A new study that looked at 231 people exposed by a 2022 UK data leak of Afghans seeking resettlement after the Taliban takeover found that…
Google’s Tabua cable to be covered by extended Sydney protection zone
Google’s Tabua submarine cable will now land in a designated protection zone in Sydney’s south after the communications regulator agreed to expand the zone boundaries.…
Qilin ransomware abuses WSL to run Linux encryptors in Windows
The Qilin ransomware operation was spotted executing Linux encryptors in Windows using Windows Subsystem for Linux (WSL) to evade detection by traditional security tools. The…
New GhostGrab Android Malware Silently Steals Banking Login Details and Intercept SMS for OTPs
A sophisticated Android banking trojan dubbed GhostGrab has emerged in the threat landscape, targeting financial institutions across multiple regions with advanced credential theft capabilities. The…
Copilot now lets you build apps, automate workflows
Microsoft announced today a new Microsoft 365 Copilot agent called App Builder that can help users create and deploy apps “in minutes.” As Microsoft explained,…
XWiki RCE Vulnerability Actively Exploted In Wild To Deliver Coinminer
A critical remote code execution (RCE) flaw in XWiki, a popular open-source wiki platform, was exploited in the wild to deploy cryptocurrency mining malware on…