UK power plant shutdown highlights CNI cyber challenges
The emergency closure of an unidentified UK power generation facility following a cyber attack linked to the Iranian regime has highlighted some of the resilience…
Author: Cybernoz
AEMO predicts seven-fold rise in data centre power use over next decade
Key points AEMO forecasts data centre electricity consumption will grow seven-fold over the next decade, from 5 TWh currently to around 34 TWh. The 2026…
Uber Fined Nearly $1 Billion by Dutch Regulators Over Automated Suspensions of Driver Accounts
Dutch data protection authorities have fined Uber nearly $1 billion, saying the ride-hailing company used automated software to suspend driver accounts, sometimes permanently, with no…
iAuthFlow v2: The $10,000 Phishing Toolkit That Survives Your Password Reset
iAuthFlow v2: The $10,000 Phishing Toolkit That Survives Your Password Reset Pierluigi Paganini August 24, 2026 iAuthFlow v2 phishing toolkit uses a phished Google session…
House Democrats ask GAO to study CISA workforce cuts
The five lawmakers, who serve on the Homeland Security Committee, said Congress didn’t know enough about the Trump administration’s changes to the cybersecurity agency. Source…
Treasury sanctions alleged Iranian hackers as part of ‘economic D-Day’
As part of its “economic D-Day” against Iran, the Treasury Department designated four Iranians for sanctions Monday stemming from their alleged role in hacking critical…
Inaudible sounds used to fingerprint browsers catch AliExpress red-handed
Variability in different math libraries, which are used when audio is produced through browsers, were once high enough to provide a massively large number of…
The Cloudflare Blog – Brought to you by EmDash
You likely noticed the recent redesign of the Cloudflare Blog. We added dark mode, modernized the look and feel, and made a lot of other…
Custom HTML for Custom Phishing: Make the Fake Feel Real
It happens all the time in Business Email Compromise (BEC) attacks: someone in the finance department gets an invoice email from what looks like a…
Hackers target WordPress sites in miniOrange auth bypass attacks
Hackers are attempting to exploit two critical authentication bypass vulnerabilities in the miniOrange SAML 2.0 Single Sign On plugin for WordPress that can be used…
Zimbra Collaboration Suite Vulnerability Actively Exploited in the Wild
CERT Polska has warned that threat actors are actively exploiting CVE-2026-73570, a critical OS command-injection vulnerability in Zimbra Collaboration Suite that allows remote, unauthenticated attackers…
North Korean Hackers Hide AnyDesk on Victim PCs to Maintain Secret Remote Access
North Korea-linked Kimsuky operators have targeted organizations in South Korea and Japan with spear-phishing campaigns that install and conceal AnyDesk, giving attackers persistent, interactive remote…