Hackers Exploit Browser-in-the-Browser Trick to Hijack Facebook Accounts
Facebook’s massive 3 billion active users make it an attractive target for sophisticated phishing campaigns. As attackers grow more inventive, a hazardous technique is gaining…
Author: Cybernoz
Rakuten Viber CISO/CTO on balancing encryption, abuse prevention, and platform resilience
In this Help Net Security interview, Liad Shnell, CISO and CTO at Rakuten Viber, discusses how messaging platforms have become critical infrastructure during crises and…
Endesa Data Breach Exposes Customer Contract Information
Spanish energy provider Endesa and its regulated electricity operator Energía XXI have begun notifying customers after detecting unauthorized access to the company’s internal systems, resulting…
Multiple Hikvision Vulnerabilities Let Attackers Cause Device Malfunction Using Crafted Packets
Hikvision, a leading provider of surveillance and access control systems, faces serious security risks from two newly disclosed stack overflow vulnerabilities. These flaws, tracked as…
Important Consideration To Prevent Insider Cyber Security Threats
Insider threats are very real and make up the majority of cybersecurity attacks on enterprises. Yet, many businesses still spend most of their time safeguarding…
Teaching cybersecurity by letting students break things
Cybersecurity students show higher engagement when the work feels tangible. A new study from Airbus Cybersecurity and Dauphine University describes what happens when courses move…
AsyncRAT and the Misuse of Cloudflare Free-Tier Infrastructure: Detection and Analysis
Cybersecurity researchers have uncovered a sophisticated AsyncRAT campaign exploiting Cloudflare’s free-tier services and TryCloudflare tunneling domains to evade detection while delivering remote access trojan payloads…
What insurers expect from cyber risk in 2026
Technology shifts, policy decisions, and attacker behavior are changing at the same time, and their effects increasingly overlap. Insurers, brokers, and security teams are feeling…
CISA Alerts on Actively Exploited Gogs Path Traversal Flaw
The Cybersecurity and Infrastructure Security Agency (CISA) has added a critical vulnerability in Gogs, a self-hosted Git service, to its Known Exploited Vulnerabilities catalog, warning…
New WhatsApp Scam Hijacks Accounts Without Stealing Passwords
Security researchers at Avast have uncovered a new WhatsApp takeover scam that does not rely on stolen passwords, broken encryption or SIM-swapping. Instead, it tricks…
Online shopping scams cost Hongkongers HK$14 million in first week of 2026
Internet fraudsters tricked more than 270 Hong Kong residents out of nearly HK$14 million (US$1.8 million) through online shopping scams in the first week of…
Google’s Mandiant releases free Salesforce access control checker
Google-owned security vendor Mandiant has released an open-source command line tool which aims to help organisations identify potentially catastrophic access control misconfigurations in their Salesforce…