VMware ESXi zero-days likely exploited a year before disclosure
Chinese-speaking threat actors used a compromised SonicWall VPN appliance to deliver a VMware ESXi exploit toolkit that seems to have been developed more than a…
Author: Cybernoz
UK Government Launches Cyber Action Plan to Bolster Public Sector Security
The UK government has unveiled an ambitious £210 million cyber security initiative designed to fortify digital defenses across public sector departments and restore confidence in…
Astaroth Banking Trojan Targets Brazilians via WhatsApp Messages – Hackread – Cybersecurity News, Data Breaches, AI, and More
A well-known, dangerous banking malware called Astaroth has found a new way to break into people’s lives by sneaking into WhatsApp. The findings come from…
Cisco switches hit by reboot loops due to DNS client bug
Multiple Cisco switch models are suddenly experiencing reboot loops after logging fatal DNS client errors, according to reports seen by BleepingComputer. Starting at approximately 2…
Cisco Snort 3 Vulnerability Leading to Sensitive Data Disclosure
Cisco has disclosed two critical vulnerabilities in the Snort 3 detection engine affecting multiple enterprise security products, including firewalls, threat defense systems, and edge platforms.…
Astaroth banking Trojan spreads in Brazil via WhatsApp worm
Astaroth banking Trojan spreads in Brazil via WhatsApp worm Pierluigi Paganini January 08, 2026 A WhatsApp worm spread the Astaroth banking trojan across Brazil by…
A New Secure Space for Trusted Health and Medical Conversations
ChatGPT Health is launching as a dedicated health-focused version of ChatGPT that combines personalized health data with stronger privacy and security controls to support not replace conversations with clinicians. The…
n8n Users Urged to Patch CVSS 10.0 Full System Takeover Vulnerability – Hackread – Cybersecurity News, Data Breaches, AI, and More
If your company uses n8n to handle daily tasks, it is time to check your version number. A major security flaw has been found in…
Australian Electoral Commission hits go on generative AI
The Australian Electoral Commission will have a draft strategy and roadmap to accelerate its adoption of generative AI by mid-June. The commission will outsource the…
New OAuth-Based Attack Let Hackers Bypass Microsoft Entra Authentication Flows to Steal Keys
The security landscape faced a significant challenge just before the year’s end with the emergence of ConsentFix, an ingenious OAuth-based attack that exploits legitimate authentication…
Cisco ISE Vulnerability Enables Access to Sensitive Data
Cisco has disclosed a new XML External Entity (XXE) vulnerability in Cisco Identity Services Engine (ISE) and Cisco ISE Passive Identity Connector (ISE-PIC) that could…
CrowdStrike to buy identity startup SGNL for nearly $740M
CrowdStrike is buying identity management startup SGNL, a move that underscores how identity security has become a central battleground in enterprise cybersecurity as companies add…