New Obex Tool Blocks EDR Dynamic Libraries From Loading at Runtime
A new proof-of-concept (PoC) tool named Obex has been released, offering a method to prevent Endpoint Detection and Response (EDR) and other monitoring solutions’ dynamic-link…
Author: Cybernoz
$20 YoLink IoT Gateway Vulnerabilities Put Home Security at Risk
Cybersecurity researchers at Bishop Fox have revealed security vulnerabilities in the popular, inexpensive YoLink Smart Hub (v0382), leaving users exposed to remote attackers. The hub…
Scam Facebook groups send malicious Android malware to seniors
An infostealer and banking Trojan rolled into one is making the rounds in Facebook groups aimed at “active seniors”. Attackers used social engineering methods to…
Malicious PyPI Package soopsocks Infects 2,653 Systems Before Takedown
Oct 02, 2025Ravie LakshmananPython / Malware Cybersecurity researchers have flagged a malicious package on the Python Package Index (PyPI) repository that claims to offer the…
Aston University partners Capgemini for AI centre of excellence
Aston University has opened a centre of excellence to bring together businesses, academia and policy-makers to support the adoption of artificial intelligence (AI), working with…
Google Patches “Gemini Trifecta” Vulnerabilities in Gemini AI Suite
Cybersecurity researchers at Tenable recently discovered three critical security flaws within Google’s Gemini AI assistant suite, which they’ve dubbed “Gemini Trifecta.” These vulnerabilities, publicly disclosed…
Oracle customers targeted with emails claiming E-Business Suite breach, data theft
Unknown attackers claiming affiliation with the Cl0p extortion gang are hitting business and IT executives at various companies with emails claiming that they have exfiltrated…
Google Mandiant Probes New Oracle Extortion Wave Possibly Linked to Cl0p Ransomware
Oct 02, 2025Ravie LakshmananRansomware / Threat Intelligence Google Mandiant and Google Threat Intelligence Group (GTIG) have disclosed that they are tracking a new cluster of…
WireTap Attack Breaks Intel SGX Security
A group of academic researchers from Georgia Tech and Purdue University has demonstrated that a passive DIMM interposer can be used to break Intel SGX’s…
Rethinking NHI Security: The Essential Shift to Zero Trust Security and Ephemeral Identities
As identity security becomes increasingly critical in cybersecurity, the focus has shifted from safeguarding human identities to protecting Non-Human Identities (NHIs)—such as API keys, service accounts,…
Sophos: Defeat Cyberattacks With Cybersecurity-as-a-Service
CEO Joe Levy explains how Sophos defeats cyberattacks with an adaptive AI-native open platform and unmatched security expertise in a new video on the award-winning Cybercrime Magazine YouTube channel.…
7 Key Workflows for Maximum Impact
Penetration testing is critical to uncovering real-world security weaknesses. With the shift into continuous testing and validation, it is time we automate the delivery of…