The Financialization of Cybercrime – Cyber Defense Magazine
Cybercrime is no longer a collection of isolated hackers hiding in dark basements—it has become a global, professionalized economy. Today’s attackers don’t just write malware;…
Author: Cybernoz
Week in review: Actively exploited Windows SMB flaw, trusted OAuth apps turned into cloud backdoors
Here’s an overview of some of last week’s most interesting news, articles, interviews and videos: Most AI privacy research looks the wrong wayMost research on…
Security Affairs newsletter Round 547 by Pierluigi Paganini – INTERNATIONAL EDITION
Security Affairs newsletter Round 547 by Pierluigi Paganini – INTERNATIONAL EDITION Pierluigi Paganini October 26, 2025 A new round of the weekly Security Affairs newsletter…
706,000+ BIND 9 Resolver Instances Vulnerable to Cache Poisoning Exposed Online
A high-severity vulnerability in BIND 9 resolvers has been disclosed, potentially allowing attackers to poison caches and redirect internet traffic to malicious sites. Tracked as…
LockBit 5.0 Actively Attacking Windows, Linux, and ESXi Environments
The notorious LockBit ransomware operation has resurfaced with a vengeance after months of dormancy following Operation Cronos takedown efforts in early 2024. Despite law enforcement…
Hackers Weaponizing Telegram Messenger with Dangerous Android Malware to Gain Full System Control
A sophisticated backdoor named Android.Backdoor.Baohuo.1.origin has been discovered in maliciously modified versions of Telegram X messenger, granting attackers complete control over victims’ accounts while operating…
Vault Viper Exploits Online Gambling Websites Using Custom Browser to Install Malicious Program
Southeast Asia’s online gambling ecosystem has become a breeding ground for sophisticated cyber threats, with criminal networks leveraging seemingly legitimate platforms to distribute malicious software…
Google Warns of Threat Actors Using Fake Job Posting to Deliver Malware and Steal Credentials
Cybercriminals have adopted a sophisticated social engineering strategy that exploits the trust inherent in job hunting, according to a recent security advisory. A financially motivated…
Hackers Hijacking IIS Servers in The Wild Using Exposed ASP .NET Machine Keys to Inject Malicious Modules
A sophisticated cyberattack campaign targeting Microsoft Internet Information Services (IIS) servers has emerged, exploiting decades-old security vulnerabilities to deploy malicious modules that enable remote command…
New Phishing Attack Bypasses Using UUIDs Unique to Bypass Secure Email Gateways
A sophisticated phishing campaign leveraging randomly generated Universal Unique Identifiers (UUIDs) has emerged, successfully bypassing Secure Email Gateways (SEGs) and evading perimeter defenses. The attack…
Hackers Use ClickFix Technique to Deploy NetSupport RAT Loaders
Cybercriminals are increasingly using a technique known as “ClickFix” to deploy the NetSupport remote administration tool (RAT) for malicious purposes. According to a new report…
Russian Rosselkhoznadzor hit by DDoS attack, food shipments across Russia delayed
Russian Rosselkhoznadzor hit by DDoS attack, food shipments across Russia delayed Pierluigi Paganini October 25, 2025 A DDoS attack on Russia’s food safety agency Rosselkhoznadzor…