ImmuniWeb enhances AI vulnerability testing and compliance reporting
ImmuniWeb has unveiled a major update to its ImmuniWeb AI Platform, based on ongoing research as well as valuable feedback from customers and partners in…
Author: Cybernoz
NANOREMOTE Malware Leverages Google Drive API for Command-and-Control (C2) to Attack Windows Systems
A sophisticated new Windows backdoor named NANOREMOTE emerged in October 2025, presenting a significant threat to enterprise environments by leveraging legitimate cloud infrastructure for malicious…
CyberVolk Hackers Group With New VolkLocker Payloads Attacks both Linux and Windows Systems
CyberVolk, a pro-Russia hacktivist group, has reemerged with a new ransomware platform called VolkLocker following a period of dormancy in 2025. The group, first documented…
Interview: Erik Mayer, transformation chief clinical information officer, Imperial College
Managing complex responsibilities is a common task for digital leaders. However, for Erik Mayer, transformation chief clinical information officer (CCIO) at Imperial College London and…
What Schrödinger can teach us about cybersecurity
I recently had, what I thought, was a unique brainwave. (Spoiler alert: it wasn’t, but please read on!) As a marketing leader at ESET UK,…
New ConsentFix Attack Let Attackers Hijack Microsoft Accounts by Leveraging Azure CLI
A sophisticated new phishing attack technique called “ConsentFix” that combines OAuth consent phishing with ClickFix-style prompts to compromise Microsoft accounts without requiring passwords or multi-factor…
Elastic detects stealthy NANOREMOTE malware using Google Drive as C2
Elastic detects stealthy NANOREMOTE malware using Google Drive as C2 Pierluigi Paganini December 12, 2025 Elastic found a new Windows backdoor, NANOREMOTE, similar to FINALDRAFT/REF7707,…
Burp On Tour 2025: bringing the AppSec community together around the world | Blog
Amelia Coen | 12 December 2025 at 11:34 UTC In 2025, we set out with a simple mission: take Burp Suite on the road and…
Reputation is currency – even in the ransomware economy
Being seen as reliable is good for ‘business’ and ransomware groups care about ‘brand reputation’ just as much as their victims 11 Dec 2025 • …
New Windows RasMan zero-day flaw gets free, unofficial patches
Free unofficial patches are available for a new Windows zero-day vulnerability that allows attackers to crash the Remote Access Connection Manager (RasMan) service. RasMan is…
MITRE Releases Top 25 Most Dangerous Software Weaknesses of 2025
MITRE has unveiled its 2025 Common Weakness Enumeration (CWE) Top 25 Most Dangerous Software Weaknesses list, highlighting the root causes behind 39,080 Common Vulnerability and…
How private is your VPN?
When you’re shopping around for a Virtual Private Network (VPN) you’ll find yourself in a sea of promises like “military-grade encryption!” and “total anonymity!” You…