$577M Cryptocurrency Fraud: Estonian Nationals Admit Guilt
Two Estonian nationals have admitted their roles in planning a massive cryptocurrency Ponzi scheme that defrauded hundreds of thousands of...
Read more →Author: Cybernoz
IDOR vulnerability in ExHub Let Attacker Modify Web Hosting Configuration
A critical Insecure Direct Object Reference (IDOR) vulnerability was recently discovered in ExHub, a cloud-based platform for hulia-based development. This...
Read more →
New Golang-Based Backdoor Uses Telegram Bot API for Evasive C2 Operations
Feb 17, 2025Ravie LakshmananThreat Intelligence / Cyber Attack Cybersecurity researchers have shed light on a new Golang-based backdoor that uses...
Read more →
Opinion: Saudi plans to be an IT superpower, but challenges lie ahead
Saudi Arabia is spending big on IT, and on artificial intelligence (AI) in particular, in an effort to diversify from...
Read more →
whoAMI attack could allow remote code execution within AWS account
whoAMI attack could allow remote code execution within AWS account Pierluigi Paganini February 17, 2025 Researchers warn that the whoAMI...
Read more →
Multiple Russian Actors Attacking Orgs To Hack Microsoft 365 Accounts via Device Code Authentication
Security researchers at Volexity have uncovered multiple Russian threat actors conducting sophisticated social engineering and spear-phishing campaigns targeting Microsoft 365...
Read more →
RAG AI: ‘Do it yourself,’ says NYC data scientist
Organisations should build their own generative artificial intelligence-based (GenAI-based) on retrieval augmented generation (RAG) with open sources products such as...
Read more →
Android 16 Blocks Scammers With In-Call Security Features
Google is working to enhance the security of its mobile operating system, focusing on preventing scammers from exploiting certain phone...
Read more →
Indian Post Office Portal Exposed Thousands of KYC Records With Username & Mobile Number
The Indian Post Office portal was found vulnerable to an Insecure Direct Object Reference (IDOR) attack, exposing sensitive Know Your...
Read more →
A path to better data engineering
Today’s data landscape presents unprecedented challenges for organisations, due to the need for businesses to process thousands of documents in...
Read more →
Beware of Fake Outlook Troubleshooting Calls that Ends Up In Ransomware Deployment
A sophisticated cyber threat has emerged in recent weeks, targeting unsuspecting users with fake Outlook troubleshooting calls. These calls, designed...
Read more →
A week in security (February 10 – February 16)
February 14, 2025 – A cybercriminal stole a reported 12 million data records on Zacks’ customers and clients. February 13,...
Read more →