Critical Docker Desktop flaw lets attackers hijack Windows hosts
A critical vulnerability in Docker Desktop for Windows and macOS allows compromising the host by running a malicious container, even if the Enhanced Container Isolation (ECI)…
Author: Cybernoz
Kimsuky APT Data Leak – GPKI Certificates, Rootkits and Cobalt Strike Personal Uncovered
In late June 2025, a significant operational dump from North Korea’s Kimsuky APT group surfaced on a dark-web forum, exposing virtual machine images, VPS infrastructure,…
Digital Nomads and Cybersecurity: Navigating the New Frontier of Work
We live in an era where your next big idea could come from an employee working out of a cafe in Tokyo or on the…
Chinese APT Leverages Proxy and VPN Services to Obfuscate Infrastructure
A significant data dump surfaced on DDoSecrets.com, purportedly extracted from a workstation belonging to a threat actor targeting organizations in South Korea and Taiwan. The…
Only 7 Days Left for Early Bird Registration to the OpenSSL Conference 2025
Newark, United States, August 25th, 2025, CyberNewsWire Only 7 days left to secure the Early Bird registration at the OpenSSL Conference 2025, October 7 –…
ScreenConnect admins targeted with spoofed login alerts
ScreenConnect cloud administrators across all region and industries are being targeted with fake email alerts warning about a potentially suspicious login event. The goal of…
Ransomware attack volumes up nearly three times on 2024
The number of ransomware attacks that were observed and tracked during the first six months of 2025 was up by 179% – almost three times…
Defending against malware persistence techniques with Wazuh
Malware persistence techniques enable attackers to maintain access to compromised endpoints despite system reboots, credential changes, or other disruptions. Common methods include altering configurations, injecting…
5 Common Back-to-School Online Scams Powered Using AI and How to Avoid Them
As students return to campus and online learning platforms, cybercriminals are increasingly leveraging artificial intelligence to create sophisticated scams targeting the education sector. These AI-enhanced…
Hackers Use AI-Generated Summaries to Deliver Ransomware Payloads
Cybercriminals have unveiled a novel variation of the ClickFix social engineering technique that weaponizes AI-powered summarization tools to stealthily distribute ransomware instructions. By leveraging invisible…
National Public Data Relaunches Despite 2.9 Billion SSNs Breach
National Public Data (NPD) is back under new ownership after leaking 2.9B records, raising new concerns about data brokers and privacy risks. When the National…
Cloudflare secures sensitive data without fully restricting AI usage
Cloudflare announced new capabilities for Cloudflare One, its zero trust platform, designed to help organizations securely adopt, build and deploy emerging generative AI applications. With…