The Worst Hacks of 2025
It was a strange year in cyberspace, as US president Donald Trump and his administration launched foreign policy initiatives and massive changes to the federal…
Author: Cybernoz
Malware in 2025 spread far beyond Windows PCs
This blog is part of a series highlighting new and concerning trends we noticed over the last year. Trends matter because they almost always provide…
Fortinet warns of 5-year-old FortiOS 2FA bypass still exploited in attacks
Fortinet has warned customers that threat actors are still actively exploiting a critical FortiOS vulnerability that allows them to bypass two-factor authentication (2FA) when targeting…
The New Surveillance State Is You
Privacy isn’t dead. Just ask Kristi Noem. The Department of Homeland Security secretary has spent 2025 trying to convince the American public that identifying roving…
Grigol Liluashvili Arrested In Georgia Corruption Case
Georgia’s former Head of the State Security Service, Grigol Liluashvili, has been arrested following an investigation into alleged corruption, bribery, and abuse of power. The…
Windows LPE Vulnerabilities via Kernel Drivers and Named Pipes Allows Privilege Escalation
Security researchers are increasingly focusing on privilege escalation attacks through two primary Windows attack surfaces: kernel drivers and named pipes. These vectors exploit fundamental trust…
The Most Dangerous People on the Internet in 2025
In 2025, people who built their careers by being some form of Very Online are now some of the most powerful people in the world.…
Shai-Hulud Returns With ‘Golden Path’ Malware In Latest NPM Attacks
Just weeks after the devastating “Second Coming” campaign crippled thousands of development environments, the threat actor behind the Shai-Hulud worm has returned. Security researchers at…
Top 10 Post Office scandal stories of 2025
The past year has been another relentless one in terms of developments in the Post Office Horizon scandal. If 2024 was the aftermath of the…
The Global Commerce Vulnerability Window
Rizwan Patel, Global Head Cloud, InfoSec and Emerging Technologies, Altimetrik Global commerce no longer pauses between festivals; it moves continuously across markets, moments, and geographies.…
Top 10 cyber security stories of 2025
Artificial intelligence (AI) may have dominated wider tech headlines this year – and this held true in the cyber world as well – but at…
Evasive Panda cyberespionage campaign uses DNS poisoning to install MgBot backdoor
Evasive Panda cyberespionage campaign uses DNS poisoning to install MgBot backdoor Pierluigi Paganini December 29, 2025 China-linked APT Evasive Panda used DNS poisoning to deliver…