PoC Released for Nothing Phone Code-Execution Vulnerability
A proof-of-concept exploit has been published for a critical flaw in the secure boot process of the Nothing Phone (2a) and CMF Phone 1. This…
Author: Cybernoz
Lightship Security and the OpenSSL Corporation Submit OpenSSL 3.5.4 for FIPS 140-3 Validation
Newark, United States, October 9th, 2025, CyberNewsWire Lightship Security, an Applus+ Laboratories company and accredited cryptographic security test laboratory, and the OpenSSL Corporation, the co-maintainer…
Discord Data Breach Exposes 70,000 User ID Photos
A recent cyberattack on a third-party vendor has led to a data breach at Discord, potentially compromising the sensitive personal information of approximately 70,000 users.…
Realm.Security Raises $15 Million in Series A Funding
Cybersecurity startup Realm.Security has announced raising $15 million in Series A funding, bringing the total raised by the company to $20 million. The investment round…
Hacktivists target critical infrastructure, hit decoy plant
A pro-Russian hacktivist group called TwoNet pivoted in less than a year from launching distributed denial-of-service (DDoS) attacks to targeting critical infrastructure. Recently, the threat…
New Hacker Alliance Trinity of Chaos Leaked 39 Companies Data Including Google, CISCO and Others
The cybersecurity landscape has been shaken by the emergence of Trinity of Chaos, a sophisticated ransomware collective that has launched a data leak site containing…
VirusTotal Introduces Simplified Platform Access and New Contributor Model
VirusTotal, the collaborative malware analysis platform, has announced a major update to simplify access and reward contributors. The changes aim to make the platform easier…
California just put people back in control of their data
California’s 2025 legislative session closed with 14 new privacy and AI-related bills. We’d like to highlight a few of the most relevant signed bills and…
GitHub Copilot Chat Flaw Leaked Data From Private Repositories
Legit Security has detailed a vulnerability in the GitHub Copilot Chat AI assistant that led to sensitive data leakage and full control over Copilot’s responses.…
API Attack Awareness: Injection Attacks in APIs
Injection attacks are among the oldest tricks in the attacker playbook. And yet they persist. The problem is that the core weakness, trusting user inputs…
Microsoft Events Vulnerability Exposes Users Personal Data From Registration And Waitlist Databases
A significant security flaw has been discovered within the Microsoft Events platform, which could have allowed attackers to access the personal information of users from…
PoC Released for Linux Kernel ksmbd Filesystem Vulnerability
Security researcher Norbert Szetei published the final installment of his deep-dive into the ksmbd filesystem module, culminating in a working proof-of-concept exploit targeting CVE-2025-37947. Unlike…