Shuyal Stealer Attacking 19 Browsers to Steal Login Credentials
Shuyal Stealer has rapidly ascended as one of the most versatile credential theft tools observed in recent months. First detected in early August 2025, its…
Author: Cybernoz
Hackers Targeting WordPress Plugin Vulnerability to Seize Admin Access
A critical authentication bypass in the Service Finder Bookings plugin has enabled unauthenticated attackers to assume administrator privileges on thousands of WordPress sites. Exploitation began…
Fake Teams Installers Dropping Oyster Backdoor (aka Broomstick)
A major new threat is targeting everyday computer users by hiding a dangerous program inside what looks like a genuine Microsoft Teams installer. This malicious…
Ootbi Mini delivers zero trust, immutable data protection
Object First unveiled Ootbi Mini, a new compact immutable storage appliance designed for remote and branch offices, edge environments, and small businesses to ransomware-proof local…
AI Becomes Russia’s New Cyber Weapon in War on Ukraine
Oct 09, 2025Ravie LakshmananArtificial Intelligence / Malware Russian hackers’ adoption of artificial intelligence (AI) in cyber attacks against Ukraine has reached a new level in…
Chinese Hackers Breached Law Firm Williams & Connolly via Zero-Day
Law firm Williams & Connolly said state-sponsored hackers breached some of its systems and gained access to attorney email accounts. The prominent Washington, DC-based law…
PoC Exploit Released For Nothing Phone Code Execution Vulnerability
A proof-of-concept (PoC) exploit has been released for a critical vulnerability in the secure boot chain of the Nothing Phone (2a) and CMF Phone 1,…
Polymorphic Python Malware That Mutates Every Time It Runs
A newly spotted Python remote access trojan (RAT) on VirusTotal employs advanced polymorphic and self-modifying techniques, allowing it to alter its code signature on every…
Outdated encryption leaves crypto wide open
The cryptocurrency sector faces an existential threat on two fronts: none of the 2,138 web applications and 146 mobile apps tested by ImmuniWeb support post-quantum…
One stolen iPhone uncovered a network smuggling thousands of devices to China
If you think Apple’s ‘Find My’ feature was just there to help you locate your phone when it slipped down the side of the couch,…
Telstra Data Breach Denied After Hacker Claims Stolen Data
Telstra, one of Australia’s leading telecommunications providers, has denied claims of a data breach related to the Scattered Spider group. In response to the claims…
Discord Says 70,000 Users Had IDs Exposed in Recent Data Breach
Social media platform Discord on Wednesday confirmed that hackers stole photos of government identification documents for 70,000 users as part of the recent data breach.…