Threat Actors Exploiting Black Friday Shopping Hype
The 2025 Black Friday shopping season has become a prime hunting ground for cybercriminals, with threat actors recording over 2 million phishing attacks targeting online…
Author: Cybernoz
WhatsApp closes loophole that let researchers collect data on 3.5B accounts
Messaging giant WhatsApp has around three billion users in more than 180 countries. Researchers say they were able to identify around 3.5 billion registered WhatsApp…
Spyware and RATs used to target WhatsApp and Signal Users
CISA: Spyware and RATs used to target WhatsApp and Signal Users Pierluigi Paganini November 25, 2025 CISA warns that threat actors are actively using commercial…
Dartmouth College confirms data breach after Clop extortion attack
Dartmouth College has disclosed a data breach after the Clop extortion gang leaked data allegedly stolen from the school’s Oracle E-Business Suite servers on its…
Microsoft cracks down on malicious meeting invites
Phishing is shifting into places people rarely check. Meeting invites that plant themselves on calendars can survive long after the malicious email is gone. That…
Canon Allegedly Breached by Clop Ransomware via Oracle E-Business Suite 0-Day Hack
Canon has officially confirmed that it was targeted during the widespread hacking campaign exploiting a critical zero-day vulnerability in Oracle E-Business Suite (EBS). The attack,…
The AI Quality Paradox | Daniel Miessler
When excellence itself becomes the marker of AI, not human talent November 24, 2025 Nano Banana Pro has shown me a type of AI dystopia…
Microsoft’s Update Health Tools Configuration Vulnerability Let Attackers Execute Arbitrary Code Remotely
A critical remote code execution (RCE) vulnerability in Microsoft’s Update Health Tools (KB4023057). A widely deployed Windows component designed to expedite security updates through Intune. The flaw…
SitusAMC confirms data breach affecting customer information
SitusAMC confirms data breach affecting customer information Pierluigi Paganini November 25, 2025 SitusAMC says a recent breach exposed customer data; the real-estate financing firm provides…
Keep the Robots Out of the Gym
AI is getting so good now (at the end of 2025) that I now have a new, primary recommendation going into 2026: Think very carefully…
HashiCorp Vault Vulnerability Allow Attackers to Authenticate to Vault Without Valid Credentials
A critical security flaw has been discovered in HashiCorp’s Vault Terraform Provider that could allow attackers to bypass authentication and access Vault without valid credentials.…
A different approach to hiring talent
Thank you for joining! Access your Pro+ Content below. 25 November 2025 Hacker for hire: A different approach to hiring talent Share this item with…