High-severity Windows SMB flaw now exploited in attacks
CISA says threat actors are now actively exploiting a high-severity Windows SMB privilege escalation vulnerability that can let them gain SYSTEM privileges on unpatched systems.…
Author: Cybernoz
Winos 4.0 Malware Uses Weaponized PDFs Posing as Government Departments to Infect Windows Machines
Security researchers are tracking a high-severity malware campaign that uses weaponized PDF files to distribute the Winos 4.0 malware. The threat actors impersonate government departments…
What does Google know about me? (Lock and Code S06E21)
This week on the Lock and Code podcast… Google is everywhere in our lives. It’s reach into our data extends just as far. After investigating…
Self-spreading GlassWorm malware hits OpenVSX, VS Code registries
A new and ongoing supply-chain attack is targeting developers on the OpenVSX and Microsoft Visual Studio marketplaces with self-spreading malware called GlassWorm that has been…
Hard-coded credentials found in Moxa industrial security appliances, routers (CVE-2025-6950)
Moxa has fixed 5 vulnerabilities in its industrial network security appliances and routers, including a remotely exploitable flaw (CVE-2025-6950) that may result in complete system…
Top cybersecurity conferences to attend in 2026
2026 is almost upon us, and with it comes a slate of must-attend cybersecurity conferences. Security experts from across sectors will come together to hear…
Judge forbids NSO Group from targeting WhatsApp users
WhatsApp has won a ruling against spyware maker NSO Group forbidding it from targeting its users, while NSO Group in the same ruling got a…
Microsoft fixes Windows Server Active Directory sync issues
Microsoft is rolling out a fix for Active Directory issues affecting some Windows Server 2025 systems after installing security updates released since September. As Redmond…
Major AWS outage disrupts apps and services worldwide
Network connectivity issues in AWS’ US-EAST-1 facility have caused widespread outages affecting thousands of websites along with some of the world’s most popular apps –…
Reflected XSS: Advanced Exploitation Guide
Cross-site scripting vulnerabilities are, by no doubt, one of the vulnerability types that’ll keep haunting applications for a long time. This seamless injection bug can…
Why security awareness training doesn’t work — and how to fix it
Listen to the article 13 min This audio is auto-generated. Please let us know if you have feedback. Government agencies, private businesses and nonprofit organizations…
The Rise of AI-Powered Cyberattacks: Is BFSI Ready?
For those of us who’ve tracked the ever-shifting landscape of cybersecurity, the narrative has always been one of escalating threats met with evolving defenses. But…