3 Best VPN for iPhone (2025), Tested and Reviewed
Other iPhone VPNs We Tested Surfshark: Surfshark was a strong contender for the main list. Even its Starter plan comes with extra features like a…
Author: Cybernoz
Malicious NPM Packages Used in Sophisticated Developer Cyberattack
In October 2025, security researchers uncovered an unprecedented phishing campaign that weaponizes the npm ecosystem—not by infecting developers during package installation, but by abusing the…
ScreenConnect Abused by Threat Actors to Gain Unauthorized Remote Access to Your Computer
Remote monitoring and management (RMM) tools have long served as indispensable assets for IT administrators, providing seamless remote control, unattended access, and scripted automation across…
SAP NetWeaver Memory Corruption Flaw Lets Attackers Send Corrupted Logon Tickets
A newly disclosed vulnerability in SAP NetWeaver AS ABAP and ABAP Platform (CVE-2025-42902) allows unauthenticated attackers to crash server processes by sending malformed SAP Logon…
How Top SOCs Stay Up-to-Date on Current Threat Landscape
The cyber-threat landscape changes hourly. Infrastructure used in phishing, malware delivery, and command-and-control campaigns appears and disappears within minutes. For a SOC that still relies…
SimonMed Data Breach Exposes 1.2 Million Patients Sensitive Information
SimonMed Imaging, a leading U.S. provider of outpatient medical imaging services, has disclosed a major cybersecurity incident that compromised the personal and health data of…
Hackers Mimic as OpenAI and Sora Services to Steal Login Credentials
Hackers have launched a sophisticated phishing campaign impersonating both OpenAI and the recently released Sora 2 AI service. By cloning legitimate-looking landing pages, these actors…
Astaroth Trojan Uses GitHub Images to Stay Active After Takedowns
A new report from McAfee Labs reveals that a dangerous banking trojan, Astaroth, is being distributed with a worrying new trick to stay active- abusing…
Vox pop: Digital transformation across the Arab world
The Middle East region is massively varied when it comes to readiness for digital transformation. Many states – notably those of the Gulf and Arabian…
North Korean IT Workers Use VPNs and Laptop Farms to Evade Identity Verification
In a sprawling network of covert remote labor, more than 10,000 North Korean IT professionals have infiltrated global technology and freelance marketplaces by exploiting VPNs,…
Critical CVE-2025-61927 VM Context Escape In Happy DOM Library
A critical security flaw has been identified in Happy DOM, a widely used JavaScript library primarily employed for server-side rendering and testing frameworks. The vulnerability,…
Unverified COTS hardware enables persistent attacks in small satellites via SpyChain
Unverified COTS hardware enables persistent attacks in small satellites via SpyChain Pierluigi Paganini October 14, 2025 SpyChain shows how unverified COTS hardware in small satellites…