Sweet Security Brings Runtime-CNAPP Power to Windows
Tel Aviv, Israel, October 29th, 2025, CyberNewsWire Sweet Security Brings Runtime-CNAPP Power to Windows Sweet Security, a leader in Runtime Cloud and AI security solutions,…
Author: Cybernoz
Hackers Hijack Corporate XWiki Servers for Crypto Mining – Hackread – Cybersecurity News, Data Breaches, Tech, AI, Crypto and More
A critical security flaw is being actively exploited by cybercriminals to compromise corporate XWiki servers for cryptomining. This is an urgent threat targeting unpatched installations…
OpenAI’s gpt-oss-safeguard enables developers to build safer AI
OpenAI is releasing a research preview of gpt-oss-safeguard, a set of open-weight reasoning models for safety classification. The models come in two sizes: gpt-oss-safeguard-120b and…
Experts Reports Sharp Increase in Automated Botnet Attacks Targeting PHP Servers and IoT Devices
Oct 29, 2025Ravie LakshmananVulnerability / Internet of Things Cybersecurity researchers are calling attention to a spike in automated attacks targeting PHP servers, IoT devices, and…
Typosquatted Npm Packages Deliver Cross-Platform Malware
Security researchers have disclosed a campaign of typosquatted npm packages that automatically execute on install and ultimately deliver a cross-platform credential stealer. According to researchers, the malicious packages were first published on…
AI adoption outpaces corporate governance, security controls
Dive Brief: The use of AI in the corporate workplace is growing so quickly that companies do not have the proper security controls and frameworks…
An Automated Exploitation Toolkit Targeting Hikvision IP Cameras
A new open-source tool called HikvisionExploiter has emerged, designed to automate attacks on vulnerable Hikvision IP cameras. Released on GitHub in mid-2024 but gaining renewed…
PureHVNC RAT Distributed via Weaponized Judicial Documents
The campaign leverages judicial document themes to distribute Hijackloader malware, which subsequently deploys PureHVNC remote access trojan (RAT)—marking the first observed instance where this combination…
Post Office Capture redress scheme ‘went down like lead balloon’ and is ‘discriminatory’
A former subpostmaster who suffered at the hands of the Post Office’s faulty Capture accounting software has said the announced compensation scheme “discriminates” against claimants.…
Russian hackers, likely linked to Sandworm, exploit legitimate tools against Ukrainian targets
Russian hackers, likely linked to Sandworm, exploit legitimate tools against Ukrainian targets Pierluigi Paganini October 29, 2025 Russian actors, likely linked to Sandworm, targeted Ukrainian…
AI risks pack a punch, but governance provides a buffer
Dive Brief: Enterprise decision-makers say AI risks are packing a punch as adoption grows and tool rollouts continue, according to an EY survey of nearly…
Streamlining Patching and Vulnerability Remediation
For years, patch management has been one of the least glamorous yet most consequential aspects of IT operations. Vulnerabilities emerge daily, and while most administrators…