CISA looks to partners to shore up the future of the CVE Program
The US Cybersecurity and Infrastructure Security Agency (CISA) has affirmed its continuing support for the Common Vulnerabilities and Exposures (CVE) program. “If we want to…
Author: Cybernoz
New HybridPetya Ransomware Bypasses UEFI Secure Boot With CVE-2024-7344 Exploit
Cybersecurity researchers have discovered a new ransomware strain dubbed HybridPetya that resembles the notorious Petya/NotPetya malware, while also incorporating the ability to bypass the Secure…
Retailers turn to tech as in-store crime soars
Sainsbury’s CEO Simon Roberts, Wickes chief David Wood, and Fortnum & Mason boss Tom Athron were among the executives to sign an open letter in…
How this seasoned bug bounty hunter combines Burp Suite and HackerOne to uncover high-impact vulnerabilities | Blog
Amelia Coen | 12 September 2025 at 12:21 UTC Arman S., a full-time independent security researcher and bug bounty hunter, talked us through how he…
Microsoft Patch for Old Flaw Reveals New Kernel Address Leak Vulnerability in Windows 11/Server 2022 24H2
A new kernel address leak vulnerability has been discovered in the latest versions of Windows 11 (24H2) and Windows Server 2022 (24H2). The flaw, identified…
New Malware Abuses Azure Functions to Host Command and Control Infrastructure
A malicious ISO image named Servicenow-BNM-Verify.iso was uploaded to VirusTotal from Malaysia with almost no detections. The image contains four files—two openly visible and two…
Scattered Lapsus$ Hunters Hacker Group Announces Shutdown
Scattered Lapsus$ Hunters, linked to the Jaguar Land Rover cyberattack, claims to shut down as experts suggest the group is fracturing under pressure. For days,…
How AI can help to optimise supply chains under pressure
The flow and ebb of international supply chains is far from new, with the grand medieval churches of the Cotswolds partly paid for by wool…
Samsung fixed actively exploited zero-day
Samsung fixed actively exploited zero-day Pierluigi Paganini September 12, 2025 Samsung fixed the remote code execution flaw CVE-2025-21043 that was exploited in zero-day attacks against…
Man gets over 4 years in prison for selling unreleased movies
A Tennessee court has sentenced a Memphis man who worked for a DVD and Blu-ray manufacturing and distribution company to 57 months in prison for…
New Clickfix Attack Promises “Free WiFi” But Delivers Powershell Based Malware
The Cybersecuritynews researcher team uncovered a sophisticated social engineering campaign that is exploiting the public’s need for free internet access, using deceptive Wi-Fi portals to…
New Malvertising Campaign Exploits GitHub Repositories to Distribute Malware
A sophisticated malvertising campaign has been uncovered targeting unsuspecting users through “dangling commits” in a legitimate GitHub repository. Attackers are injecting promotional content for a…