Apple fixes new zero-day flaw exploited in targeted attacks
Apple has released emergency updates to patch another zero-day vulnerability that was exploited in an “extremely sophisticated attack.” Tracked as CVE-2025-43300, this security flaw is…
Author: Cybernoz
Lenovo AI Chatbot Vulnerability Let Attackers Run Remote Scripts on Corporate Machines
A critical security flaw in Lenovo’s AI chatbot “Lena” has been discovered that allows attackers to execute malicious scripts on corporate machines through simple prompt…
A New Malware Loader Spreading Infostealers and Remote Access Trojans (RATs)
IBM X-Force has tracked QuirkyLoader, a sophisticated loader malware deployed by threat actors to distribute prominent families such as Agent Tesla, AsyncRAT, FormBook, MassLogger, Remcos,…
DOM-Based Extension Clickjacking Exposes Popular Password Managers to Credential and Data Theft
Aug 20, 2025Ravie LakshmananVulnerability / Browser Security Popular password manager plugins for web browsers have been found susceptible to clickjacking security vulnerabilities that could be…
Warlock claims more victims as cyber attacks hit Colt and Orange
Warlock, the emergent cyber crime gang that claims it is holding UK network and telecoms services provider Colt’s data to ransom, appears to have hit…
Europol Targets Qilin Ransomware Group With $50k Reward
Qilin has been the top ransomware group in recent months, so it’s not surprising that the group has apparently attracted the attention of law enforcement.…
“Rapper Bot” malware seized, alleged developer identified and charged
The U.S. Department of Justice (DoJ) announced charges against the alleged developer and administrator of the “Rapper Bot” DDoS-for-hire botnet. Ethan Foltz, 22, of Eugene, Oregon, allegedly rented…
How Businesses Stop Complex Social Engineering Attacks Early
Attackers have leveled up. Powered by AI and professional-grade toolkits, today’s social engineering scams are nearly impossible to tell apart from the real thing, and…
Ransomware Attacks in Japan Surge by 1.4 Times, Signaling a Significant Increase in Cyber Threats
Japan saw a significant increase in ransomware attacks in the first half of 2025, with incidences increasing by about 1.4 times over the same period…
Microsoft starts including PQC algorithms in cyber foundations
Two years after the debut of its Quantum Safe Programme (QSP) Microsoft is now moving steadily through the process of incorporating post-quantum cryptography (PQC) algorithms…
DOJ takes action against 22-year-old running RapperBot Botnet
DOJ takes action against 22-year-old running RapperBot Botnet Pierluigi Paganini August 20, 2025 DOJ charges 22-year-old Ethan Foltz of Oregon for running RapperBot, a DDoS…
Hackers Weaponize Active Directory Federation Services and office.com to Steal Microsoft 365 logins
A novel and highly tricky phishing campaign is actively stealing Microsoft 365 credentials by exploiting Microsoft’s own Active Directory Federation Services (ADFS) to redirect users…