Zscaler Expands AI-Driven Security Operations with Red Canary Acquisition
Zscaler Inc. announced on May 27, 2025, a definitive agreement to acquire Red Canary, a leading Managed Detection and Response (MDR) company, in a strategic…
Author: Cybernoz
XenServer Windows VM Tools Flaw Enables Attackers to Run Arbitrary Code
Citrix has issued a high-severity security bulletin addressing multiple vulnerabilities—CVE-2025-27462, CVE-2025-27463, and CVE-2025-27464—affecting XenServer VM Tools for Windows. These vulnerabilities allow attackers with the ability…
Microsoft Entra Design Lets Guest Users Gain Azure Control, Researchers Say
Cybersecurity researchers at BeyondTrust are warning about a little-known but dangerous issue within Microsoft’s Entra identity platform. The issue isn’t some hidden bug or overlooked…
Westpac pilots AI to analyse inbound call content
Westpac is piloting AI to help its scam and fraud support team process and analyse the information a customer is telling the bank about a…
CFOs, financial execs in crosshairs of ‘highly targeted’ spearphishing campaign
Dive Brief: A “highly targeted” spearphishing campaign is attempting to ensnare financial executives at banks, investment firms, energy utilities and insurance companies around the world,…
Mandiant flags fake AI video generators laced with malware
As the internet fills up with clips from AI-video generators, hacking groups are seeding the online landscape with malware-laced programs and fake websites hoping to…
New PumaBot botnet brute forces SSH credentials to breach devices
A newly discovered Go-based Linux botnet malware named PumaBot is brute-forcing SSH credentials on embedded IoT devices to deploy malicious payloads. The targeted nature of PumaBot…
Hackers Exploit SimpleHelp RMM Tool to Deploy DragonForce Ransomware
Cybercriminals leveraged critical vulnerabilities in remote monitoring software to breach a managed service provider and attack multiple customers. Cybersecurity researchers at Sophos have revealed details…
Russian APT28 Hackers Attacking NATO-aligned organizations to Steal Sensitive data
Russia’s GRU-backed APT28, widely known as Fancy Bear, has intensified its cyber espionage campaign against NATO-aligned organizations. Active since at least 2007, this notorious threat…
Post-Quantum Cryptography Migration Should Start Now
As estimates of the quantum computing power needed to crack current public key encryption algorithms continue to drop, a group of technology companies and organizations…
MATLAB Maker MathWorks Recovering From Ransomware Attack
Software maker MathWorks this week confirmed that a widespread outage that has impacted its applications since May 18 was the result of a ransomware attack.…
Chinese hackers used Google Calendar to aid attacks on government entities
Google said Wednesday that it caught suspected People’s Republic of China-backed hackers leveraging its Calendar service to help stealthily stage attacks on government agencies. In…