Phishing Attack Bypasses FIDO Key Authentication
A phishing campaign is bypassing FIDO key authentication by exploiting cross-device sign-in features, a managed detection and response (MDR) provider has discovered. The attack campaign,…
Author: Cybernoz
Alaska Airlines grounds all flights after IT outage disrupts systems
US carrier Alaska Airlines grounded its flights after an IT outage that affected its systems, the company said. The unspecified outage marks the second time…
After website hack, Arizona election officials unload on Trump’s CISA
Arizona election officials say a hack targeting a statewide online portal for political candidates resulted in the defacement and replacement of multiple candidate photos with…
UNG0002 Deploys Weaponized LNK Files with Cobalt Strike and Metasploit to Target Organizations
Seqrite Labs APT-Team has uncovered a persistent threat entity, UNG0002 (Unknown Group 0002), orchestrating espionage-driven operations across Asian jurisdictions, including China, Hong Kong, and Pakistan.…
US National Guard unit ‘extensively’ hacked by Salt Typhoon in 2024
An American state’s Army National Guard network was thoroughly hacked by a Chinese cyberespionage group nicknamed “Salt Typhoon,” according to a Department of Homeland Security memo.…
Why Religion is More Dangerous Than Handguns
We’ve been debating agnosticism and atheism here for the last couple of weeks. One of the sub-arguments that has pronounced itself has come from my…
Threat Actors Compromise Popular npm Packages to Steal Maintainers’ Tokens
Threat actors have leveraged a phishing campaign targeting npm package maintainers, resulting in the compromise of widely used JavaScript tooling libraries. The campaign, first reported…
MuddyWater deploys new DCHSpy variants amid Iran-Israel conflict
MuddyWater deploys new DCHSpy variants amid Iran-Israel conflict Pierluigi Paganini July 21, 2025 Iran-linked APT MuddyWater is deploying new DCHSpy spyware variants to target Android…
Why Religion is More Dangerous Than Handguns
We’ve been debating agnosticism and atheism here for the last couple of weeks. One of the sub-arguments that has pronounced itself has come from my…
Ring denies breach after users report suspicious logins
Ring is warning that a backend update bug is responsible for customers seeing a surge in unauthorized devices logged into their account on May 28th.…
Beware of npm Phishing Emails Targeting Developer Credentials
An developer recently came across a highly advanced phishing email that spoofs the support@npmjs.org address in order to impersonate npm, the Node.js package registry. The…
NailaoLocker Ransomware Attacking Windows Systems Using Chinese SM2 Cryptographic Standard
FortiGuard Labs has discovered a sophisticated new ransomware strain called NailaoLocker that represents a significant departure from conventional encryption malware. This Windows-targeting threat introduces the…