Author: Cybernoz

Misconfigured Kubernetes RBAC in Azure Airflow Could Expose Entire Cluster to Exploitation
31
Dec
2024

Misconfigured Kubernetes RBAC in Azure Airflow Could Expose Entire Cluster to Exploitation

Cybersecurity researchers have uncovered three security weaknesses in Microsoft’s Azure Data Factory Apache Airflow integration that, if successfully exploited, could…

The state of cybersecurity and IT talent shortages
31
Dec
2024

The state of cybersecurity and IT talent shortages

This article highlights key findings and trends in the 2024 IT and cybersecurity skills gap, from the shortage of cybersecurity…

U.S. Army Soldier Arrested in AT&T, Verizon Extortions – Krebs on Security
31
Dec
2024

U.S. Army Soldier Arrested in AT&T, Verizon Extortions – Krebs on Security

Federal authorities have arrested and indicted a 20-year-old U.S. Army soldier on suspicion of being Kiberphant0m, a cybercriminal who has…

Hottest cybersecurity open-source tools of the month: December 2024
31
Dec
2024

Hottest cybersecurity open-source tools of the month: December 2024

This month’s roundup features exceptional open-source cybersecurity tools that are gaining attention for strengthening security across various environments. SafeLine: Open-source…

US Treasury Department Admits It Got Hacked by China
31
Dec
2024

US Treasury Department Admits It Got Hacked by China

“I cannot believe that we’re seeing command injection vulnerabilities in 2024 in any products, let alone a secure remote access…

Cisco Data Authenticity
31
Dec
2024

Cisco Data Breach – Authenticity of 4.45GB Data Leak Verified

Cisco has confirmed the authenticity of a 4.45GB data leak posted online by the hacker known as IntelBroker. The leaked…

US Treasury Department Hacked
31
Dec
2024

US Treasury Department Hacked – Attackers Gained Access to Workstations

A Chinese state-sponsored hacker has successfully breached the US Treasury Department’s systems, gaining access to employee workstations and unclassified documents,…

An X user claimed a 7-Zip zero-day vulnerability, but 7-Zip's creator says is a fake
31
Dec
2024

An X user claimed a 7-Zip zero-day vulnerability, but 7-Zip’s creator says is a fake

An X user claimed a 7-Zip zero-day vulnerability, but 7-Zip’s creator says is a fake Pierluigi Paganini December 31, 2024…

Post Office scandal campaigners awarded OBEs in New Year Honours List
31
Dec
2024

Post Office scandal campaigners awarded OBEs in New Year Honours List

Former subpostmasters and leading campaigners in the Post Office scandal have been honoured for their decades-long fight against the injustices…

Chinese Salt Typhoon cyber espionage targets AT&T, Verizon
31
Dec
2024

Chinese Salt Typhoon cyber espionage targets AT&T, Verizon – Security

The Chinese-linked Salt Typhoon cyberespionage operation targeted AT&T and Verizon’s systems, but the wireless carriers’ US networks are now secure…

Treasury Department
31
Dec
2024

US Treasury Department breached through remote support platform

Chinese state-sponsored threat actors hacked the U.S. Treasury Department after breaching a remote support platform used by the federal agency. In…

16 Chrome Extensions Hacked in Large-Scale Credential Theft Scheme
31
Dec
2024

16 Chrome Extensions Hacked in Large-Scale Credential Theft Scheme

SUMMARY Large-Scale Breach: Over 16 Chrome extensions were compromised, exposing 600,000+ users to data and credential theft. Phishing Attack: Developers…