Microsoft pulls back from more data centre leases – Cloud
Microsoft has abandoned data centre projects set to use two (2) gigawatts of electricity in the US and Europe in the last six months due…
Author: Cybernoz
Hive Five 211 – Stop Working So Hard
A while ago I asked what you wanted me to improve. This led to me revamping part of my premium offering. Instead of a constant…
Google fixed the first actively exploited Chrome zero-day since the start of the year
Google fixed the first actively exploited Chrome zero-day since the start of the year Pierluigi Paganini March 26, 2025 Google fixed a flaw in the…
Using the Smartest AI to Rate Other AI
The structure of the rate_ai_result Stitch Since early 2023 I’ve wanted a system that can assess how well AI does at a given task. And…
Introducing Burp Suite’s game-changing performance update | Blog
Amelia Coen | 12 September 2024 at 11:55 UTC Hands-on security testers need the best tools for the job. Tools you have faith in, and…
![[tl;dr sec] #268 - AI-powered Burp Suite, OAuth Vulnerabilities, Subtle LLM Backdoors](https://image.cybernoz.com/wp-content/uploads/2025/03/1743080265_tldr-sec-268-AI-powered-Burp-Suite-OAuth-Vulnerabilities-Subtle.png)
[tl;dr sec] #268 – AI-powered Burp Suite, OAuth Vulnerabilities, Subtle LLM Backdoors
How Burp Suite is adding AI-powered features, understanding and mitigating OAuth vulns, a PoC to subtly backdoor an LLM I hope you’ve been doing well!…
Researchers back claim of Oracle Cloud breach despite company’s denials
Dive Brief: Security researchers said they confirmed a breach of Oracle Cloud after a previously unknown threat actor posted an offer to sell more than…
Senators criticize Trump officials’ discussion of war plans over Signal, but administration answers don’t come easily
Democratic senators hammered two top national security officials Tuesday about their participation in a Signal chat discussing war plans that reportedly included a journalist, but struggled…
ESET Research Podcast: Gamaredon
ESET researchers introduce the Gamaredon APT group, detailing its typical modus operandi, unique victim profile, vast collection of tools and social engineering tactics, and even…
StreamElements discloses third-party data breach after hacker leaks data
Cloud-based streaming company StreamElements confirms it suffered a data breach at a third-party service provider after a threat actor leaked samples of stolen data on…
Classiscam Actors Automate Malicious Websites To Steal Financial Data
Online marketplaces have become increasingly popular in developing countries since 2015, providing platforms for trading various goods from used electronics to brand-new items. This digitalization…
Rethinking SAP Security Without Maintenance Contracts
Do you rely on SAP maintenance contracts to keep vulnerabilities in check? Here’s a question: have you felt the sting of renewal season? Those spiraling…