European fintech must take different path to Trump’s US on diversity
The European fintech and banking industry must not follow Trump’s US in cancelling workforce equality programmes and must instead continue to enforce diversity, equity and…
Author: Cybernoz
Massive Iran-linked botnet launches DDoS attacks against telecom, gaming companies
Dive Brief: A massive botnet comprising more than 30,000 hacked security cameras and network video recorders is being used to launch DDoS attacks against telecom…
Attackers Automating Vulnerability Exploits with Few Hours of Disclosure
The cybersecurity landscape of 2024 witnessed an unprecedented increase in mass internet exploitation, driven by attackers’ ability to automate vulnerability exploits within hours of disclosure. …
Njrat Exploits Microsoft Dev Tunnels for C2 Communication
A new campaign involving the notorious remote access trojan (RAT) Njrat has been uncovered, leveraging Microsoft’s Dev Tunnels service for command-and-control (C2) communication. This service,…
Enhancing Mobile Banking Security: Protecting Your Data from Cyber Threats
Mobile banking applications provide convenient access to financial services at fingertips. However, they have also become prime targets for cyber-criminals who use keyloggers and other…
Hackers Exploit Paragon Partition Manager Driver Vulnerability in Ransomware Attacks
Mar 03, 2025Ravie LakshmananRansomware / Vulnerability Threat actors have been exploiting a security vulnerability in Paragon Partition Manager’s BioNTdrv.sys driver in ransomware attacks to escalate…
U.S. Authorities recovered $31 Million Related to 2021 Uranium Finance cyber heist
U.S. Authorities recovered $31 Million Related to 2021 Uranium Finance cyber heist Pierluigi Paganini March 03, 2025 U.S. authorities have recovered $31 million in cryptocurrency…
Nearly 12,000 API keys and passwords found in AI training dataset
Close to 12,000 valid secrets that include API keys and passwords have been found in the Common Crawl dataset used for training multiple artificial intelligence…
HiveOS Vulnerabilities Let Attackers Execute Arbitrary Commands
Security researchers have uncovered three critical vulnerabilities in Extreme Networks’ IQ Engine (HiveOS) that collectively enable authenticated attackers to escalate privileges, decrypt passwords, and execute…
Hackers Abused Google and PayPal’s Infrastructure to Steal Users Personal Data
Cybersecurity researchers have uncovered a sophisticated phishing campaign leveraging Google Ads and PayPal’s infrastructure to deceive users and steal sensitive personal data. The attackers exploited…
U.K. ICO Investigates TikTok, Reddit, and Imgur Over Children’s Data Protection Practices
Mar 03, 2025Ravie LakshmananData Privacy / Compliance The U.K.’s Information Commissioner’s Office (ICO) has opened an investigation into online platforms TikTok, Reddit, and Imgur to…
CMA urged to expedite proposed ‘targeted interventions’ against AWS and Microsoft
Amazon Web Services (AWS) has hit out at the UK competition watchdog for presenting “no credible evidence” to support its claims the public cloud giant’s…